Michael Nebel
ba711ab849
Java: Update expected test-output (different sorting).
2023-03-20 10:14:20 +01:00
Michael Nebel
ae12510d8d
Java: Add change-note.
2023-03-20 10:14:20 +01:00
Michael Nebel
9039a468cb
Java: Update models that uses -1 in a range.
2023-03-20 10:14:20 +01:00
Michael Nebel
e86f1e4961
Java: Replace Argument[-1] with Argument[this].
2023-03-20 10:14:20 +01:00
Tom Hvitved
a9ef3f95a2
Ruby: Introduce ContentSet::isElementOfType[OrUnknown]/1
2023-03-20 10:03:15 +01:00
Michael Nebel
e78af3e66c
C#: Introduce Argument and Parameter index validation for models.
2023-03-20 09:38:40 +01:00
Michael Nebel
37484a415f
Sync files.
2023-03-20 09:38:40 +01:00
Michael Nebel
0ec56203f9
Java: Introduce index validation.
2023-03-20 09:38:40 +01:00
Michael Nebel
9a3c2d3fbe
Java: Update summary parsing to use this instead of -1 and adjust the model generator.
2023-03-20 09:38:40 +01:00
Michael Nebel
abd9f673e1
Java: Update the java internal documentation for models.
2023-03-20 09:38:39 +01:00
Michael Nebel
352bb5a29a
C#: Update internal documentation for this parameter in models.
2023-03-20 09:38:39 +01:00
Tony Torralba
8457d45edc
Merge pull request #12577 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-03-20 09:26:18 +01:00
Kasper Svendsen
9630feb5e4
Dataflow: Remove revFlowAlias trick
2023-03-20 09:04:35 +01:00
Erik Krogh Kristensen
540542ceb5
Merge pull request #12518 from erik-krogh/more-express-sources
...
JS: recognize more express URL related sources
2023-03-20 08:49:11 +01:00
Erik Krogh Kristensen
af98ceb3c3
Merge pull request #11478 from erik-krogh/more-shell-taint
...
Rb: more taint-steps for shell-command-construction
2023-03-20 08:41:22 +01:00
Paolo Tranquilli
a131966066
Swift: make SuccessfullyExtractedFiles.ql more precise
...
This is done by adding a `isSuccessfullyExtracted` predicate that is
filled for primary files at the very end of the extractor invocation if
the frontend was performed successfully. If for example the extractor
crashes this will therefore not be filled.
The upgrade script is written so that `SuccessfullyExtractedFiles.ql`
on an upgraded script will give exactly the same results as before it.
2023-03-20 08:34:34 +01:00
Erik Krogh Kristensen
5f14af5db0
Merge pull request #12579 from github/dependabot/cargo/ql/serde-1.0.157
...
Bump serde from 1.0.156 to 1.0.157 in /ql
2023-03-20 08:02:23 +01:00
dependabot[bot]
9b3b6632fc
Bump serde from 1.0.156 to 1.0.157 in /ql
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.156 to 1.0.157.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.156...v1.0.157 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-03-20 04:09:27 +00:00
github-actions[bot]
0d36a5a733
Add changed framework coverage reports
2023-03-20 00:17:11 +00:00
Ed Minnix
c852d3a541
Rename configurations from "Conf" to "Config"
2023-03-19 17:55:53 -04:00
Ed Minnix
2d5944fb0e
Refactor DataFlow configurations to use "Config" naming convention
2023-03-19 17:44:07 -04:00
Ed Minnix
d743b31ab6
Fix typo in QLdoc
2023-03-19 13:45:46 -04:00
Mathias Vorreiter Pedersen
b0f803759c
Merge pull request #11928 from rdmarsh2/rdmarsh2/stageify-range-analysis
