Tiferet Gazit
7c1bfdbf41
Merge pull request #11511 from github/tiferet/renamings
...
Rename predicates to fit style guide
2022-11-30 18:19:07 -08:00
tiferet
4a6de3e444
Apply suggestion from code review
2022-11-30 17:25:19 -08:00
Harry Maclean
bd129ede42
Merge pull request #11136 from hmac/json-flow-summaries
...
Ruby: JSON flow summaries
2022-12-01 14:19:47 +13:00
tiferet
a0a742eb82
Rename predicates to fit style guide:
...
- `getEndpoints` → `appliesToEndpoint`
- `getImplications` → `hasImplications`
- `getAlerts` → `hasAlert`
2022-11-30 17:01:56 -08:00
Jami Cogswell
94c5d53192
add a couple more tests
2022-11-30 18:51:05 -05:00
Jami Cogswell
22c4d975ad
remove old import
2022-11-30 18:07:45 -05:00
Jami Cogswell
7f45e320d8
add tests
2022-11-30 18:07:45 -05:00
Jami Cogswell
210d8529b6
add query for SupportedExternalApis
2022-11-30 18:07:45 -05:00
Harry Maclean
91421528df
Ruby: Update test
2022-12-01 09:01:03 +13:00
Ed Minnix
04829fc38e
Java: SQLInjection example for addJavaScriptInterface query
2022-11-30 13:32:28 -05:00
Ian Lynagh
cd8c40e063
Kotlin: Enable java/non-serializable-field for Kotlin
...
It now ignores compiler-generated classes
2022-11-30 17:58:43 +00:00
Paolo Tranquilli
4e29ff1d6e
Swift: add -merge-modules to frontend-invocations test
...
Also, moved from Makefile to a bash source.
2022-11-30 17:46:47 +01:00
Ed Minnix
d35321f40e
Java: change WebView addJavascriptInterface query precision to medium
2022-11-30 11:35:14 -05:00
Tony Torralba
6ae10c5171
Merge pull request #11501 from atorralba/atorralba/swift/fix-data-test-expectations
...
Swift: Fix expectations in data.swift
2022-11-30 17:12:32 +01:00
Ed Minnix
e31521bd14
Java: mention the default negative value for setJavaScriptEnabled
2022-11-30 10:56:17 -05:00
Felicity Chapman
86e2333e67
Fix typo and try improving formatting
2022-11-30 15:53:19 +00:00
Edward Minnix III
b189e5b365
Java: fix precision in setJavascriptEnabled query
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2022-11-30 10:45:31 -05:00
Ed Minnix
5ac1e012ae
Java: Mention AssetLoader in WebView file access query documentation
2022-11-30 10:43:53 -05:00
Ed Minnix
c836c4feb7
Java: Specify default value in WebView file access query
2022-11-30 10:43:05 -05:00
Edward Minnix III
710e012e09
Java: fix precision of Android WebView File access query
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2022-11-30 10:41:45 -05:00
Felicity Chapman
3e1d49ad80
First draft update tutorials
2022-11-30 15:38:58 +00:00
Tony Torralba
d958a62bf2
Fix expectations in data.swift
2022-11-30 16:19:55 +01:00
Karim Ali
8f456295e0
Merge pull request #11185 from karimhamdanali/swift-string-taint-steps
...
Swift: add `String` taint steps
2022-11-30 17:03:15 +02:00
erik-krogh
cddc9db690
change back to the old order of extracting externs before Xml
2022-11-30 15:46:46 +01:00
Alex Denisov
0bfe502bb0
Swift: remove patches from the extractor
...
Moved elsewhere https://github.com/dsp-testing/codeql-swift-artifacts/pull/3
2022-11-30 15:36:09 +01:00
Karim Ali
f6bc88471a
update the expected output for CWE-079
...
Now that we have support for taint through fields of String, we can now detect certain flows that we previously marked as [NOT DETECTED]. This commit updates the expected output of CWE-079 (and the in-code annotation of the accompanying test case) to reflect that update.
