Tom Hvitved
4687ac16ff
Type tracking: Use noopt+inline_late in TypeTracker::[small]step
2023-05-01 11:48:16 +02:00
Asger F
5eaaa7e074
JS: Add qldoc
2023-05-01 11:42:55 +02:00
Asger F
08785a4063
JS: Add sources from actions/core
2023-05-01 11:42:17 +02:00
Asger F
cb95dbfa14
JS: Add tests
2023-05-01 11:42:17 +02:00
yoff
0bc6f10a71
Merge pull request #12220 from amammad/amammad-python-paramiko
...
add some python sinks for paramiko ssh clients
2023-05-01 11:38:50 +02:00
Asger F
2c89f9747b
Merge pull request #12949 from asgerf/js/angular-native
...
JS: Add a few more DOM element sources
2023-05-01 11:08:45 +02:00
Asger F
0497e60ce2
JS: Model actions/exec
2023-05-01 11:05:59 +02:00
Asger F
cb9b01cbb7
JS: Port new sources based on comment from JarLob
2023-05-01 11:04:54 +02:00
Nora Dimitrijević
c81ea9d747
Merge branch 'main' into swift/rename-functions
2023-05-01 11:03:26 +02:00
erik-krogh
18f8c69261
satisfy the signature of HostnameRegexpSig, which doesn't understand RegExpSink
2023-05-01 10:49:51 +02:00
Asger F
3d208c0a62
JS: Port Actions sources based on PR from R3x
2023-05-01 10:48:43 +02:00
erik-krogh
d5029c94b6
changes based on review
2023-05-01 10:42:15 +02:00
erik-krogh
a7f733ab8c
move RegExpInterpretation into Concepts.qll
2023-05-01 10:42:15 +02:00
erik-krogh
2fad406b5c
move StdLibRegExpInterpretation to Stdlib.qll
2023-05-01 10:42:15 +02:00
erik-krogh
a64848c022
simplify StdLibRegExpInterpretation to only consider re.compile, because the rest is handled by RegexExecution
2023-05-01 10:42:14 +02:00
erik-krogh
113ce61d40
fix nit in qldoc
2023-05-01 10:42:14 +02:00
erik-krogh
2d2602b668
use that strings are local-source-nodes in regex-tracking
2023-05-01 10:42:14 +02:00
erik-krogh
3cde11efc8
use StrConst instead of Bytes and Unicode
2023-05-01 10:42:14 +02:00
erik-krogh
ffa3425195
rename away from deprecated alias in test-files
2023-05-01 10:42:14 +02:00
erik-krogh
f2adc4f958
add missing qldoc
2023-05-01 10:42:14 +02:00
erik-krogh
59cc90e547
move Regex into a ParseRegExp file, and rename the class to RegExp
2023-05-01 10:42:14 +02:00
erik-krogh
556bb41999
move all code to find Regex flag into a module
2023-05-01 10:42:14 +02:00
erik-krogh
f0254fc089
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
erik-krogh
e677b62241
use type-tracking instead of global dataflow for tracking regular expressions
2023-05-01 10:41:53 +02:00
Michael Nebel
36ea61c25e
C#: Address review comments.
2023-05-01 10:38:39 +02:00
Asger F
e9f1e99526
Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization
...
JS: Update model of js-yaml
2023-05-01 09:57:20 +02:00
Rasmus Wriedt Larsen
1bba5258d6
Merge pull request #11280 from RasmusWL/dict-dataflow-steps
...
Python: Support more dictionary read/store steps
2023-04-30 16:07:29 +02:00
Rasmus Wriedt Larsen
f2def84337
Misc: Add script to accept .expected changes from CI
...
This script can be used to go over `codeql test run` expected/actual log
output from actions CI checks for a PR, and apply patches locally to
make the tests pass.
Designed for use by GitHub employees, since it needs access to internal
CI runs. Just run this tool while the branch for the PR is checked out!
You need the `gh` cli tool installed and authenticated.
Example can be seen in https://github.com/github/codeql/pull/12950
2023-04-30 14:59:50 +02:00
tyage
f52c845663
Fix comment.
2023-04-30 19:52:11 +09:00
tyage
80d401fba8
JS: change note
2023-04-30 18:26:46 +09:00
tyage
71952fe551
JS: Add test for sub module
2023-04-30 18:18:35 +09:00
tyage
c0cf0b430e
JS: support submodules
2023-04-30 18:07:52 +09:00
Mathias Vorreiter Pedersen
a7d238f4c4
C++: Accept consistency changes.
2023-04-28 22:41:58 +01:00
Erik Krogh Kristensen
3d41cd583f
Merge pull request #12963 from tyage/track-interfile-use-router
...
JS: Track interfile useRouter
2023-04-28 22:41:43 +02:00
Asger F
d1c8e0abd7
Merge pull request #12951 from asgerf/js/json-with-comments
...
JS: Stop complaining about comments in JSON files
2023-04-28 20:53:35 +02:00
Felicity Chapman
1094018088
Remove unused file
2023-04-28 18:35:57 +01:00
Mathias Vorreiter Pedersen
490b253dc8
C++: Add change note.
2023-04-28 17:48:01 +01:00
Mathias Vorreiter Pedersen
498395b50e
C++: Add QLDoc to getA(nIndirect)BarrierNode.
2023-04-28 17:42:14 +01:00
Mathias Vorreiter Pedersen
8c8b919dfb
C++: Add an API for indirect barrier guards and use it in tests.
2023-04-28 14:09:08 +01:00
Mathias Vorreiter Pedersen
a6adf825bc
C++: Add a test that needs indirect barrier guards.
2023-04-28 13:56:31 +01:00
Tony Torralba
77ec181cac
Java: Fix sink model generator for instance parameters
2023-04-28 14:49:04 +02:00
Mathias Vorreiter Pedersen
0f0384cff6
C++: Rewrite the barrier guard tests to be expression based. This is really what we expect people to write in queries.
2023-04-28 13:49:01 +01:00
Asger F
f87740ab18
Merge pull request #12867 from asgerf/js/webpack-bundles
...
JS: Ignore more webpack modules
2023-04-28 14:35:57 +02:00
Tony Torralba
e0074d52eb
Add autogenerated models for org.apache.commons.net
2023-04-28 14:33:23 +02:00
Asger F
1b75afb5b1
JS: Change note
2023-04-28 14:32:11 +02:00
CodeQL CI
c1a52031cf
Merge pull request #12968 from github/release-prep/2.13.1
...
Release preparation for version 2.13.1
2023-04-28 13:14:42 +01:00
github-actions[bot]
3bd29171fb
Release preparation for version 2.13.1
2023-04-28 12:14:35 +00:00
Geoffrey White
837f16c212
Swift: Address singleton set literal warning
2023-04-28 12:16:28 +01:00
Michael B. Gale
edfe2d7ab7
Merge pull request #12944 from github/mbg/go/html-template-sanitizers
...
Go: Add `html/template` functions as sanitisers for XSS queries
2023-04-28 12:15:57 +01:00
Felicity Chapman
8ca80d3170
Update links to CodeQL manual
...
Make CodeQL CLI a single item in the side navigation
2023-04-28 12:07:26 +01:00
