Geoffrey White
f2e3391a33
Swift: Accept test regression.
2023-12-12 11:37:05 +00:00
erik-krogh
896432b646
add environment variable to skip extraction of types in TypeScript
2023-12-12 12:25:00 +01:00
Mathias Vorreiter Pedersen
4d430d5df0
Merge pull request #15037 from aschackmull/range/prunebounds
...
Rangeanalysis: Prune range calculation.
2023-12-12 11:18:26 +00:00
Mathias Vorreiter Pedersen
cec785c8cc
C++: Respond to review comments.
2023-12-12 11:16:41 +00:00
Mathias Vorreiter Pedersen
f284fde93c
C++: Update QLDoc.
2023-12-12 11:09:36 +00:00
Mathias Vorreiter Pedersen
a6104ad878
C++: Fix test annotations.
2023-12-12 11:06:18 +00:00
Rasmus Wriedt Larsen
42a6309f25
Merge pull request #15071 from github/RasmusWL/generate-code-scanning-query-list
...
Add @RasmusWL as CODEOWNER of a misc file
2023-12-12 10:53:11 +01:00
erik-krogh
cf31ef4960
make sure reset() is called when manually invoking the TS extractor, so environment-variables are read
2023-12-12 10:51:09 +01:00
Jeroen Ketema
611a177c3c
Merge pull request #15066 from jketema/ql-test
...
C++: Update test for CLI changes
2023-12-12 10:36:57 +01:00
erik-krogh
c246a9c12c
move TypeVarDepth further up, so its declared before it's used
2023-12-12 10:34:42 +01:00
erik-krogh
13a01e1545
fix a this reference
...
`this` didn't refer to anything specific, and it was in fact `undefined` in the context it was invoked. There was already a `let typeTable = this;` further up (where `this` refers to the class instance), so I used `typeTable`.
2023-12-12 10:32:31 +01:00
Rasmus Wriedt Larsen
aa6a455ece
Update CODEOWNERS
2023-12-12 10:31:36 +01:00
erik-krogh
ca95a6e9cf
exclude all the lib.d.ts files when running the TS extractor directly
...
e.g. the `lib.es5.d.ts` file was not excluded
2023-12-12 10:29:09 +01:00
Tom Hvitved
9b043a10cc
Merge pull request #15063 from hvitved/csharp/use-scratch-dir
...
C#: Use `CODEQL_EXTRACTOR_CSHARP_SCRATCH_DIR` instead of `Path.GetTempPath`
2023-12-12 08:16:04 +01:00
Yunus AYDIN
bc81201c2e
Update expected file
2023-12-12 00:07:51 +03:00
Owen Mansel-Chan
0fb58caa8c
Update go/ql/lib/change-notes/2023-12-08-find-more-callees-for-captured-functions.md
...
Co-authored-by: Chris Smowton <smowton@github.com >
2023-12-11 20:42:48 +00:00
Edward Minnix III
06eef93f89
Docs review suggestions
2023-12-11 11:18:40 -05:00
Edward Minnix III
ce20c4ae03
Docs review suggestions
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-12-11 11:18:40 -05:00
Ed Minnix
7362158229
Fix test case
2023-12-11 11:18:40 -05:00
Ed Minnix
1271cd3348
Remove unnecessary crypto sinks
2023-12-11 11:18:40 -05:00
Ed Minnix
3ca039bc8f
Rename to InsecureRandomness
2023-12-11 11:18:40 -05:00
Ed Minnix
6e70e6c85a
Use pre-exisiting type for SecureRandom
2023-12-11 11:18:39 -05:00
Edward Minnix III
4678302edb
Update query metadata
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-12-11 11:18:39 -05:00
Ed Minnix
bbf99375c7
Alter cookie sinks to instead focus on creation of a cookie
2023-12-11 11:18:39 -05:00
Ed Minnix
4bdf2b5e18
Bump change note date
2023-12-11 11:18:39 -05:00
Ed Minnix
b9d2a26e6e
Move ESAPI models into the Weak Randomness query
...
These models don't need to apply to all queries. So instead they are
better suited to be within the weak randomness query itself.
2023-12-11 11:18:39 -05:00
Ed Minnix
7f3995f524
Remove extra encryption-iv models
2023-12-11 11:18:39 -05:00
Ed Minnix
7241e0920c
Replace convertBytesToString with models
2023-12-11 11:18:39 -05:00
Ed Minnix
e9ca4a25d4
Update to new MethodCall name
2023-12-11 11:18:39 -05:00
Ed Minnix
a1e9564cc5
Add more sources
2023-12-11 11:18:39 -05:00
Ed Minnix
b8b2de2f3c
Remove use of crypto-parameter sink kind
2023-12-11 11:18:39 -05:00
Ed Minnix
646254c9b2
Add credentials sinks from SensitiveApi
2023-12-11 11:18:39 -05:00
Ed Minnix
057a74d914
Remove unnused class
2023-12-11 11:18:39 -05:00
Ed Minnix
fb875f5095
More variety of test cases
2023-12-11 11:18:39 -05:00
Ed Minnix
ba3c38c226
Restrict addCookie to specific interface
2023-12-11 11:18:38 -05:00
Ed Minnix
dc3e4cd928
Refactored method accesses to the RandomDataSource library
2023-12-11 11:18:38 -05:00
Ed Minnix
ce7690b53f
Make imports private
2023-12-11 11:18:38 -05:00
Edward Minnix III
bc0655573f
Simplifications
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-12-11 11:18:38 -05:00
Ed Minnix
14fdfa4428
Add new sink kind and change note
2023-12-11 11:18:38 -05:00
Ed Minnix
0313f39229
Cryptographic sinks
2023-12-11 11:18:38 -05:00
Ed Minnix
b713efb711
Add ThreadLocalRandom.current as another source
2023-12-11 11:18:38 -05:00
Ed Minnix
bf0123d6ae
Add org.apache.commons.lang.RandomStringUtils as a source
2023-12-11 11:18:38 -05:00
Ed Minnix
1daa83bf46
Add test cases
2023-12-11 11:18:38 -05:00
Ed Minnix
e69ff7b601
Move to library and add docs
2023-12-11 11:18:38 -05:00
Ed Minnix
9f986ca527
Add Weak Randomness Query
2023-12-11 11:18:38 -05:00
Edward Minnix III
8d724acb20
Merge pull request #15026 from egregius313/egregius313/java/dataflow/deprecate-old-dataflow-module-uses
...
Java: Deprecate or remove imports of dataflow library copies
2023-12-11 11:14:09 -05:00
Jeroen Ketema
8d2c72fc73
C++: Update test for CLI changes
2023-12-11 16:36:51 +01:00
Malayke
7121282b27
add new query for detect DOS
2023-12-11 23:05:04 +08:00
Alexander Eyers-Taylor
c883ce8a5e
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-12-11 13:50:35 +00:00
Anders Schack-Mulligen
3bf6c0fe02
Rangeanalysis: Focus pre-bound calculation.
2023-12-11 14:07:10 +01:00
