Ed Minnix
7eb3fd2ff7
Conform queries to Config naming convention
2023-03-17 15:17:18 -04:00
Ed Minnix
d317de14c9
XXE Configuration Deprecation messages
2023-03-17 15:17:18 -04:00
Ed Minnix
310af99843
Refactor Security.CWE.CWE-807.TaintedPermissionsCheck
2023-03-17 15:17:18 -04:00
Ed Minnix
a9561a97c3
Refactor Security.CWE.CWE-643.XPathInjection
2023-03-17 15:17:18 -04:00
Ed Minnix
271d50ba99
Refactor Security.CWE.CWE-611 Xxe queries
2023-03-17 15:17:18 -04:00
Ed Minnix
80012b190d
Refactor Security.CWE.CWE-601.UrlRedirect
2023-03-17 15:17:18 -04:00
Ed Minnix
481d1f9b15
Refactor Security.CWE.CWE-297.UnsafeHostnameVerification
2023-03-17 15:17:18 -04:00
Ed Minnix
7bd7ecd9e6
Refactor Security.CWE.CWE-190 Arithmetic queries
2023-03-17 15:17:18 -04:00
Ed Minnix
4a202b430f
Security.CWE.CWE-200.AndroidWebViewSettingsAllowsContentAccess
2023-03-17 15:17:18 -04:00
Ed Minnix
d34dbbc96f
Refactor Security.CWE.CWE-134.ExternallyControlledFormatString
2023-03-17 15:17:18 -04:00
Ed Minnix
ac223ea57f
Refactor Security.CWE.CWE-094.InsecureBeanValidation
2023-03-17 15:17:18 -04:00
Ed Minnix
7aecefc4aa
Refactor Security.CWE.CWE-090.LdapInjectionLib
2023-03-17 15:17:18 -04:00
Ed Minnix
07fdcf2d04
Refactor Security.CWE.CWE-022.ZipSlip
2023-03-17 15:17:18 -04:00
Ed Minnix
e60e1a2ba9
Refactor Security.CWE.CWE-022.TaintedPathLocal
2023-03-17 15:17:18 -04:00
Chuan-kai Lin
4dd7dbc73b
Document upgrade query predicates
2023-03-17 11:06:39 -07:00
Stephan Brandauer
dce81cf0ae
Merge pull request #12463 from github/java/update-mad-decls-after-triage-2023-03-09T10-41-58
...
Java: Add MaD declarations after triage
2023-03-17 17:02:42 +01:00
Robert Marsh
1e8404c954
C++: Remove fixed TODO
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-03-17 11:27:13 -04:00
Stephan Brandauer
8f565f5023
Update MaD Declarations after Triage
2023-03-17 16:01:36 +01:00
Robert Marsh
726f99975e
C++: remove direct IR dependency in range analysis
2023-03-17 10:50:02 -04:00
github-actions[bot]
981e171525
Post-release preparation for codeql-cli-2.12.5
2023-03-17 13:27:00 +00:00
AlexDenisov
208ae192e4
Merge pull request #12567 from github/alexdenisov/swift-extracted-files
...
Swift: add a query showing successfully extracted files
2023-03-17 13:50:42 +01:00
Paolo Tranquilli
86b61d712c
Merge pull request #12565 from github/redsun82/swift-remove-labels-from-function-type
...
Swift: remove parameter labels from function types
2023-03-17 13:49:37 +01:00
Asger F
d537f86324
Merge pull request #12555 from asgerf/js/block-modes
...
JS: Include weak block modes as sink in weak crypto algorithm
2023-03-17 13:23:23 +01:00
Henry Mercer
9d05d94f49
Merge pull request #12568 from github/rc/3.9
...
Merge `rc/3.9` back to `main`
2023-03-17 12:14:31 +00:00
Alex Ford
e84b08409c
Ruby: test fixes
2023-03-17 12:08:38 +00:00
Erik Krogh Kristensen
ac85b6e74f
Merge pull request #12011 from erik-krogh/ts50
...
JS: Add support for TypeScript 5.0
2023-03-17 13:03:47 +01:00
Chris Smowton
0cadf4d94a
Merge pull request #12558 from smowton/smowton/fix/flow-to-external-api-write-only-methods
...
