Geoffrey White
7512d81331
Merge pull request #12484 from geoffw0/summarydetail
...
Swift: Update swift/summary/summary-statistics to DataFlow::ConfigSig
2023-03-13 09:54:54 +00:00
Tom Hvitved
6ee231fac5
Ruby: Add more tests for flow through constructors
2023-03-13 10:52:01 +01:00
Geoffrey White
0d1be2294c
Merge branch 'main' into typealiastests
2023-03-13 09:38:54 +00:00
Geoffrey White
8d666d00c2
Swift: Update codegen.
2023-03-13 09:21:44 +00:00
Geoffrey White
9a5dbd078e
Merge pull request #12485 from geoffw0/qldocraw
...
Swift: Add generated QLDoc to the Raw.qll file.
2023-03-13 09:10:55 +00:00
Michael Nebel
8398ee43b3
C#: Update test comment and expected test output.
2023-03-13 10:09:03 +01:00
Michael Nebel
a964f536e8
C#: Fix issue with dispatch to implementations of virtual interface members.
2023-03-13 10:09:03 +01:00
Michael Nebel
278f90e5fa
C#: Update expected test output.
2023-03-13 10:09:03 +01:00
Michael Nebel
cfe2a76431
C#: Add viable callable test cases for statics in interfaces.
2023-03-13 10:09:03 +01:00
Jeroen Ketema
bd47c4f9ec
C++: Update .expected after frontend changes
2023-03-13 09:40:10 +01:00
Asger F
ecb46e808c
JS: extension point -> extensible predicate
2023-03-13 09:39:05 +01:00
Harry Maclean
3734a544bc
Ruby: Add change note
2023-03-13 21:38:45 +13:00
Tony Torralba
e834f9302e
Fix Apache Commons HTTP Client and SQL Injection tests
2023-03-13 09:36:53 +01:00
Asger F
c4c0009f8a
Apply suggestions from code review
...
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com >
2023-03-13 09:35:35 +01:00
Harry Maclean
e80ff4efba
Ruby: Fix tests and qldoc
2023-03-13 20:32:37 +13:00
Harry Maclean
071517c74b
Ruby: Clean up Sinatra modeling
2023-03-13 19:25:56 +13:00
Harry Maclean
bfe42a656c
Ruby: QL4QL fix
2023-03-13 19:04:46 +13:00
Harry Maclean
384e7c7a80
Jump step for sinatra callbacks
2023-03-13 19:03:32 +13:00
Harry Maclean
e65d7224db
Ruby: tests, patterns, fix erb flow
2023-03-13 19:03:32 +13:00
Harry Maclean
eada3b91df
Ruby: track flow from sinatra routes to erb files
2023-03-13 19:03:32 +13:00
Harry Maclean
c82b4638c6
Ruby: Import Sinatra modeling by default
2023-03-13 19:03:32 +13:00
Harry Maclean
a1fab31bfc
Ruby: Model Sinatra
...
Adds some very basic modeling of Sinatra applications.
We recognise the `params` call in Sinatra routes as an HTTP request
input access.
2023-03-13 19:03:32 +13:00
Harry Maclean
9c3d141c9c
Ruby: Add change note
2023-03-13 18:57:55 +13:00
dependabot[bot]
7ab3bb1239
Bump serde from 1.0.154 to 1.0.155 in /ql
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.154 to 1.0.155.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.154...v1.0.155 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-03-13 04:10:45 +00:00
Harry Maclean
fe995dd99b
Ruby: ActiveRecord::Connection.execute SQL sink
2023-03-13 09:03:54 +13:00
Harry Maclean
025cd34dab
Ruby: Taint flow through ActionController params
...
We were not recognising "require" as returning a Parameters instance.
2023-03-13 08:52:41 +13:00
Harry Maclean
2d95b6a049
Ruby: Add count_by_sql as SQL sink
2023-03-13 08:40:32 +13:00
Harry Maclean
c97dccf0de
Ruby: Add reorder as a SQL sink
...
In recent versions of Rails this method doesn't seem to be vulnerable,
but it may be in previous versions. There's a slight FP risk here, but
I think it is small.
2023-03-13 08:38:17 +13:00
Mathias Vorreiter Pedersen
ab58d4c11f
Merge pull request #12415 from github/rdmarsh2/swift/constructor-flow
2023-03-10 23:16:37 +00:00
Arthur Baars
c67bfff33b
Ruby: strip \\?\ from display paths
2023-03-10 22:32:11 +01:00
Arthur Baars
4bfcc31ef0
Ruby: support long paths on Windows
2023-03-10 22:32:11 +01:00
Ed Minnix
59eea2a4a3
Change FlowState classes to use IPAs instead of string
2023-03-10 15:24:04 -05:00
Ed Minnix
b6eeac5bc8
Update names to new naming convention
2023-03-10 15:13:58 -05:00
Robert Marsh
d9732361fc
Swift: autoformat
2023-03-10 19:28:01 +00:00
Robert Marsh
d4e3f7f738
C++: fix missing bounds in new range analysis
2023-03-10 14:23:08 -05:00
Geoffrey White
fbde174a89
Swift: Autoformat.
2023-03-10 19:02:54 +00:00
Arthur Baars
50ff82fe51
Merge pull request #12482 from github/revert-12245-calumgrant/codeowners-dynamic
...
Revert "Update CODEOWNERS for dynamic teams"
2023-03-10 19:44:12 +01:00
Geoffrey White
7ddd08fb1e
Swift: Extend an extractor test as well.
2023-03-10 18:35:03 +00:00
Geoffrey White
f6e7837cb8
Swift: Extend the PrintAST test as well.
2023-03-10 18:28:11 +00:00
Geoffrey White
0c900e4b8a
Swift: Add a test for aliased types.
2023-03-10 18:26:48 +00:00
Mathias Vorreiter Pedersen
d4269251be
Swift: Add QL skeleton for aliased types.
2023-03-10 18:15:40 +00:00
Arthur Baars
7b8ac609f7
Merge pull request #12478 from aibaars/js-fix-npe
...
JS: fix NPE
2023-03-10 18:49:46 +01:00
Geoffrey White
c2f6ee320f
Swift: Add QLDoc to the Raw.qll file.
2023-03-10 17:43:30 +00:00
Robert Marsh
e931d59bea
Merge pull request #12479 from jketema/simple-range-analysis-wrapper
...
C++: Introduce wrapper for the semantic range analysis mimicking the simple one
2023-03-10 10:01:28 -05:00
Edward Minnix III
e2acc26419
Apply docs review suggestions
...
- Punctuation
- Rewording
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-03-10 09:47:47 -05:00
Calum Grant
1b2ba15753
Revert "Update CODEOWNERS for dynamic teams"
2023-03-10 14:39:22 +00:00
Geoffrey White
7bd0f53df9
Swift: Update swift/summary/summary-statistics to DataFlow::ConfigSig.
2023-03-10 14:39:03 +00:00
Taus
998827f491
Merge pull request #12481 from aschackmull/all/autoformat-ignore-blame
...
Ignore auto-format commits in git blame.
2023-03-10 15:36:04 +01:00
Owen Mansel-Chan
286a56c9b3
Merge pull request #12450 from owen-mc/unexpected-directory-layout
...
Diagnostic for imports with relative package paths
2023-03-10 14:35:02 +00:00
Anders Schack-Mulligen
1e64748ffe
Dataflow: Autoformat.
2023-03-10 15:12:19 +01:00
