Chris Smowton
e110db58f8
Add test for empty argfile
2023-11-29 12:51:22 +00:00
Rasmus Wriedt Larsen
76a6fb563d
Docs: List Python 3.12 as supported
...
Support was added in https://github.com/github/codeql/pull/14636
2023-11-29 11:22:27 +01:00
Mathias Vorreiter Pedersen
1f9e2c71ce
Merge pull request #14928 from MathiasVP/surprising-lifetimes-c_str
...
C++: Add a new query for calling `c_str` on temporary objects
2023-11-29 10:15:11 +00:00
Erik Krogh Kristensen
399872b719
Merge pull request #14943 from rafaelurben/patch-1
...
JS: Add django template urls as "save urls"
2023-11-29 11:10:16 +01:00
Mathias Vorreiter Pedersen
351caaccfe
C++: Add GOOD and BAD comments to qhelp examples.
2023-11-29 09:44:54 +00:00
Mathias Vorreiter Pedersen
8afd9288cb
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2023-11-29 09:36:29 +00:00
Rafael
1a05c2e704
Added Django test
2023-11-29 08:26:49 +01:00
Rafael
0a74a3a765
Update javascript/ql/src/change-notes/2023-11-28-django-urls.md
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2023-11-29 08:23:02 +01:00
Rafael
0b0c9e3e48
Create 2023-11-28-django-urls.md
2023-11-28 22:29:53 +01:00
Rafael
286e3951bf
Detect Django template URLs
...
Django URLs are currently not detected, but flask and nunjucks URL are. (See https://github.com/github/codeql/issues/12267 )
2023-11-28 22:22:07 +01:00
Felicity Chapman
d299ade765
Merge branch 'main' into fc-codeql-vs-code-12574
2023-11-28 20:42:20 +00:00
Felicity Chapman
298c6b5295
Merge pull request #14942 from github/codeql-cli-2.15.3
...
Mergeback post release changes from the `codeql-cli-2.15.3` branch to `main`
2023-11-28 20:41:43 +00:00
Felicity Chapman
47d00d1311
Update multiple models section for feedback
2023-11-28 19:59:31 +00:00
Felicity Chapman
9e74f64c5a
Update screenshot for feedback
2023-11-28 19:59:31 +00:00
Felicity Chapman
a041a508ac
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-11-28 19:59:31 +00:00
Felicity Chapman
2ede709308
Add a few missing details
2023-11-28 19:59:31 +00:00
Felicity Chapman
824fd75d74
Update after self-review
2023-11-28 19:59:31 +00:00
Pierre
568bcfd038
Fix changelog docs based on latest generator version
2023-11-28 19:59:31 +00:00
Felicity Chapman
ed5e28162f
Draft docs for revised UI
2023-11-28 19:59:31 +00:00
Pierre
cedb91ba0d
Add combined changelogs for 2.15.3 and backfill historic versions
2023-11-28 19:59:31 +00:00
Jeroen Ketema
483f4c3ce9
Merge pull request #14921 from jketema/kr-style-function-parameters
...
C++: Expose whether a function was prototyped or not
2023-11-28 17:43:22 +01:00
Robert Marsh
4df25f4f7f
Merge pull request #14797 from geoffw0/sqlsinks
...
Swift: Heuristic sinks for swift/sql-injection
2023-11-28 11:18:10 -05:00
Ian Lynagh
429c550151
Kotlin 2: Accept some location changes
2023-11-28 15:57:48 +00:00
Mathias Vorreiter Pedersen
911f1543e0
DataFlow: Adjust QLDoc.
2023-11-28 15:26:48 +00:00
Tom Hvitved
e79ad3b738
Merge pull request #14937 from hvitved/csharp/stubvisitor-recursion-guard
...
C#: Prevent infinite recursion in `EqualsModuloTupleElementNames`
2023-11-28 16:25:52 +01:00
Mathias Vorreiter Pedersen
339bf1363a
DataFlow: s/flowThroughStepAllowed/validParameterAliasStep.
