Alex Ford
|
81ec6861f9
|
Ruby: fix some SensitiveDataSource definitions
|
2024-06-18 17:46:52 +01:00 |
|
am0o0
|
eb1999f8b3
|
revert .vscode/settings.json :((
|
2024-06-18 18:43:20 +02:00 |
|
am0o0
|
ccb923a436
|
fix formatting
|
2024-06-18 18:31:29 +02:00 |
|
Ed Minnix
|
5bbd003dfc
|
Reword change note
|
2024-06-18 12:27:21 -04:00 |
|
Ed Minnix
|
b53712cae0
|
Change note
|
2024-06-18 12:27:19 -04:00 |
|
Ed Minnix
|
6a0be6ad09
|
ExternalAPIs
|
2024-06-18 12:27:18 -04:00 |
|
Ed Minnix
|
46e16b88bb
|
Refactor experimental queries to use ThreadModelFlowSource
|
2024-06-18 12:27:17 -04:00 |
|
Ed Minnix
|
cfd5f53eb0
|
Refactor Customizations libraries to use ThreatModelFlowSource
|
2024-06-18 12:27:15 -04:00 |
|
Edward Minnix III
|
8997f2cdf2
|
Merge pull request #16697 from egregius313/egregius313/go/dataflow/threat-modeling
Go: Introduce Threat Modeling
|
2024-06-18 12:25:33 -04:00 |
|
Alex Ford
|
f217de9623
|
Ruby: Move SensitiveDataSource logic into a private module
|
2024-06-18 16:58:30 +01:00 |
|
am0o0
|
1f99559e9f
|
Revert "update id of the query file"
This reverts commit 1f112467ce.
|
2024-06-18 17:33:07 +02:00 |
|
am0o0
|
cb39ae7dd3
|
revert .vscode/settings.json
|
2024-06-18 17:27:15 +02:00 |
|
am0o0
|
8a7fdfa6fe
|
fix conflict
|
2024-06-18 17:18:59 +02:00 |
|
Taus
|
59a77a873c
|
Merge pull request #16754 from github/tausbn/python-disregard-unused-imports-in-pytest-tests
Python: Disregard unused imports in `pytest` tests
|
2024-06-18 15:10:31 +02:00 |
|
Florin Coada
|
b7b35e5913
|
Merge pull request #16778 from github/coadaflorin/2.17.4-changedocs-patch
2.17.4 Changelog patch
|
2024-06-18 13:49:17 +01:00 |
|
Owen Mansel-Chan
|
9403bf25d8
|
Merge pull request #16667 from smowton/smowton/fix/global-variable-side-effect
Add support for flow through content of global variables
|
2024-06-18 13:41:57 +01:00 |
|
Florin Coada
|
34f5b676f1
|
2.17.4 Changelogs patch
|
2024-06-18 13:34:03 +01:00 |
|
Tamas Vajk
|
6c8e391a63
|
C#: Make sure no file is added twice to the compilation
|
2024-06-18 13:45:09 +02:00 |
|
Tamas Vajk
|
5170585515
|
C#: Add integration test with file added multiple times in the same compilation
|
2024-06-18 13:45:06 +02:00 |
|
Alex Ford
|
6a46fb54c5
|
Ruby: Add SensitiveDataSource abstract class
|
2024-06-18 12:11:28 +01:00 |
|
Michael Nebel
|
1c3ceacf04
|
C#: Some renaming and re-factoring.
|
2024-06-18 13:05:21 +02:00 |
|
Michael Nebel
|
dfaa40a1d2
|
C#: Update expected test output from model generation.
|
2024-06-18 13:05:17 +02:00 |
|
Michael Nebel
|
b5d6a6db7e
|
C#: Use the same types as sanitizers for source and sink model as we use for summary model generation.
|
2024-06-18 13:05:12 +02:00 |
|
Michael Nebel
|
031e44b157
|
C#: Add some source/sink model generator test examples.
