Rasmus Wriedt Larsen
9e2eb56032
Python: Remove support for late *args arguments
...
I found this to cause bad performance, so the implementation of this has
to be thought out more carefully.
2023-02-15 09:42:11 +01:00
Anders Schack-Mulligen
b52df0de0c
Merge pull request #12191 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-02-15 09:07:40 +01:00
Harry Maclean
fb14920281
Merge pull request #12056 from hmac/test-refactor
2023-02-15 17:34:25 +13:00
github-actions[bot]
5f07d1f385
Add changed framework coverage reports
2023-02-15 00:17:48 +00:00
Mathias Vorreiter Pedersen
c11218fcde
Merge pull request #12184 from MathiasVP/discriminate-union-contents
2023-02-14 23:36:02 +00:00
erik-krogh
b7305fd229
also consider relative exports when finding library inputs
2023-02-14 21:08:13 +01:00
Chris Smowton
194316d1c0
Accept test changes
...
Some diagnostics have been reworded for Go 1.20, and a standard library type parameter is visible to the TypeParamType test.
2023-02-14 18:33:53 +00:00
Chris Smowton
d075e016b2
Upgrade Go to 1.20
2023-02-14 17:59:18 +00:00
erik-krogh
de4f5017e1
add change-note
2023-02-14 18:36:07 +01:00
Chris Smowton
9e584eb241
Upgrade Go extractor compiler and dependency versions
2023-02-14 17:34:47 +00:00
Chris Smowton
62d10f91d8
Improve join ordering
2023-02-14 17:21:24 +00:00
Chris Smowton
d5f7ef08b7
Update stats
2023-02-14 17:21:24 +00:00
Chris Smowton
7f76d8ae55
Replace redundant use of Class or Interface
2023-02-14 17:21:24 +00:00
Chris Smowton
82a2f4349a
Resolve a newly-introduced ambiguity
...
Also fix a simple redundancy noticed while debugging
2023-02-14 17:21:24 +00:00
Chris Smowton
f48d87ba55
Add deletions for removed tables
2023-02-14 17:21:24 +00:00
Chris Smowton
3514dd1e4d
Java: merge the @class and @interface database types and tables
...
This will allow the extractor to emit class(id, ...) when all it knows about a class is its name, due to not having it available on the classpath. Previously it would have had to guess whether it belonged to @class or @interface, possibly introducing an inconsistency.
2023-02-14 17:21:23 +00:00
Jami
029e1d47fe
Merge pull request #12081 from jcogs33/jcogs33/update-some-Files-sinks
...
Java: update `createTempDirectory` and `copy` "create-file" sinks
2023-02-14 10:53:17 -05:00
Taus
e40bb6ac87
Merge pull request #12029 from github/tausbn/python-clean-up-version-handling
...
Python: Clean up version handling
2023-02-14 16:40:09 +01:00
Alex Ford
8d90c02a67
JS: remove unused field
2023-02-14 15:24:22 +00:00
Jeroen Ketema
899f35a59b
Merge pull request #12185 from jketema/test-annotations
...
C++: Update test annotations for use-use dataflow
2023-02-14 15:48:35 +01:00
Jeroen Ketema
1d4e9745a3
Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2023-02-14 15:40:36 +01:00
Mathias Vorreiter Pedersen
2591460731
Merge pull request #12181 from MathiasVP/fix-node-type
...
C++: Fix node types
2023-02-14 13:54:12 +00:00
Taus
1b30043422
Python: Move change note to correct directory
2023-02-14 13:48:55 +00:00
Jeroen Ketema
9e462866a0
C++: Update test annotations for use-use dataflow
2023-02-14 14:48:08 +01:00
erik-krogh
393649b7ce
don't call environment variables for command-line arguments
2023-02-14 14:27:41 +01:00
Alvaro Muñoz
4644a88b89
address code review comments
2023-02-14 14:27:17 +01:00
Mathias Vorreiter Pedersen
ba0be2fd9f
C++: Better discriminate for unions.
2023-02-14 13:26:40 +00:00
Taus
4f7c598ffc
Python: Add change note
2023-02-14 13:22:48 +00:00
erik-krogh
36478124ae
add process.env and process.argv etc. as source for js/regex-injection
2023-02-14 14:21:53 +01:00
erik-krogh
943bdeca6d
make appliesTo recursive
2023-02-14 14:16:45 +01:00
erik-krogh
9549cac3e5
add an additional barrier guard that finds "=== true" versions of previous barrier guards
2023-02-14 14:15:23 +01:00
erik-krogh
c355a26657
add failing test
2023-02-14 14:12:35 +01:00
erik-krogh
3f0fe96f85
add getBoolValue() as a utility predicate on BooleanLiteral
2023-02-14 14:12:35 +01:00
Erik Krogh Kristensen
2f8c9a5a2c
Merge pull request #12171 from erik-krogh/reg-dot
...
JS: dont recognize regexps that match dot as sanitizers
2023-02-14 14:10:44 +01:00
Erik Krogh Kristensen
e3e2df3247
Merge pull request #12166 from erik-krogh/more-html-san
...
JS: add `HtmlSanitizer` as a sanitizer DOMBasedXss
2023-02-14 14:09:56 +01:00
Taus
39516862c1
Merge remote-tracking branch 'origin/main' into tausbn/python-clean-up-version-handling
2023-02-14 13:07:40 +00:00
Mathias Vorreiter Pedersen
4ba5059064
Merge pull request #12182 from MathiasVP/content-approx
...
C++: Use `Content` approximation
2023-02-14 13:00:47 +00:00
Erik Krogh Kristensen
028fcc7edf
Merge pull request #11959 from erik-krogh/ssrfSan
...
JS: add encodeURIComponent as a sanitizer for request-forgery
2023-02-14 13:39:53 +01:00
Erik Krogh Kristensen
a498936f16
Merge pull request #12170 from erik-krogh/more-lib
...
JS: More library inputs
2023-02-14 13:38:00 +01:00
Erik Krogh Kristensen
bca3fa94fd
Merge pull request #12159 from erik-krogh/express-ws
...
JS: add express-ws as a source
2023-02-14 13:36:33 +01:00
Michael Nebel
469b289db9
C#: Add change note.
2023-02-14 13:14:45 +01:00
Michael Nebel
b3c234d020
C#: Add testcases for checked operators.
2023-02-14 12:59:36 +01:00
Michael Nebel
238a70fc55
C#: Add library support for checked operators.
2023-02-14 12:58:15 +01:00
Michael Nebel
b7123aaa89
C#: Add viable callable testcases for regular and checked operators.
2023-02-14 12:57:59 +01:00
Rasmus Wriedt Larsen
dc5bb4fb77
Python: Update a few examples so queries work on them
...
Fixes problem highlighted in https://github.com/github/codeql/issues/12156
2023-02-14 11:54:18 +01:00
Joe Farebrother
f68083872d
Merge pull request #12174 from joefarebrother/stubgen-name-conflicts
...
Java: Stub generator: Use fully qualified names to avoid conflicts
2023-02-14 10:10:24 +00:00
Mathias Vorreiter Pedersen
b01a45f7be
C++: Respond to PR reviews.
2023-02-14 09:51:48 +00:00
Mathias Vorreiter Pedersen
bda46b3748
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2023-02-14 09:49:32 +00:00
Paolo Tranquilli
81de500301
Swift: fix import not working in all python versions
2023-02-14 10:40:05 +01:00
Mathias Vorreiter Pedersen
ffef81bc47
C++: Add QLDoc.
2023-02-14 09:38:43 +00:00