Paolo Tranquilli
2f0ee12584
Swift: fix patterns/bound_and_unbound.ql test
2023-10-23 17:36:42 +02:00
Paolo Tranquilli
f22d60f011
Swift: clean up VarDecl, NamedPattern and SwitchStmt interactions
...
* `variables` under `CaseStmt` are now AST children, which solves
orphan `VarDecl`s in that case
* reordered `CaseStmt` AST children to be `labels > variables > body`
(was `body > labels`)
* made `NamedPattern::getVarDecl` an extracted property instead of
`getName`
* The above led to duplicate DB entities because of a quirk in the
Swift compiler code. This is solved by tweaking the extraction of
`variables` under `CaseStmt` to not use `getCaseBodyVariables`.
2023-10-23 17:36:42 +02:00
Paolo Tranquilli
140ff723e4
Merge pull request #14563 from github/redsun82/codegen-test-with
...
Codegen: add `@qltest.test_with`
2023-10-23 17:35:31 +02:00
Rasmus Wriedt Larsen
e8f548ab52
Python: Model routed parameter flow to *args and **kwargs in Django + rest framework
2023-10-23 17:18:22 +02:00
Joe Farebrother
3f11d83b7b
Merge pull request #14500 from joefarebrother/shared-filepath-normalize
...
Shared: Add library for filepath normalization
2023-10-23 16:09:44 +01:00
Paolo Tranquilli
02a2debe94
Codegen: fix python compatibility problem
2023-10-23 16:56:44 +02:00
Rasmus Wriedt Larsen
24687b4156
Python: Add test highlighting missing routed parameter flow to **kwargs parameter of request handler function
2023-10-23 16:49:43 +02:00
Rasmus Wriedt Larsen
8b23140a08
Python: Remove trailing ,
2023-10-23 16:45:08 +02:00
Rasmus Wriedt Larsen
60e7786b04
Python: Use explicit keyword parameter
2023-10-23 16:44:54 +02:00
Rasmus Wriedt Larsen
46e44a0036
Python: Fix import
2023-10-23 16:42:55 +02:00
Tony Torralba
cd10dc8a27
Java: Added up to date models for Spring's ResponseEntity
2023-10-23 16:06:11 +02:00
Chris Smowton
e301223644
Merge pull request #14541 from JarLob/patch-3
...
fix CWE number
2023-10-23 15:05:02 +01:00
Michael Nebel
743be92624
C#: Adjust workflow to point to the new location for the script.
2023-10-23 15:10:20 +02:00
Michael Nebel
5ba0e0ffce
C#: Adjust the relative path to the stub generator project file.
2023-10-23 15:09:38 +02:00
Michael Nebel
d4af05cbf9
C#: Move stub generator script.
2023-10-23 15:09:38 +02:00
Michael Nebel
ed6a068ebc
C#: Update the stub generator readme.
2023-10-23 15:09:38 +02:00
Michael Nebel
4e99266b65
C#: Sunset the QL based stub generator.
2023-10-23 15:09:38 +02:00
Paolo Tranquilli
7cc20587ad
Codegen: add @qltest.test_with
...
This allows to group together related AST classes to reuse the same
test source and extraction. For example this is useful for
`EnumDecl/EnumCaseDecl/EnumElementDecl`, where this is applied to.
2023-10-23 14:51:22 +02:00
Ian Lynagh
b89088737a
Merge pull request #14551 from igfoo/igfoo/loc
...
Java/Kotlin: Reshuffle our LoC queries
2023-10-23 11:50:03 +01:00
Stephan Brandauer
319b799f95
Merge pull request #14553 from github/kaeluka/fix-positive-example-query
...
Java: Automodel Framework Mode Extraction Bug
2023-10-23 09:48:49 +02:00
amammad
e3dbdc3887
add custom query builder and active record querybuilder support
2023-10-22 21:39:59 +02:00
Jami Cogswell
687ecffe71
CI: don't upload comment/ID artifact if no existing comment
2023-10-22 15:28:07 -04:00
amammad
a0e2e1ef21
add to Frameworks.qll
2023-10-21 19:49:27 +02:00
amammad
1fe565a46f
cherrypy framework file system access Sinks are added
2023-10-21 19:47:30 +02:00
Owen Mansel-Chan
b46174f464
Merge pull request #14536 from owen-mc/go/amend-library-coverage
...