2023-03-18 12:42:49 +00:00
Ed Minnix
00267637eb
Implementation of check for DataFlow naming convention
2023-03-17 15:47:15 -04:00
Ed Minnix
7eb3fd2ff7
Conform queries to Config naming convention
2023-03-17 15:17:18 -04:00
Ed Minnix
d317de14c9
XXE Configuration Deprecation messages
2023-03-17 15:17:18 -04:00
Ed Minnix
310af99843
Refactor Security.CWE.CWE-807.TaintedPermissionsCheck
2023-03-17 15:17:18 -04:00
Ed Minnix
a9561a97c3
Refactor Security.CWE.CWE-643.XPathInjection
2023-03-17 15:17:18 -04:00
Ed Minnix
271d50ba99
Refactor Security.CWE.CWE-611 Xxe queries
2023-03-17 15:17:18 -04:00
Ed Minnix
80012b190d
Refactor Security.CWE.CWE-601.UrlRedirect
2023-03-17 15:17:18 -04:00
Ed Minnix
481d1f9b15
Refactor Security.CWE.CWE-297.UnsafeHostnameVerification
2023-03-17 15:17:18 -04:00
Ed Minnix
7bd7ecd9e6
Refactor Security.CWE.CWE-190 Arithmetic queries
2023-03-17 15:17:18 -04:00
Ed Minnix
4a202b430f
Security.CWE.CWE-200.AndroidWebViewSettingsAllowsContentAccess
2023-03-17 15:17:18 -04:00
Ed Minnix
d34dbbc96f
Refactor Security.CWE.CWE-134.ExternallyControlledFormatString
2023-03-17 15:17:18 -04:00
Ed Minnix
ac223ea57f
Refactor Security.CWE.CWE-094.InsecureBeanValidation
2023-03-17 15:17:18 -04:00
Ed Minnix
7aecefc4aa
Refactor Security.CWE.CWE-090.LdapInjectionLib
2023-03-17 15:17:18 -04:00
Ed Minnix
07fdcf2d04
Refactor Security.CWE.CWE-022.ZipSlip
2023-03-17 15:17:18 -04:00
Ed Minnix
e60e1a2ba9
Refactor Security.CWE.CWE-022.TaintedPathLocal
2023-03-17 15:17:18 -04:00
Chuan-kai Lin
4dd7dbc73b
Document upgrade query predicates
2023-03-17 11:06:39 -07:00
Stephan Brandauer
dce81cf0ae
Merge pull request #12463 from github/java/update-mad-decls-after-triage-2023-03-09T10-41-58
...
Java: Add MaD declarations after triage
2023-03-17 17:02:42 +01:00
Robert Marsh
1e8404c954
C++: Remove fixed TODO
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-03-17 11:27:13 -04:00
Stephan Brandauer
8f565f5023
Update MaD Declarations after Triage
2023-03-17 16:01:36 +01:00
Robert Marsh
726f99975e
C++: remove direct IR dependency in range analysis
2023-03-17 10:50:02 -04:00
github-actions[bot]
981e171525
Post-release preparation for codeql-cli-2.12.5
2023-03-17 13:27:00 +00:00
AlexDenisov
208ae192e4
Merge pull request #12567 from github/alexdenisov/swift-extracted-files
...
Swift: add a query showing successfully extracted files
2023-03-17 13:50:42 +01:00
Paolo Tranquilli
86b61d712c
Merge pull request #12565 from github/redsun82/swift-remove-labels-from-function-type
...
Swift: remove parameter labels from function types
2023-03-17 13:49:37 +01:00
Asger F
d537f86324
Merge pull request #12555 from asgerf/js/block-modes
...
JS: Include weak block modes as sink in weak crypto algorithm
2023-03-17 13:23:23 +01:00
Henry Mercer
9d05d94f49
Merge pull request #12568 from github/rc/3.9
...
Merge `rc/3.9` back to `main`
2023-03-17 12:14:31 +00:00
Alex Ford
e84b08409c
Ruby: test fixes
2023-03-17 12:08:38 +00:00
Erik Krogh Kristensen
ac85b6e74f
Merge pull request #12011 from erik-krogh/ts50
...
JS: Add support for TypeScript 5.0
2023-03-17 13:03:47 +01:00
