Chris Smowton
0cadf4d94a
Merge pull request #12558 from smowton/smowton/fix/flow-to-external-api-write-only-methods
...
Go: exclude `net/http.Header.Set` and `.Del` from `go/untrusted-data-to-external-api`
2023-03-17 11:52:48 +00:00
Alex Ford
c12a85b07b
Ruby: autoformat
2023-03-17 11:49:10 +00:00
Ian Lynagh
b8fb4b9b0f
Merge pull request #12521 from igfoo/igfoo/printast_sig
...
Java: PrintAst: Improve the ranking of callables
2023-03-17 11:43:40 +00:00
Alex Ford
76ed56d2b6
Ruby: typo
2023-03-17 11:40:59 +00:00
Alex Ford
ee6288173f
Ruby: remove extra opening p tag
2023-03-17 11:38:49 +00:00
Alex Ford
60f313863a
Merge branch 'main' into maikypedia/ruby-ssti
2023-03-17 11:31:49 +00:00
Henry Mercer
d824695da2
Merge pull request #12561 from github/henrymercer/cli-prepare-diagnostics-rename
...
JS: Update for renamed `com.semmle.util.diagnostics` package
2023-03-17 10:31:27 +00:00
Alex Denisov
7c15527300
Swift: add a query showing successfully extracted files
2023-03-17 11:27:03 +01:00
Asger F
940e492766
Merge pull request #12551 from github/release-prep/2.12.5
...
Release preparation for version 2.12.5
2023-03-17 11:23:25 +01:00
Mathias Vorreiter Pedersen
1aecc64327
C++: Autoformat.
2023-03-17 09:37:46 +00:00
Michael Nebel
282b5d4836
Merge pull request #12538 from michaelnebel/emptypredworkaround
...
DataFlow: Workaround empty predicate usage in IPA branch.
2023-03-17 10:29:19 +01:00
Paolo Tranquilli
f2dff092dc
Swift: remove parameter labels from function types
...
As discussed [in this accepted proposal][1], parameter labels do not
take part any more in making up a function type, so we need to not
extract them any more to avoid DB inconsistencies.
These were unused in the library, which makes the upgrade and downgrade
scripts have full compatibility.
[1]: 9c53790a13/proposals/0111-remove-arg-label-type-significance.md
2023-03-17 10:22:02 +01:00
Tom Hvitved
d2647850d2
Merge pull request #12564 from hvitved/ruby/remove-redundant-super-prefixes
...
Ruby: Remove some redundant `super` type qualifiers
2023-03-17 10:13:45 +01:00
Tom Hvitved
d146d816a9
Ruby: Fix semantic merge conflict
2023-03-17 09:59:44 +01:00
Tom Hvitved
e69e90db4a
Ruby: Remove some redundant super type qualifiers
2023-03-17 09:32:13 +01:00
Tom Hvitved
75746cbacc
Merge pull request #12549 from hvitved/ruby/ssa-write-access
...
Ruby: `Ssa::WriteDefinition::getWriteAccess` should return a CFG node
2023-03-17 09:31:14 +01:00
Tom Hvitved
ee01e9ab35
Merge pull request #12554 from hvitved/ruby/clear-text-logging-hashes
...
Ruby: Rely on built-in hash-flow in clear text storage query
2023-03-17 09:21:11 +01:00
Harry Maclean
5332344e5d
Work around github actions bug
2023-03-17 12:13:30 +13:00
Harry Maclean
2abb03304d
Install required dependencies for gh in centos 7
2023-03-17 11:56:04 +13:00
Harry Maclean
c447e125bb
Ruby: Install gh cli in centos7 test
2023-03-17 10:59:49 +13:00
Harry Maclean
2c63dbad67
Merge pull request #11954 from hmac/sinatra
...
