Chris Smowton
7dd4030f51
Pattern cases: support type-flow
2023-11-30 11:23:58 +00:00
Chris Smowton
a06ac42512
PrintAst: report pattern-cases similar to pattern-instanceof
2023-11-30 11:23:58 +00:00
Chris Smowton
b6622d2f5b
usesType: support pattern cases
2023-11-30 11:23:58 +00:00
Chris Smowton
0f434e7f08
Add test for dataflow vs. pattern-switch
2023-11-30 11:23:58 +00:00
Chris Smowton
6c990c2cf6
Add pattern-case support and generally debug switch CFGs
...
These were reasonably broken beforehand, due to not taking switch rules into account in enough places, and confusing the expression/statement switch rule distinction with the distinction between switch statements and expressions.
(For example, `switch(x) { 1 -> System.out.println("Hello world") ... }` is a statement, but has a rule expression).
2023-11-30 11:23:58 +00:00
Chris Smowton
f4b45fa511
Support switch cases with binding patterns
2023-11-30 11:23:58 +00:00
Mathias Vorreiter Pedersen
a7ef84f2d1
C++: Replace 'strictcount(...) = 1' with 'unique(...)'.
2023-11-30 11:20:00 +00:00
Jeroen Ketema
6d74743915
Add documentation note on not supporting Objective-C(++), C++/CLI, and C++/CX
2023-11-30 10:57:47 +01:00
Tamas Vajk
0cc94b3a46
C#: Prefer framework assemblies over arbitrary nuget equivalents
2023-11-30 10:54:19 +01:00
masterofnow
57d897d40f
Merge branch 'main' into LoadClassNoSignatureCheck
2023-11-30 10:05:00 +08:00
Jami Cogswell
7e869b9cd1
Java: add change note
2023-11-29 16:48:57 -05:00
Robert Marsh
9ac46d4f9c
Swift: autoformat
2023-11-29 21:07:06 +00:00
Robert Marsh
0dc4a68ffb
Swift: fix typo in change note
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2023-11-29 21:04:09 +00:00
Robert Marsh
81d2780adb
Swift: changenote for pattern types
2023-11-29 21:04:09 +00:00
Robert Marsh
30caf2130e
Swift: autoformat a test
2023-11-29 21:04:09 +00:00
Robert Marsh
16e6e8845c
Swift: tests for pattern types
2023-11-29 21:04:08 +00:00
Robert Marsh
ade4809d9b
Swift: upgrade/downgrade for pattern types
2023-11-29 21:04:05 +00:00
Benjamin Rodes
94a0420040
Updated getResultExpr to getResultNode. Added strlcat. Added tests.
2023-11-29 16:03:41 -05:00
Robert Marsh
3492b4820a
Swift: extract types for patterns
2023-11-29 20:54:50 +00:00
Robert Martin
66b456d3c6
C#: Fix a URL redirection from remote source false positive
...
When guarding the redirect with `HttpRequestBase.IsUrlLocalToHost()`
2023-11-29 13:46:47 -07:00
Robert Marsh
f7e4fb0c65
Swift: respond to comments on keypath reordering
2023-11-29 20:31:48 +00:00
Jami Cogswell
d5fd2db1bd
Java update UrlPathHelper tests
2023-11-29 15:23:11 -05:00
Jami Cogswell
ba3548b317
Java: switch to createRelative sink and add UrlPathHelper sources
2023-11-29 14:46:28 -05:00
Jami Cogswell
efa5ab18c1
Java: add taint steps for getResource sink
2023-11-29 14:46:27 -05:00
Benjamin Rodes
4919c4a424
Added StringConcatenation.qll
2023-11-29 13:00:57 -05:00
Chris Smowton
fefc02d650
Merge pull request #14950 from smowton/smowton/admin/empty-argfile-test
...
Java: Add test for empty argfile
2023-11-29 14:05:39 +00:00
Taus
754deda03e
Merge pull request #14946 from github/RasmusWL/list-python-3.12
...
Docs: List Python 3.12 as supported
2023-11-29 15:05:11 +01:00
Chris Smowton
e110db58f8
Add test for empty argfile
2023-11-29 12:51:22 +00:00
Rasmus Wriedt Larsen
76a6fb563d
Docs: List Python 3.12 as supported
...
Support was added in https://github.com/github/codeql/pull/14636
2023-11-29 11:22:27 +01:00
Mathias Vorreiter Pedersen
1f9e2c71ce
Merge pull request #14928 from MathiasVP/surprising-lifetimes-c_str
...
C++: Add a new query for calling `c_str` on temporary objects
2023-11-29 10:15:11 +00:00
Erik Krogh Kristensen
399872b719
Merge pull request #14943 from rafaelurben/patch-1
...
JS: Add django template urls as "save urls"
2023-11-29 11:10:16 +01:00
Mathias Vorreiter Pedersen
351caaccfe
C++: Add GOOD and BAD comments to qhelp examples.
2023-11-29 09:44:54 +00:00
Mathias Vorreiter Pedersen
8afd9288cb
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2023-11-29 09:36:29 +00:00
Rafael
1a05c2e704
Added Django test
2023-11-29 08:26:49 +01:00
Rafael
0a74a3a765
Update javascript/ql/src/change-notes/2023-11-28-django-urls.md
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2023-11-29 08:23:02 +01:00
Rafael
0b0c9e3e48
Create 2023-11-28-django-urls.md
2023-11-28 22:29:53 +01:00
Rafael
286e3951bf
Detect Django template URLs
...
Django URLs are currently not detected, but flask and nunjucks URL are. (See https://github.com/github/codeql/issues/12267 )
2023-11-28 22:22:07 +01:00
Felicity Chapman
d299ade765
Merge branch 'main' into fc-codeql-vs-code-12574
2023-11-28 20:42:20 +00:00
Felicity Chapman
298c6b5295
Merge pull request #14942 from github/codeql-cli-2.15.3
...
Mergeback post release changes from the `codeql-cli-2.15.3` branch to `main`
2023-11-28 20:41:43 +00:00
Felicity Chapman
47d00d1311
Update multiple models section for feedback
2023-11-28 19:59:31 +00:00
Felicity Chapman
9e74f64c5a
Update screenshot for feedback
2023-11-28 19:59:31 +00:00
Felicity Chapman
a041a508ac
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-11-28 19:59:31 +00:00
Felicity Chapman
2ede709308
Add a few missing details
2023-11-28 19:59:31 +00:00
Felicity Chapman
824fd75d74
Update after self-review
2023-11-28 19:59:31 +00:00
Pierre
568bcfd038
Fix changelog docs based on latest generator version
2023-11-28 19:59:31 +00:00
Felicity Chapman
ed5e28162f
Draft docs for revised UI
2023-11-28 19:59:31 +00:00
Pierre
cedb91ba0d
Add combined changelogs for 2.15.3 and backfill historic versions
2023-11-28 19:59:31 +00:00
Jeroen Ketema
483f4c3ce9
Merge pull request #14921 from jketema/kr-style-function-parameters
...
C++: Expose whether a function was prototyped or not
2023-11-28 17:43:22 +01:00
Robert Marsh
4df25f4f7f
Merge pull request #14797 from geoffw0/sqlsinks
...
Swift: Heuristic sinks for swift/sql-injection
2023-11-28 11:18:10 -05:00
Ian Lynagh
429c550151
Kotlin 2: Accept some location changes
2023-11-28 15:57:48 +00:00