2022-11-30 16:34:24 +02:00
erik-krogh
6620ba8cc8
Merge branch 'main' into exit-code
2022-11-30 15:26:31 +01:00
Paolo Tranquilli
b8c11de89c
Merge pull request #11498 from github/redsun82/swift-codegen
...
Swift: enhance `codegen` UX
2022-11-30 15:17:18 +01:00
Owen Mansel-Chan
45e2a13c37
Merge pull request #11494 from owen-mc/dataflow/some-trivial-fixes
...
Dataflow: some trivial fixes
2022-11-30 13:59:41 +00:00
Anders Schack-Mulligen
1ce28540fb
Merge pull request #11495 from intrigus-lgtm/patch-7
...
Docs: Add missing `language[monotonicAggregates]` annotation
2022-11-30 14:58:44 +01:00
Paolo Tranquilli
b4e3554af7
Merge pull request #11370 from github/alexdenisov/swift-5.7.1
...
Swift: upgrade to Swift 5.7.1
2022-11-30 14:23:12 +01:00
Paolo Tranquilli
bb3aa9e908
Swift: add --force to codegen
2022-11-30 14:19:33 +01:00
Alex Ford
7de5113e67
Ruby: rails/globalid changenote
2022-11-30 13:01:27 +00:00
Alex Ford
e321657f59
Ruby: model rails/globalid
2022-11-30 12:50:26 +00:00
Paolo Tranquilli
d6aad13a98
Swift: make codegen run when no registry is there
2022-11-30 13:47:12 +01:00
Paolo Tranquilli
76db5f22b3
Swift: make codegen resilient to formatting errors
...
More in general, the managed renderer flow does things more sensibly
in case an exception is thrown:
* it will not remove any file
* it will drop already written files from the registry, so that codegen
won't be skipped for those files during the next run
2022-11-30 13:43:29 +01:00
Tom Hvitved
b33f5925bb
Data flow: Sync files
2022-11-30 13:39:25 +01:00
Tom Hvitved
e0bd210797
Ruby: At most one hash-splat ParameterNode per callable
2022-11-30 13:38:55 +01:00
Felicity Chapman
9eafee365f
Some updates missed in earlier PRs
2022-11-30 12:30:28 +00:00
Tony Torralba
e222807693
Remove dubious sinks
2022-11-30 13:25:17 +01:00
intrigus-lgtm
4e7e70f981
Docs: Add missing language[monotonicAggregates] annotation
...
This adds the `language[monotonicAggregates]` annotation so that the example compiles.
2022-11-30 13:12:06 +01:00
Alex Denisov
fe0ae6bf0b
Swift: add 5.7.1 migration scripts
2022-11-30 12:52:26 +01:00
Alex Denisov
ad663533c7
Swift: bump setup Swift action
2022-11-30 12:40:42 +01:00
Alex Denisov
67fb56deb8
Swift: workaround an internal crash coming from Swift 5.7.1
2022-11-30 12:40:42 +01:00
Alex Denisov
f618d53302
Swift: add new implicit conversion
2022-11-30 12:40:34 +01:00
Alex Denisov
90d471b486
Swift: upgrade to Swift 5.7.1
2022-11-30 12:40:27 +01:00
Felicity Chapman
6dee013baa
Merge branch 'rc/3.8' into felicitymay-8441-basic-query-2
2022-11-30 11:39:20 +00:00
Mathias Vorreiter Pedersen
d53d275bba
Merge pull request #11450 from d10c/swift/missing-enum-cases
...
Swift: extract missing cases of `AccessorKind` and `AccessSemantics` enums
2022-11-30 11:18:52 +00:00
Owen Mansel-Chan
75940dc8b1
Remove @codeql-go from code owners for dataflow
2022-11-30 11:16:53 +00:00
Owen Mansel-Chan
635c202ced
Use ArgumentPosition instead of int
...
This matches what all of the other languages do.
2022-11-30 11:16:52 +00:00