Ruby: Model Sinatra
2023-03-17 10:46:52 +13:00
erik-krogh
f1094cd3d6
bump to stable release
2023-03-16 22:38:54 +01:00
Harry Maclean
d4020ad305
Ruby: Run extractor test on centos 7
2023-03-17 10:38:45 +13:00
erik-krogh
f3c7aed1f9
bump to RC
2023-03-16 22:37:58 +01:00
erik-krogh
e00c41c6e2
add change-note and bump version
2023-03-16 22:37:56 +01:00
erik-krogh
a63739915d
add test confirming support for const type parameters
2023-03-16 22:37:35 +01:00
erik-krogh
2c1c41d8a3
add test confirming end-to-end support for well-typed decorators with the new TS 5.0 type ClassMethodDecoratorContext
2023-03-16 22:37:35 +01:00
erik-krogh
d47659b48e
upgrade to TypeScript 5.0 beta, and unbreak things that broke
2023-03-16 22:37:35 +01:00
Maiky
37e42bb05b
Missing markdown extension
2023-03-16 20:45:35 +01:00
Mathias Vorreiter Pedersen
ebab6ecc30
Merge pull request #12559 from MathiasVP/test9-range-check
2023-03-16 19:18:38 +00:00
Henry Mercer
74cc1a42d0
JS: Update for renamed com.semmle.util.diagnostics package
2023-03-16 18:19:10 +00:00
Geoffrey White
880f948763
Merge pull request #12560 from geoffw0/testcustominterp
...
Swift: Add taint test for custom string interpolation.
2023-03-16 17:44:37 +00:00
Mathias Vorreiter Pedersen
406d02253d
C++: Add 'range(x)' call demonstrating missing bounds.
2023-03-16 17:08:53 +00:00
Geoffrey White
3a04e42ae0
Swift: Add taint test for string interpolation.
2023-03-16 17:04:46 +00:00
Chris Smowton
3e9924fcd2
Add change note
2023-03-16 15:35:00 +00:00
Chris Smowton
647bd44666
Go: exclude net/http.Header.Set and .Del from go/untrusted-data-to-external-api
...
These functions (and doubtless many others) are write-only with respect to their receiver argument, so it doesn't really make sense to flag externally-controlled data flowing there.
2023-03-16 15:31:35 +00:00
Ian Lynagh
f9bb0df6a2
Kotlin: Update expected PrintAst output
2023-03-16 15:20:07 +00:00
Ian Lynagh
13c2ef8c20
Java: PrintAst: Improve the ranking or callables
...
We now look not only at how many parameters each callable has, but what
its full signature is. This allows us to give a consistent order to
Test(Throwable) { ... }
Test(String) { ... }
2023-03-16 15:20:07 +00:00
Maiky
a229f7a832
Solve merge conflict and add a change note
2023-03-16 16:15:02 +01:00
Tom Hvitved
f35fb13723
Add change note
2023-03-16 15:18:47 +01:00
Tom Hvitved
9d3863eccc
Ruby: Rely on built-in hash-flow in clear text storage query
2023-03-16 14:55:06 +01:00
Asger F
bce1f29a7e
JS: Add change note
2023-03-16 14:55:00 +01:00
Asger F
86a06bde72
JS: Flag crypto operations with weak block mode
2023-03-16 14:52:52 +01:00
Asger F
e907d685f4
JS: Add crypto test with AES-ECB
2023-03-16 14:52:18 +01:00
Tom Hvitved
ae10e6e08f
Ruby: Add a test that shows FP/FN for clear text logging query
2023-03-16 14:38:45 +01:00
Jeroen Ketema
66b03dbd1d
Apply suggestions from code review
2023-03-16 14:29:16 +01:00
Jeroen Ketema
e7079b35bc
Apply suggestions from code review
2023-03-16 14:28:17 +01:00
erik-krogh
880632f536
use Number.qll to parse hex numbers in regex parsing for Python/Java
2023-03-16 14:25:53 +01:00
Michael Nebel
3fea9e4d0b
Sync files.
2023-03-16 14:12:29 +01:00
Michael Nebel
2e86bbd6cd
Java: Introduce helper predicate to avoid empty predicate in IPA branch.
2023-03-16 14:11:53 +01:00
