Anders Schack-Mulligen
58cd16565f
Dataflow: Fix forceHighPrecision for length-2 prefixes.
2023-07-13 10:55:39 +02:00
Anders Schack-Mulligen
d46b2a32ae
Dataflow: Improve debug printing.
2023-07-13 10:55:39 +02:00
Jeroen Ketema
e6d7a83d41
Merge pull request #13732 from jketema/dataflow-default-none
...
C++/Swift: Remove `none()` dataflow configuration predicates
2023-07-13 10:42:39 +02:00
Tamas Vajk
35cc058474
C#: Fix test expectations in RuntimeVersion tests to handle platform dependent behaviour of Path.Combine
2023-07-13 09:50:26 +02:00
Tony Torralba
7204c30025
Update 2023-07-12-apache-commons-lang3-tostringbuilder.md
2023-07-13 09:38:33 +02:00
Owen Mansel-Chan
1767ca2682
Merge pull request #13728 from owen-mc/go/minor-cleanup-Twirp-models
...
Go: minor cleanup to Twirp models
2023-07-12 22:59:13 +01:00
Maiky
119a32fe0e
fix naming error
2023-07-12 23:54:58 +02:00
Jeroen Ketema
52ab215560
C++/Swift: Remove none() dataflow configuration predicates
...
These now have default implementations that are also `none()`
2023-07-12 23:49:29 +02:00
Maiky
db0f38fe06
Update XpathInjectionQuery.qll
2023-07-12 23:46:47 +02:00
Edward Minnix III
541737d1a8
Merge pull request #13694 from egregius313/egregius313/add-default-isBarrier-2-isAdditionalFlowStep-4
...
DataFlow: Add default implementations of isBarrier/2 and isAddiitonalFlowStep/4
2023-07-12 17:10:17 -04:00
Alvaro Muñoz
4b85d54089
update tests and stubs
2023-07-12 22:21:49 +02:00
Alvaro Muñoz
300584c4bb
Merge branch 'ruby/gopg_improvements' of https://github.com/pwntester/codeql into ruby/gopg_improvements
2023-07-12 22:09:27 +02:00
Alvaro Muñoz
53b27703cf
replace deps with stubs
2023-07-12 22:09:16 +02:00
Geoffrey White
0bd522aa7b
Merge branch 'main' into sharedsensitive2
2023-07-12 21:07:06 +01:00
Owen Mansel-Chan
8a573cca0f
Merge pull request #13625 from GeekMasher/go-micro
...
[Go] GoMicro framework support
2023-07-12 20:57:01 +01:00
Ed Minnix
63299688d5
Add change notes for default implementations of isBarrier and isAdditionalFlowStep
2023-07-12 15:21:16 -04:00
Ed Minnix
3db2644008
Python: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:25 -04:00
Ed Minnix
43f870e395
Python: Add default implementation of StateConfigSig::isBarrier/2
2023-07-12 15:06:25 -04:00
Ed Minnix
e5ce78caab
Go: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:25 -04:00
Ed Minnix
0549b5da87
Go: Add default implementation of StateConfigSig::isBarrier/2
2023-07-12 15:06:25 -04:00
Ed Minnix
18b606f930
Swift: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:25 -04:00
Ed Minnix
b76b9812fd
Swift: Add default implementation of StateConfigSig::isBarrier/2
2023-07-12 15:06:25 -04:00
Ed Minnix
94638c9997
Ruby: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:25 -04:00
Ed Minnix
8a7081753d
Ruby: Add default implementation of StateConfigSig::isBarrier/2
2023-07-12 15:06:25 -04:00
Ed Minnix
9618c0b0a1
C#: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:25 -04:00
Ed Minnix
a3c30992b1
C#: Add default implementation of StateConfigSig::isBarrier/2
2023-07-12 15:06:25 -04:00
Ed Minnix
2c0a456855
C++: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:24 -04:00
Ed Minnix
c73cd73001
C++: Add default implementation of StateConfigSig::isBarrier/2
2023-07-12 15:06:24 -04:00
Ed Minnix
1cd8922ab5
Java: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:24 -04:00
Ed Minnix
1835b40f7b
Java: Add default impl to StateConfigSig::isBarrier/2
2023-07-12 15:06:24 -04:00
Geoffrey White
6d4c831ec5
Swift: Compute sensitive strings centrally (much more efficient evaluation).
2023-07-12 19:34:09 +01:00
Geoffrey White
02ddcab773
Swift: Cleanup / corrections.
2023-07-12 18:26:59 +01:00
Alvaro Muñoz
0180a482ce
Apply suggestions from code review
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2023-07-12 18:27:45 +02:00
Geoffrey White
5c6b8bd36e
Swift: Introduce EnumElmentDecl.hasQualifiedName and use it to clean up the code.
2023-07-12 17:18:04 +01:00
Mathew Payne
8d110ca2ac
remove getName
2023-07-12 17:12:08 +01:00
Mathew Payne
18db525d18
Apply suggestions from code review
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2023-07-12 17:11:40 +01:00
Maiky
1559b7da3c
Update Frameworks.qll
2023-07-12 17:45:45 +02:00
Chris Smowton
5567d4d1b8
Merge pull request #13724 from Malayke/patch-1
...
Update CONTRIBUTING.md
2023-07-12 16:36:10 +01:00
Alvaro Muñoz
7a717555aa
fix qldocs
2023-07-12 17:27:17 +02:00
Alvaro Muñoz
733e625080
fix change note
2023-07-12 17:26:12 +02:00
Alvaro Muñoz
f2cc2af276
aiohttp improvements
2023-07-12 17:19:56 +02:00
yoff
76455d628e
Update python/ql/lib/semmle/python/frameworks/ServerLess.qll
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-07-12 16:50:13 +02:00
Chris Smowton
64257eedae
Fix count
2023-07-12 15:48:36 +01:00
Maiky
c9fadd98f4
Support CommandInjectionAdditionalFlowStep and fix doc errors
2023-07-12 16:48:27 +02:00
Chris Smowton
464ac60db1
Amend and order
2023-07-12 15:48:18 +01:00
Rasmus Lerchedahl Petersen
02c41f3dcf
JavaScript: Use shared library for serverless
2023-07-12 16:46:34 +02:00
Maiky
d7d9ffc449
Doc error
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2023-07-12 16:44:17 +02:00
Ian Lynagh
fe24cc1900
Merge pull request #13718 from igfoo/igfoo/file_classes
...
Kotlin: Improve file class support
2023-07-12 15:42:16 +01:00
Rasmus Lerchedahl Petersen
4d2ce6b2e0
python: create shared serverless module and use it
...
Modelled on the javascript serverless module, but
- The predicate that reports YAML files is now public
so languages can implement their own file conventions.
- It also reports framework and runtime.
- The conveninece predicates with files still exist,
but they only report the path.
- Handler mapping conventions are now documented.
- Use parameterised serverless module in Python,
tests now pass.
2023-07-12 16:42:01 +02:00
Rasmus Lerchedahl Petersen
a892e83c8e
python: add simple test for AWS lambda
...
made space for other serverless frameworks in the directory `serverless`
2023-07-12 16:42:00 +02:00