Asger F
1a9956354e
JS: Restrict getInput to indirect command injection query
2023-05-03 16:10:03 +02:00
Jami Cogswell
2224c5d9be
Java: remove url-open-stream kind from getInvalidModelKind
2023-05-03 10:08:50 -04:00
Paolo Tranquilli
8873e42cb1
Swift: removed unused date dependency
2023-05-03 16:02:26 +02:00
Stephan Brandauer
32f2614fe0
add typecheckable mechanism to enforce minimal set of metadata
2023-05-03 16:00:50 +02:00
Jami Cogswell
9cdb9d6fbe
Java: remove url-open-stream kind from docs
2023-05-03 10:00:05 -04:00
Jami Cogswell
917268e7e6
Java: activate the models in openstream query
2023-05-03 09:57:45 -04:00
Geoffrey White
02ae44a911
Update docs/codeql/codeql-language-guides/analyzing-data-flow-in-swift.rst
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-05-03 14:48:27 +01:00
Kasper Svendsen
46727af948
Go: Enable warnings for implicit this receivers
2023-05-03 15:41:55 +02:00
Erik Krogh Kristensen
f29db40371
Merge pull request #13011 from kaspersv/kaspersv/explicit-this-receivers-shared2
...
JS, Python, Ruby: Make implicit this receivers explicit
2023-05-03 15:34:59 +02:00
Mathias Vorreiter Pedersen
59e495aa31
Swift: Reorganize MaD rows and frameworks to ensure we always import all frameworks in 'ExternalFlow.qll' and 'FlowSummary.qll'.
2023-05-03 14:34:43 +01:00
Geoffrey White
02dc9be239
Swift: Fix the versions in 'examples' as well.
2023-05-03 14:31:48 +01:00
Kasper Svendsen
67950c8e6b
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Geoffrey White
2999b5fea1
Swift: Mathias's fix for the non-constant format example.
2023-05-03 14:29:39 +01:00
Paolo Tranquilli
1d492f89cc
Merge branch 'main' into redsun82/swift-logging-assertions-and-prints
2023-05-03 15:19:08 +02:00
Paolo Tranquilli
51763d65b0
Swift: reshape a TODO into another
2023-05-03 15:18:35 +02:00
Mathias Vorreiter Pedersen
1c80175a34
Merge pull request #13009 from MathiasVP/fix-tostring-on-regex-literals
...
Swift: Fix TODO on regex literals's `toString`
2023-05-03 14:17:50 +01:00
Jami Cogswell
f8b39fda2e
Java: switch url-open-stream models to experimentalSinkModel
2023-05-03 09:11:24 -04:00
Kasper Svendsen
ea75996932
Merge pull request #13005 from kaspersv/kaspersv/ruby-explicit-this-receivers
...
Ruby: Make implicit this receivers explicit
2023-05-03 14:57:43 +02:00
Paolo Tranquilli
7709bc76a8
Merge branch 'main' into redsun82/swift-json
2023-05-03 14:55:05 +02:00
Paolo Tranquilli
f461e719da
Swift: fix wrong condition for log
2023-05-03 14:54:28 +02:00
Mathias Vorreiter Pedersen
af18c98028
Swift: Fix TODOs in 'FlowSummary.qll'
2023-05-03 13:48:17 +01:00
Owen Mansel-Chan
3f645e9401
Merge pull request #13006 from kaspersv/kaspersv/go-explicit-this-receivers
...
Go: Make implicit this receivers explicit
2023-05-03 13:47:10 +01:00
Mathias Vorreiter Pedersen
1f018d69ab
Swift: Accept test changes.
2023-05-03 13:45:17 +01:00
Stephan Brandauer
6d29273c43
make framework mode explicit in file/module names
2023-05-03 14:36:42 +02:00
Geoffrey White
1084d7ff0e
Swift: Correct a couple more cases.
2023-05-03 13:35:07 +01:00
Paolo Tranquilli
8de2f9958e
Swift: add support to output JSON diagnostics
...
New `DIAGNOSE_ERROR` and `DIAGNOSE_CRITICAL` macros are added.
These accept an ID which should indicate a diagnostic source via
a function definition in `codeql::diagnostics`, together with the usual
format + arguments accepted by other `LOG_*` macros.
When the log is flushed, these special logs will result in an error JSON
diagnostic entry in the database.
2023-05-03 14:32:31 +02:00
Paolo Tranquilli
0ad529dff8
Swift: move logging to a common directory
2023-05-03 14:32:31 +02:00
Paolo Tranquilli
c7c12a7108
Swift: add json and date dependencies
2023-05-03 14:32:30 +02:00
Geoffrey White
2fd8b87bcd
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-05-03 13:31:27 +01:00
Stephan Brandauer
dfb9d88198
fix ql-for-ql errors
2023-05-03 14:17:11 +02:00
Ian Lynagh
b56b843d13
Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1
...
Post-release preparation for codeql-cli-2.13.1
2023-05-03 13:12:10 +01:00
Geoffrey White
205647331d
Merge pull request #12955 from geoffw0/swiftoddsends
...
Swift: Odds and ends
2023-05-03 13:09:13 +01:00
Owen Mansel-Chan
841db151f6
Improve naming
2023-05-03 13:01:23 +01:00
Owen Mansel-Chan
0f134c6a3c
Wrap long line
2023-05-03 12:52:11 +01:00
Kasper Svendsen
aca2ace843
JS, Python, Ruby: Make implicit this receivers explicit
2023-05-03 13:51:51 +02:00
Owen Mansel-Chan
f86e540d2a
msg is always non-empty
2023-05-03 12:50:58 +01:00
Rasmus Wriedt Larsen
d18be93e24
Merge pull request #13004 from kaspersv/kaspersv/python-explicit-this-receiver
...
Python: Make implicit this receivers explicit
2023-05-03 13:50:32 +02:00
Owen Mansel-Chan
af2a9b21ab
Add function comments
2023-05-03 12:47:28 +01:00
Kasper Svendsen
081085e128
Java: Make implicit this receivers explicit
2023-05-03 13:37:35 +02:00
Felicity Chapman
ca51200cd4
Merge pull request #12967 from github/felicitymay-9916-update-links
...
Update links to CodeQL manual in the codeql.github.com site
2023-05-03 12:24:27 +01:00
Michael Nebel
932ee0b877
C#: Delete unused deprecated abstract class.
2023-05-03 13:21:46 +02:00
Michael Nebel
5944b88334
C#: Re-factor the SafeConstructor classes to use the new API.
2023-05-03 13:09:35 +02:00
Michael Nebel
0e17fa79c4
C#: Update expected test output.
2023-05-03 13:09:35 +02:00
Michael Nebel
815602d3b5
C#: Re-factor some of the data flow configurations used by the UnsafeDeserializationQuery to use the new API.
2023-05-03 13:09:35 +02:00
Mathias Vorreiter Pedersen
9e129ac38d
Swift: Fix toString on regex literals.
2023-05-03 12:09:12 +01:00
Kasper Svendsen
e071a25653
Java, C#: Make implicit this receivers explicit
2023-05-03 13:09:00 +02:00
Owen Mansel-Chan
a9d3cfccd4
use severityNote for all diagnostics
2023-05-03 12:03:12 +01:00
Owen Mansel-Chan
532e1446f0
Change diagnostic ids and use "lower than or equal to"
2023-05-03 12:03:12 +01:00
Owen Mansel-Chan
4b88279ccc
Improve usage message formatting
2023-05-03 12:03:11 +01:00
Kasper Svendsen
e969018f99
Go: Make implicit this receivers explicit
2023-05-03 12:45:42 +02:00