Arthur Baars
6103c577b6
Address comments
2022-11-30 12:02:42 +01:00
Owen Mansel-Chan
55c4643b20
Dataflow: Sync.
2022-11-30 11:00:07 +00:00
Arthur Baars
cbf4197575
Ruby: add change note
2022-11-30 11:57:35 +01:00
Arthur Baars
0f2cb440b0
Ruby: add flow summary for Enumerable#sole
2022-11-30 11:57:35 +01:00
Arthur Baars
5517cfa6c0
Ruby: add flow summary for Enumerable#pluck
2022-11-30 11:57:35 +01:00
Arthur Baars
207ba86d51
Ruby: add flow summary for Enumerable#pick
2022-11-30 11:57:29 +01:00
Anders Schack-Mulligen
3d04b267ef
Merge pull request #11492 from aschackmull/shared/util
...
Shared: Add Util qlpack.
2022-11-30 11:56:34 +01:00
Paolo Tranquilli
2f4cf592a7
Merge pull request #11490 from github/redsun82/cache
...
CI: add workaround for nested composite actions issue
2022-11-30 11:55:46 +01:00
Owen Mansel-Chan
ce8a20cfd1
Fix variable name (source should be sink)
2022-11-30 10:51:59 +00:00
Anders Schack-Mulligen
758cb8b412
Shared: Fix trailing and non-ascii whitespace.
2022-11-30 11:14:43 +01:00
Tony Torralba
56f5214782
Remove invalid MaD row
2022-11-30 11:10:30 +01:00
Anders Schack-Mulligen
0963b6f221
Java: Replace ad-hoc scc reduction with union-find.
2022-11-30 11:09:25 +01:00
Owen Mansel-Chan
ab276fc5d8
Merge pull request #11481 from owen-mc/dataflow/sync-go-libraries-2
...
Sync go libraries
2022-11-30 10:02:43 +00:00
Tom Hvitved
bfbe5bdfb8
Ruby: Add data flow test that illustrates spurious flow
2022-11-30 11:01:32 +01:00
Anders Schack-Mulligen
ba56565125
Update shared/util/codeql/util/Option.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-30 10:55:07 +01:00
Paolo Tranquilli
e12e86b520
Restore previous cache key
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-30 10:47:29 +01:00
Paolo Tranquilli
d165c4963d
CI: add workaround for nested composite actions issue
...
Because of https://github.com/actions/runner/issues/2009 the deeply
nested action cache was failing to save the cache in the post run phase.
For the moment we just avoid the nesting with a copy-pasted action
snippet.
2022-11-30 10:47:29 +01:00
Paolo Tranquilli
22eb619235
Merge pull request #11467 from erik-krogh/test-ci
...
CI: fix moving the compilation cache
2022-11-30 10:47:07 +01:00
Anders Schack-Mulligen
71f5c8aa88
Shared: Add Util qlpack.
2022-11-30 10:43:33 +01:00
erik-krogh
045e6ef148
remove unused environment variable
2022-11-30 09:59:20 +01:00
erik-krogh
3d0c9c4642
Merge branch 'main' into test-ci
2022-11-30 09:47:08 +01:00
Tony Torralba
594b7efb84
Merge pull request #11485 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2022-11-30 09:16:05 +01:00
Paolo Tranquilli
da5730706d
Merge pull request #11483 from github/redsun82/cache
...
Swift: tentative fix for the bazel cache
2022-11-30 08:25:39 +01:00
tiferet
b885249d9d
Add a boosted version of XssThroughDOM
2022-11-29 17:40:20 -08:00
Tiferet Gazit
e2e3667698
Merge pull request #11323 from github/tiferet/simplify-configs
...
ATM: Simplify query configurations
2022-11-29 17:39:11 -08:00
Harry Maclean
dab7970087
Ruby: Model JSON.pretty_generate
2022-11-30 13:18:45 +13:00
Harry Maclean
14a19d23a6
Ruby: Fix typo in documentation
...
This import isn't needed.
2022-11-30 13:18:45 +13:00
Harry Maclean
67257671ea
Ruby: Remove redundant dataflow test
2022-11-30 13:18:44 +13:00
Harry Maclean
d20d1e5e75
Ruby: Add change note
2022-11-30 13:18:44 +13:00
github-actions[bot]
13f4a0e284
Add changed framework coverage reports
2022-11-30 00:18:26 +00:00
Harry Maclean
35a62018e4
Ruby: US spelling
2022-11-30 13:17:46 +13:00
Harry Maclean
1bd2dd0a6e
Ruby: update test fixture
2022-11-30 13:17:46 +13:00
Harry Maclean
eff763d127
Ruby: Model to_json ActiveSupport extension
2022-11-30 13:17:44 +13:00
Harry Maclean
5259d4af63
Ruby: Model various JSON methods
2022-11-30 13:15:18 +13:00
Harry Maclean
0a98559fcb
Ruby: Add flow summaries for ActiveSupport::JSON
2022-11-30 13:15:16 +13:00
porcupineyhairs
346dd864b5
Update python/ql/lib/change-notes/2022-11-17-py-pam-improve.md
...
fix typo
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2022-11-30 05:21:11 +05:30
tiferet
c5184d37e7
Suggestion from code review:
...
Name the query configuration e.g. `NosqlInjectionATMConfig` rather than `Configuration`.
2022-11-29 15:46:05 -08:00
Harry Maclean
e3def7c22f
Ruby: Add change note
2022-11-30 11:50:47 +13:00
Harry Maclean
aed4325ee3
Ruby: Remove unused class
2022-11-30 11:50:35 +13:00
Harry Maclean
b66ea6ed72
Ruby: Simplify ActionMailbox modeling
2022-11-30 11:46:21 +13:00
Harry Maclean
71f2d8f6d8
Ruby: Model ActionMailbox#inbound_mail
2022-11-30 11:46:21 +13:00
Harry Maclean
eac5aa26ee
Ruby: Model remote input for ActionMailbox
2022-11-30 11:46:21 +13:00
Harry Maclean
375403fb9d
Merge pull request #11114 from hmac/case-barrier-guard-3
...
Ruby: Add case string comparison barrier guard
2022-11-30 11:21:07 +13:00
erik-krogh
0eae638a93
combine into one job, and run on an XL runner
2022-11-29 22:34:31 +01:00
erik-krogh
84ce23249f
use the query compilation cache in the ATM qltest
2022-11-29 22:23:23 +01:00
tiferet
6f807e9d43
Doc suggestion from code review
2022-11-29 13:20:47 -08:00
tiferet
75cd7a9ebc
Remove code duplication in query .ql files:
...
Define the query for finding ATM alerts in the base class `AtmConfig`, and call it from each query's .ql file.
2022-11-29 13:20:47 -08:00
tiferet
a710b723d1
Move the definition of isSink to the base class:
...
Holds if `sink` is a known taint sink or an "effective" sink.
2022-11-29 13:20:47 -08:00
tiferet
cd24ec88d6
Move the definition of isSource to the base class:
...
A long as we're not boosting sources, `isSource` is identical to `isKnownSource`.
2022-11-29 13:20:47 -08:00
tiferet
50291c7b7c
AtmConfig inherits from TaintTracking::Configuration.
...
That way the specific configs which inherit from `AtmConfig` also inherit from `TaintTracking::Configuration`.
This removes the need for two separate config classes for each query.
2022-11-29 13:20:47 -08:00