2023-11-28 14:32:23 +00:00
Mathias Vorreiter Pedersen
e47ad274ea
C++: Add Schack's tests.
2023-11-28 14:32:21 +00:00
Mathias Vorreiter Pedersen
fb6329fbc1
C++: Fix test annotation
2023-11-28 14:27:15 +00:00
Mathias Vorreiter Pedersen
1771d77c23
C++: Accept test changes.
2023-11-28 14:27:15 +00:00
Mathias Vorreiter Pedersen
9049932f42
C++: Implement the new predicate.
2023-11-28 14:27:15 +00:00
Mathias Vorreiter Pedersen
064f68fdca
DataFlow: Add a predicate for modifying which dataflow steps participate in flow-through summaries.
2023-11-28 14:27:15 +00:00
Mathias Vorreiter Pedersen
1753a7e146
C++: Add tests.
2023-11-28 14:27:15 +00:00
Owen Mansel-Chan
de87dd5dee
Test no result if deferred function returns error
2023-11-28 14:23:37 +00:00
Owen Mansel-Chan
57dafd3732
Improve test for UnhandledCloseWritableHandle
...
Now the different paths won't have the same two sources.
2023-11-28 14:21:43 +00:00
Jeroen Ketema
28ac46a73f
C++: Add change note
2023-11-28 14:57:02 +01:00
Taus
6e279183d9
Python: Remove unused unsafeFilter predicates
2023-11-28 13:54:17 +00:00
Taus
91643ad08f
Python: Update hasUnsafeFilter to use API graph
...
This will probably break the tests in the short run. I'll fix the remaining issues in a follow-up commit.
Co-authored-by: Rasmus Wriedt Larsen <rasmuswl@github.com >
2023-11-28 14:48:26 +01:00
Rasmus Wriedt Larsen
2c10160ad4
Python: Highlight we actually want post-update nodes for *args and **kwargs arguments
2023-11-28 14:07:03 +01:00
Rasmus Wriedt Larsen
02f2031239
Python: Ensure other call for super().foo
2023-11-28 14:04:51 +01:00
Mathias Vorreiter Pedersen
2b36ba33f0
C++: Add support for 'data' in the query.
2023-11-28 12:57:59 +00:00
Michael B. Gale
e349611f86
Merge pull request #14932 from github/dependabot/go_modules/go/extractor/extractor-dependencies-29c4186f99
...
Bump the extractor-dependencies group in /go/extractor with 1 update
2023-11-28 12:57:24 +00:00
Alex Eyers-Taylor
3e9aeac004
CPP: Fix sscanf false positives in older linux repos
2023-11-28 12:07:05 +00:00
Geoffrey White
68a9154106
Swift: Merge the two PrintfFormat implementations.
2023-11-28 12:03:05 +00:00
Mathias Vorreiter Pedersen
7b8d164692
C++: Add more good test cases.
2023-11-28 11:58:33 +00:00
Mathias Vorreiter Pedersen
62c432f3c7
C++: Tabs -> Spaces.
2023-11-28 11:52:17 +00:00
Geoffrey White
5f4213004b
Merge branch 'main' into logsinks
2023-11-28 11:51:56 +00:00
Tom Hvitved
fea2bf9217
C#: Prevent infinite recursion in EqualsModuloTupleElementNames
2023-11-28 11:45:09 +01:00
Rasmus Wriedt Larsen
c12053287e
Merge pull request #14936 from RasmusWL/star-args-kwargs-missing-flow
...
Python: Highlight missing post-update flow for `*args` and `**kwargs`
2023-11-28 11:34:51 +01:00
Rasmus Wriedt Larsen
3c82653b63
Python: Highlight missing post-update flow for *args and **kwargs
2023-11-28 10:59:48 +01:00
Jeroen Ketema
7dec819151
C++: Expose whether a function was prototyped or not
2023-11-28 10:24:43 +01:00