Go: Add Go frameworks for automated coverage reports
2023-10-20 21:28:30 +01:00
Dave Bartolomeo
76a9b71231
Merge branch 'main' into dbartol/threat-models
2023-10-20 14:05:17 -04:00
Stephan Brandauer
1d7c2f4799
Java: format
2023-10-20 16:37:46 +02:00
Stephan Brandauer
f0c0bbf4c8
remove bug: needless restriction to sink examples in framework mode +examples
2023-10-20 16:34:29 +02:00
Mathias Vorreiter Pedersen
6c10ba2fb1
Merge pull request #14495 from github/calumgrant/comp-generated-this
...
C++: Fix ImplicitThisFieldAccess
2023-10-20 15:25:26 +01:00
Cornelius Riemenschneider
9ba32a0440
Add bazel-based build for the Javascript extractor.
2023-10-20 16:23:50 +02:00
Cornelius Riemenschneider
de85f2bbf8
Fix errorprone violations.
2023-10-20 16:23:35 +02:00
Calum Grant
8054a5d086
C++: Add changenote
2023-10-20 14:48:20 +01:00
Tamas Vajk
3f1e145d2c
C#: Rework .net framework reference removal
2023-10-20 14:40:13 +02:00
Owen Mansel-Chan
0ba0063e6d
Update go/ql/lib/change-notes/2023-10-20-enclosing-callable-for-external-files.md
...
Co-authored-by: Michael B. Gale <mbg@github.com >
2023-10-20 13:37:44 +01:00
Erik Krogh Kristensen
f562d5319f
Merge pull request #14539 from flyboss/main
...
fix typo ('Configration' to ‘Configuration’)
2023-10-20 14:10:42 +02:00
Ian Lynagh
26634a3266
Java/Kotlin: Add a changenote for the lines-of-code changes
2023-10-20 13:04:39 +01:00
Ian Lynagh
d816035da6
Java/Kotlin: Tweak LoC message
2023-10-20 13:02:11 +01:00
Ian Lynagh
13a9e83e6a
Java/Kotlin: Reshuffle our LoC queries
...
There's now a single lines-of-code query that gives the total number of
lines of code over both languages.
Per-language LoC queries are now just summaries.
2023-10-20 12:43:41 +01:00
Mathew Payne
a24e168ec0
Merge branch 'main' into py-restframework
2023-10-20 11:39:07 +01:00
Paolo Tranquilli
c92519ed6b
Merge pull request #14538 from github/redsun82/add-unspecified-element-children
...
Swift: add children to `UnspecifiedElement`
2023-10-20 12:27:05 +02:00
Owen Mansel-Chan
da68153a96
Fix change note name and location
2023-10-20 11:24:25 +01:00
Owen Mansel-Chan
5d729616cd
Add change note
2023-10-20 11:20:10 +01:00
Michael B. Gale
58fe66f5a8
Merge pull request #14550 from github/mbg/docs/bump-to-go1.21
...
Bump to Go 1.21 in supported compilers docs
2023-10-20 11:09:59 +01:00
flyboss
ee813c1e61
Update UnsafeHtmlConstructionQuery.qll
...
add a deprecated alias in case anyone depends on the misspelled name.
2023-10-20 17:57:23 +08:00
Michael B. Gale
46aa712c28
Bump to Go 1.21 in supported compilers docs
2023-10-20 10:49:02 +01:00
Esben Sparre Andreasen
1b9b6ae5b5
Merge pull request #14542 from github/esbena/proper-check-change-note
...
Improve change note checking
2023-10-20 11:47:53 +02:00
Ian Lynagh
a4ef183a2e
Merge pull request #14529 from igfoo/igfoo/classid_fqname
...
Kotlin: Don't convert back and forth between ClassId and FqName
2023-10-20 10:28:25 +01:00
Tamas Vajk
36f1070b93
Adjust expected test files
2023-10-20 09:42:00 +02:00
Tamas Vajk
fc1fc05d16
C#: Rework .net framework reference removal
2023-10-20 09:22:14 +02:00
Jami Cogswell
ee4a9c3f8d
CI: remove extraneous quotes that were causing 'get_previous_run_id' to always fail with a 'list index out of bounds' error
2023-10-19 19:23:14 -04:00