Go: exclude `net/http.Header.Set` and `.Del` from `go/untrusted-data-to-external-api`
2023-03-17 11:52:48 +00:00
Alex Ford
c12a85b07b
Ruby: autoformat
2023-03-17 11:49:10 +00:00
Ian Lynagh
b8fb4b9b0f
Merge pull request #12521 from igfoo/igfoo/printast_sig
...
Java: PrintAst: Improve the ranking of callables
2023-03-17 11:43:40 +00:00
Alex Ford
76ed56d2b6
Ruby: typo
2023-03-17 11:40:59 +00:00
Alex Ford
ee6288173f
Ruby: remove extra opening p tag
2023-03-17 11:38:49 +00:00
Alex Ford
60f313863a
Merge branch 'main' into maikypedia/ruby-ssti
2023-03-17 11:31:49 +00:00
Henry Mercer
d824695da2
Merge pull request #12561 from github/henrymercer/cli-prepare-diagnostics-rename
...
JS: Update for renamed `com.semmle.util.diagnostics` package
2023-03-17 10:31:27 +00:00
Alex Denisov
7c15527300
Swift: add a query showing successfully extracted files
2023-03-17 11:27:03 +01:00
Asger F
940e492766
Merge pull request #12551 from github/release-prep/2.12.5
...
Release preparation for version 2.12.5
2023-03-17 11:23:25 +01:00
Mathias Vorreiter Pedersen
1aecc64327
C++: Autoformat.
2023-03-17 09:37:46 +00:00
Michael Nebel
282b5d4836
Merge pull request #12538 from michaelnebel/emptypredworkaround
...
DataFlow: Workaround empty predicate usage in IPA branch.
2023-03-17 10:29:19 +01:00
Paolo Tranquilli
f2dff092dc
Swift: remove parameter labels from function types
...
As discussed [in this accepted proposal][1], parameter labels do not
take part any more in making up a function type, so we need to not
extract them any more to avoid DB inconsistencies.
These were unused in the library, which makes the upgrade and downgrade
scripts have full compatibility.
[1]: 9c53790a13/proposals/0111-remove-arg-label-type-significance.md
2023-03-17 10:22:02 +01:00
Tom Hvitved
d2647850d2
Merge pull request #12564 from hvitved/ruby/remove-redundant-super-prefixes
...
Ruby: Remove some redundant `super` type qualifiers
2023-03-17 10:13:45 +01:00
Tom Hvitved
d146d816a9
Ruby: Fix semantic merge conflict
2023-03-17 09:59:44 +01:00
Tom Hvitved
e69e90db4a
Ruby: Remove some redundant super type qualifiers
2023-03-17 09:32:13 +01:00
Tom Hvitved
75746cbacc
Merge pull request #12549 from hvitved/ruby/ssa-write-access
...
Ruby: `Ssa::WriteDefinition::getWriteAccess` should return a CFG node
2023-03-17 09:31:14 +01:00
Tom Hvitved
ee01e9ab35
Merge pull request #12554 from hvitved/ruby/clear-text-logging-hashes
...
Ruby: Rely on built-in hash-flow in clear text storage query
2023-03-17 09:21:11 +01:00
Harry Maclean
5332344e5d
Work around github actions bug
2023-03-17 12:13:30 +13:00
Harry Maclean
2abb03304d
Install required dependencies for gh in centos 7
2023-03-17 11:56:04 +13:00
Harry Maclean
c447e125bb
Ruby: Install gh cli in centos7 test
2023-03-17 10:59:49 +13:00
Harry Maclean
2c63dbad67
Merge pull request #11954 from hmac/sinatra
...
Ruby: Model Sinatra
2023-03-17 10:46:52 +13:00
erik-krogh
f1094cd3d6
bump to stable release
2023-03-16 22:38:54 +01:00
Harry Maclean
d4020ad305
Ruby: Run extractor test on centos 7
2023-03-17 10:38:45 +13:00
erik-krogh
f3c7aed1f9
bump to RC
2023-03-16 22:37:58 +01:00
