Asger F
111cabbfc1
JS: Add deprecation notice to page about JSON-based format
2022-12-13 15:34:54 +01:00
Asger F
9ce0c60247
JS: Rephrase link in ToC
2022-12-13 15:34:54 +01:00
Asger F
b3a1d02d8c
JS: Add data extension docs
2022-12-13 15:34:54 +01:00
Asger F
bfe9ee3ead
Merge pull request #11672 from asgerf/js/extensions
...
JS: Add data extension sinks
2022-12-13 15:34:11 +01:00
ALJI Mohamed
54109b8ea7
Add source wget.download
2022-12-13 15:34:01 +01:00
Henry Mercer
423374a7b8
Merge branch 'main' into codeql-ci/atm/release-0.4.4
2022-12-13 14:26:21 +00:00
github-actions[bot]
745823ca60
JS: Bump version of ML-powered library and query packs to 0.4.5
2022-12-13 13:32:52 +00:00
github-actions[bot]
ea13925a92
JS: Bump patch version of ML-powered library and query packs
2022-12-13 13:28:09 +00:00
Alex Denisov
ee94849528
Swift: switch to bootstrapped Swift compiler
2022-12-13 13:59:13 +01:00
Mathias Vorreiter Pedersen
69155cb691
Merge pull request #11664 from jketema/alloca-in-loop-fix
...
C++: Fix `cpp/alloca-in-loop` regressions with use-use dataflow
2022-12-13 11:59:38 +00:00
Tony Torralba
85b3092b16
Add security-severity and fix alert message
2022-12-13 12:01:01 +01:00
Asger F
6b15839221
JS: Add tests for the examples used in the docs
2022-12-13 11:33:12 +01:00
Asger F
ba1364a4cb
JS: Add sinks mentioned in doc
...
Note that 'sql-injection' was already added
2022-12-13 11:33:12 +01:00
Alvaro Muñoz
270a4355df
format Restify.qll
2022-12-13 11:22:24 +01:00
Alvaro Muñoz
4ba3190d29
Replace API::Node with DataFlow::Node for Spife's RouteSetup
2022-12-13 11:10:04 +01:00
Jeroen Ketema
b10ed976cc
Update cpp/ql/src/Likely Bugs/Memory Management/AllocaInLoop.ql
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-12-13 10:57:34 +01:00
Felicity Chapman
cbbce9b98a
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
2022-12-13 09:56:50 +00:00
Michael Nebel
b8ef961498
Merge pull request #9415 from JarLob/sockets
...
Add TCP and UDP socket client taint sources
2022-12-13 10:39:33 +01:00
Felicity Chapman
6aaaf4267b
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
2022-12-13 09:37:49 +00:00
Chris Smowton
406a12e797
Remove unused function DeclarationStack.findFirst
2022-12-13 09:34:36 +00:00
Tony Torralba
d72d096c86
Add predicate injection query
2022-12-13 10:27:29 +01:00
Tom Hvitved
39fea378b8
Python: Update expected test output
2022-12-13 09:53:01 +01:00
Tom Hvitved
cfcb3a60ba
C++: Update expected test output
2022-12-13 09:53:01 +01:00
Tom Hvitved
da6a42980f
Swift: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
24b1da4d02
Python: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
2a28953e41
Java: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
4d2436dd82
Go: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
64eb0cc941
C#: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
bc58cbec8c
C++: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
0c2eee2a72
Data flow: Sync files
2022-12-13 09:52:55 +01:00
Tom Hvitved
410ef4d713
Data flow: Rename stages
2022-12-13 09:52:46 +01:00
Tom Hvitved
d11cb2ee0f
Data flow: Introduce ApproxContent in a new pruning stage between existing stages 2 and 3
2022-12-13 09:52:45 +01:00
AlexDenisov
73196fd732
Merge pull request #11669 from github/redsun82/swift-wrapper
...
Swift: wrap extractor with shell script
2022-12-13 09:46:42 +01:00
Paolo Tranquilli
0dc717fd9c
Swift: remove no more needed library path setting in qltest.sh
2022-12-13 09:13:43 +01:00
Paolo Tranquilli
03d7adb303
Swift: wrap extractor with shell script
...
This is in preparation for the extractor to use shared libraries
packaged alongside it.
We could probably also move the `CODEQL_EXTRACTOR_SWIFT_RUN_UNDER` logic
in it, where it would be simpler and more robust.
2022-12-13 09:07:37 +01:00
yoff
557a5b469f
Merge pull request #11555 from pwntester/new_python_cmdi_sinks
...
Added two new CMDi sinks for python's stdlib
2022-12-13 09:00:34 +01:00
SiaraMist
0518eda7ab
Remove import tutorial
2022-12-12 17:46:03 -08:00
SiaraMist
dee66354cc
Link to template reusable
2022-12-12 17:36:43 -08:00
Siara
094a9f4aa7
Edit reusable
2022-12-12 17:32:02 -08:00
Jami
93d8a03e73
Merge branch 'main' into jcogs33/mad-metrics-query
2022-12-12 20:31:53 -05:00
Siara
028ab325f4
Update docs/codeql/reusables/codespaces-template-note.rst
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2022-12-12 17:28:39 -08:00
Jami Cogswell
08b5cf1415
Java/C#: fix formatting issue
2022-12-12 20:24:00 -05:00
Siara
4aa92dfd88
Updates from review comments
2022-12-12 17:13:57 -08:00
Jami Cogswell
a77acd6745
Java: add change note
2022-12-12 17:28:12 -05:00
Jami Cogswell
f0124dae1a
Java: replace exists with instanceof
2022-12-12 16:40:19 -05:00
erik-krogh
92a7e787a8
C: do the minimal change to ValueNumberBound instead
2022-12-12 22:17:50 +01:00
Jami
84b69deb55
Merge branch 'main' into jcogs33/update-externalapi-charpredicate
2022-12-12 16:01:22 -05:00
Siara
169a465214
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
...
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com >
2022-12-12 12:54:01 -08:00
Harry Maclean
0340549744
Ruby: Slight rewording
2022-12-13 09:45:31 +13:00
erik-krogh
e0045d2736
filter out string literals from the taint-sink meta query
2022-12-12 21:44:24 +01:00