|
2024-06-18 13:05:07 +02:00 |
|
Max Schaefer
|
2c4a95bb5e
|
Merge pull request #16777 from github/max-schaefer-patch-1
Swift: Add missing bracket in example
|
2024-06-18 11:39:42 +01:00 |
|
Alex Ford
|
6c3d90e8a0
|
Merge pull request #16650 from alexrford/rb/routing-improvements
Ruby: ActionDispatch - support `path => target` route format
|
2024-06-18 11:17:05 +01:00 |
|
Max Schaefer
|
9ca74de3e9
|
Swift: Add missing bracket in example
|
2024-06-18 11:00:59 +01:00 |
|
Joe Farebrother
|
33704779ea
|
Merge pull request #16503 from joefarebrother/ruby-sensitive-sources
Ruby: Use additional sensitive data heuristics for CleartextSources
|
2024-06-18 10:57:55 +01:00 |
|
Michael Nebel
|
cd9d58fdc8
|
Merge pull request #16772 from michaelnebel/java/taintedpermissionthreatmodel
Java: Opt-in `java/tainted-permissions-check` to threat models.
|
2024-06-18 10:54:28 +02:00 |
|
Joe Farebrother
|
eee7f5a896
|
Use a combined regex for performance
|
2024-06-17 22:21:33 +01:00 |
|
Cornelius Riemenschneider
|
0f98d9e815
|
Merge pull request #16774 from github/criemen/cleanup
Remove unused bzl files.
|
2024-06-17 20:04:25 +02:00 |
|
Chris Smowton
|
4da5d6660a
|
Add change note
|
2024-06-17 16:49:09 +01:00 |
|
Chris Smowton
|
38ee085782
|
Adjust test expectation
|
2024-06-17 16:46:49 +01:00 |
|
Chris Smowton
|
822f6eebfb
|
Add support for flow through content of global variables
|
2024-06-17 16:42:23 +01:00 |
|
Ed Minnix
|
b4ecc81145
|
Fix provenance numbers in tests
|
2024-06-17 11:33:19 -04:00 |
|
Alvaro Muñoz
|
c764b39c18
|
Bump qlpack versions
|
2024-06-17 17:11:10 +02:00 |
|
Florin Coada
|
004451ee4b
|
Merge pull request #16773 from github/changedocs/2.17.5
add 2.17.5 unified changelog
|
2024-06-17 16:09:37 +01:00 |
|
Ed Minnix
|
fa2c50616b
|
Remove getSourceType definitions
|
2024-06-17 10:57:11 -04:00 |
|
Ed Minnix
|
b6adff6377
|
Fix jsoniter test
|
2024-06-17 10:51:13 -04:00 |
|
Ed Minnix
|
53dd269f9f
|
Go: Threat model tests
|
2024-06-17 10:51:11 -04:00 |
|
Ed Minnix
|
7f19f449eb
|
Change note
|
2024-06-17 10:51:10 -04:00 |
|
Ed Minnix
|
49fb372eb9
|
Add getSourceType declarations to existing remote flow sources
|
2024-06-17 10:51:09 -04:00 |
|
Ed Minnix
|
df6449cfc7
|
Go: Add the SourceNode and ThreatModelFlowSource classes
|
2024-06-17 10:51:07 -04:00 |
|
Ed Minnix
|
b697068e9a
|
Go: Add threat modeling shared library
|
2024-06-17 10:51:06 -04:00 |
|
Michael Nebel
|
5686efd25c
|
Update java/ql/src/change-notes/2024-06-17-tainted-permissions-check.md
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
|
2024-06-17 16:47:22 +02:00 |
|
Alex Ford
|
f017821062
|
Ruby: rb/weak-sensitive-data-hashing qhelp
|
2024-06-17 15:29:53 +01:00 |
|
Alex Ford
|
d4203d9286
|
Ruby: minimal port of py/weak-sensitive-data-hashing
|
2024-06-17 15:27:00 +01:00 |
|
Alvaro Muñoz
|
1fdf76ac41
|
Improve download artifact and untrusted checkout queries
|
2024-06-17 15:17:46 +02:00 |
|
Cornelius Riemenschneider
|
f41bd41bd0
|
Remove unused bzl files.
|
2024-06-17 15:15:08 +02:00 |
|
Michael Nebel
|
197cdab43d
|
Merge pull request #16752 from michaelnebel/shared/sourcesinkcallables
C#/Java: Add some (shared) helper classes for Neutrals, Sources and Sink
|
2024-06-17 14:58:27 +02:00 |
|