Harry Maclean
d0e7fbc871
Ruby: Add changenote
2024-02-27 09:47:51 +00:00
Anders Schack-Mulligen
699dddcfbe
Merge pull request #15725 from aschackmull/dataflow/summary-join-fix
...
Dataflow: Prevent bad join in FlowSummaryImpl::Private::Steps::summaryLocalStep.
2024-02-27 10:32:38 +01:00
erik-krogh
b4b5ae2a2c
add some request-forgery sanitizers, inspired from C#
2024-02-27 10:05:26 +01:00
Tom Hvitved
bbeee8f38d
Merge pull request #15717 from hvitved/csharp/view-cfg
...
Shared `View CFG` implementation
2024-02-27 09:13:18 +01:00
Chris Smowton
f7cdcd4981
Force Maven wrapper tests to run sequentially
2024-02-26 22:28:55 +00:00
Chris Smowton
03f01a0121
Add tests for Maven wrapper
2024-02-26 22:28:55 +00:00
Robert Marsh
a513598a4d
C++: Change note for IR named destructors.
2024-02-26 19:41:56 +00:00
Geoffrey White
408a550467
Merge pull request #15727 from geoffw0/qldoc4
...
C++: Mark internal files in the old dataflow library as deprecated
2024-02-26 17:45:05 +00:00
Mathias Vorreiter Pedersen
690fdc076d
Shared: Add change note.
2024-02-26 17:13:32 +00:00
Mathias Vorreiter Pedersen
1d4c889ab8
Java: Use the shared type-flow library.
2024-02-26 17:13:32 +00:00
Mathias Vorreiter Pedersen
9ec17e6338
Shared: Pull out the shared parts of Java's type flow library into a shared module.
2024-02-26 17:13:27 +00:00
Geoffrey White
2e66392353
C++: Update deprecated note to respect identical files.
2024-02-26 16:38:27 +00:00
Rasmus Lerchedahl Petersen
3eb9491cb4
python: rewrite HardcodedCredentials away from PointsTo
...
- `ModuleValue.attr` and `ClassValue.lookup` are approximated by `Function.getName`
- `ClassValue.getName` is apprximated by `Class.getName`
- `Module::named` is approximated by `Module.getName`
- `Value::named` is approximated by `Builtins::likelyBuiltin`
- `FunctionValue.getNamedArgumentForCall` is approximated by `ArgumentNode.argumentOf`
2024-02-26 17:18:40 +01:00
Joe Farebrother
cb733dcf85
Simplify model defenition
2024-02-26 14:59:03 +00:00
Cornelius Riemenschneider
4bb725cbf5
Merge pull request #15656 from github/criemen/ruby-bazel
...
Ruby: Start building the language pack using bazel.
2024-02-26 15:52:28 +01:00
Cornelius Riemenschneider
234623ec0d
Merge pull request #15726 from github/criemen/js
...
JS: Remove empty build target.
2024-02-26 15:50:31 +01:00
Geoffrey White
5c4543f167
C++: Mark internal files in the old dataflow library as deprecated (the public imports already are).
2024-02-26 14:49:10 +00:00
Cornelius Riemenschneider
e9b5394cd5
JS: Remove empty build target.
...
The `resources` folder never existed, this was probably introduced
as a copy-paste mistake. Remove the rule.
2024-02-26 15:26:44 +01:00
Harry Maclean
6ff0054e52
Merge pull request #13431 from am0o0/amammad-ruby-YAMLunsafeLoad
...
Ruby: add seperate additional steps between `YAML.parse*` methods and `to_ruby`
2024-02-26 13:40:48 +00:00
Tom Hvitved
f92c106972
Merge pull request #15724 from hvitved/csharp-change-note
...
C#: Add change note
2024-02-26 14:35:38 +01:00
Harry Maclean
8212f5de1b
Ruby: Update test
2024-02-26 13:10:27 +00:00
Harry Maclean
b86643fab2
Ruby: doc fixes
2024-02-26 12:57:21 +00:00
Michael Nebel
cba247788a
C#: Add change note.
2024-02-26 13:51:07 +01:00
Michael Nebel
f9934ed5e7
C#: Add downgrade script.
2024-02-26 13:51:07 +01:00
Michael Nebel
4dd368f7a6
C#: Add upgrade script.
2024-02-26 13:51:07 +01:00
Michael Nebel
80513d846d
C#: Update PrintAst test expected outputs.
2024-02-26 13:51:07 +01:00
Michael Nebel
ff32cf90fd
C#: Add a test for compiler generated statements.
2024-02-26 13:51:06 +01:00
Michael Nebel
e6f4263eff
C#: Do not print compiler generated statements.
2024-02-26 13:51:06 +01:00
Michael Nebel
bf4e3a7d1c
C#: Merge expr_compiler_generated and compiler_generated and add compiler generated statements.
2024-02-26 13:51:06 +01:00
Tom Hvitved
dd0c721e8c
C#: Add change note
2024-02-26 13:48:19 +01:00
Anders Schack-Mulligen
20bb631456
Dataflow: Prevent bad join.
2024-02-26 13:45:19 +01:00
Tom Hvitved
606a8fed0c
Merge pull request #15406 from hvitved/csharp/no-stats-experiment
...
C#: Remove all DB stats
2024-02-26 13:40:37 +01:00
Harry Maclean
8a670fe9a2
Ruby: formatting
2024-02-26 12:26:04 +00:00
Michael Nebel
e5e0b4c537
C#: Add some examples of uses of the Experimental attribute and update the expected test output.
2024-02-26 13:15:55 +01:00
Michael Nebel
bc98712da5
C#: Add one more using statement to the attributes test file.
2024-02-26 13:14:03 +01:00
amammad
32f5667bb6
revert YAML.qll and yaml sinks to previous PR, make a separate experimental query only for yaml
2024-02-26 12:12:03 +00:00
amammad
c582ea626d
update expected test file
2024-02-26 12:10:04 +00:00
amammad
1c1a6f13df
fix QLDoc style
2024-02-26 12:05:35 +00:00
amammad
9c5c8c8362
fix test file
2024-02-26 12:05:35 +00:00
amammad
464e2e4291
fix qldoc and test files
2024-02-26 12:04:52 +00:00
amammad
18fa91bde4
add transform method that is an alias for to_ruby
2024-02-26 11:59:41 +00:00
amammad
a75a004942
add more additional steps, change parse* sinks to reciever of them
2024-02-26 11:59:41 +00:00
amammad
474a4f8abd
thanks @asgerf for informing me that Successor wants to be deprecated and thank him that providing the solution
2024-02-26 11:59:41 +00:00
amammad
1410574f76
make seperate steps for YAML.parse* and use getAsuccessor*() to reach final to_ruby method call, All parts have Rewritten with API graphs exclusively
2024-02-26 11:59:35 +00:00
Harry Maclean
f7b8e8af41
Ruby: Include request forgery sinks from MaD
2024-02-26 11:34:11 +00:00
Harry Maclean
8bed3fbed4
Ruby: Add basic model for Terrapin library
2024-02-26 11:32:41 +00:00
Harry Maclean
9d13a1ff51
Ruby: Add model for Process.spawn
2024-02-26 11:26:38 +00:00
Harry Maclean
d1847566b6
Ruby: Ql4QL fix
2024-02-26 11:26:38 +00:00
Harry Maclean
beef9965cc
Ruby: Model Open4 library
...
Also remove duplicate modeling of Process.spawn.
2024-02-26 11:26:38 +00:00
Harry Maclean
a03c06802e
Ruby: Add some more command injection sinks
2024-02-26 11:26:38 +00:00
