am0o0
a10b5021b4
fix tests, it is not fixed 100%
2024-07-15 10:13:57 +02:00
Michael Nebel
8eba4a3e51
C#: Code quality improvement.
2024-07-15 08:05:13 +02:00
Owen Mansel-Chan
cd9b364e5a
Merge pull request #16974 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-07-14 22:31:55 +01:00
am0o0
87b6495c91
add zlib tests with stubs :)
2024-07-14 21:10:56 +02:00
Owen Mansel-Chan
3efbee0d81
Accept provenance numbering changes
2024-07-14 16:06:29 +01:00
Owen Mansel-Chan
99ed3c2ac1
Convert ElazarlGoproxy::UserControlledRequestData to MaD
2024-07-14 14:28:48 +01:00
Owen Mansel-Chan
2ec64a9ca8
Convert EchoContextBinder to MaD
2024-07-14 14:28:47 +01:00
Owen Mansel-Chan
3fc598dbe9
Convert EchoContextSource to MaD
2024-07-14 14:28:46 +01:00
Owen Mansel-Chan
5b38d51f62
Convert Chi::UserControlledMethod to MaD
2024-07-14 14:28:46 +01:00
Owen Mansel-Chan
3bd4a203bb
Convert Chi::UserControlledFunction to MaD
2024-07-14 14:28:44 +01:00
github-actions[bot]
7fc95b8eff
Add changed framework coverage reports
2024-07-14 00:20:23 +00:00
Alvaro Muñoz
76ded33280
Bump qlpack versions
2024-07-13 23:29:36 +02:00
Alvaro Muñoz
cc64c95dbc
feat(dataflow): Update edges predicate to only link to next step
...
Previously each step was linking to all possible following steps. This change makes a better flow path explanation flowing from the checkout to the poisonable step, step by step
2024-07-13 23:28:47 +02:00
Owen Mansel-Chan
dd1d5ecab4
Merge pull request #16967 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-07-13 17:24:36 +01:00
am0o0
bf506f8a9e
remove redundent stubs
2024-07-13 18:06:02 +02:00
am0o0
71e1d63953
finilize tests
2024-07-13 18:00:50 +02:00
am0o0
d8e2d355df
categorize the new stubs
2024-07-13 17:25:38 +02:00
am0o0
8f7c690529
revert some mistakes
2024-07-13 17:03:24 +02:00
am0o0
1d1c476674
update tests and use TaintFlowTestArgString
...
add stubs
add missed sink models
2024-07-13 16:58:51 +02:00
Jami
9c98296ad2
Merge pull request #16965 from jcogs33/jcogs33/add-FilePath-exists-sink
...
Java: add path-injection sink for `hudson.FilePath.exists()`
2024-07-13 10:15:37 -04:00
Chris Smowton
1cb9f6370f
Use hasTaintFlow marker
2024-07-13 13:09:43 +02:00
Chris Smowton
059a1389c6
Run TaintedPath query on experimental tests
2024-07-13 13:09:26 +02:00
Chris Smowton
4e9a528df9
Move experimental tests
2024-07-13 13:09:08 +02:00
am0o0
025aa77e79
add the snappy missed sink
2024-07-13 11:15:45 +02:00
am0o0
8c106964ec
remove duplicate parts thanks to @owen-mc
2024-07-13 11:11:07 +02:00
am0o0
3868b386f3
update inline tests
2024-07-13 10:47:42 +02:00
am0o0
0165696a1e
update tests
2024-07-13 10:33:35 +02:00
am0o0
8ba48e801a
fix examples
2024-07-13 10:28:19 +02:00
am0o0
dd3cc33298
move DecompressionBombsFlow::PathGraph to DecompressionBomb.ql
2024-07-13 10:24:07 +02:00
am0o0
c824aa4e45
delete pom.xml
2024-07-13 10:21:53 +02:00
Am
a3b5d2a28d
Update java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/DecompressionBomb.qhelp
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-07-13 10:20:43 +02:00
Am
4fbf76008e
Update java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/DecompressionBomb.qhelp
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-07-13 10:20:25 +02:00
Owen Mansel-Chan
b7a5252cb0
Refactor inAndroidApplication
2024-07-13 07:35:02 +01:00
Owen Mansel-Chan
8dcef8223f
Tweak change note
2024-07-13 07:31:18 +01:00
github-actions[bot]
5d657ba99a
Add changed framework coverage reports
2024-07-13 00:18:24 +00:00
Alvaro Muñoz
c1d8ca0976
Bump qlpack versions
2024-07-13 00:01:49 +02:00
Alvaro Muñoz
44911382af
feat(tests): Update tests results
2024-07-12 23:49:05 +02:00
Alvaro Muñoz
9917c46f6f
feat(core): Add StepsContainer class
...
A StepsContainer is an abstract class that includes all nodes with steps: Runs and LocalJobs
2024-07-12 23:48:52 +02:00
Alvaro Muñoz
69d173f13c
fix(refactor): Remove unnecessary variables
2024-07-12 23:47:52 +02:00
Alvaro Muñoz
7f77e89bbf
feat(tests): Add test for checkout in composite action
2024-07-12 23:31:12 +02:00
Alexandre Boulgakov
faf77d5526
C++: Update special members test results.
2024-07-12 18:10:32 +01:00
Alexandre Boulgakov
b3b04b4e5b
C++: Extend template member test to better test on-demand indexing of special member functions.
2024-07-12 18:08:18 +01:00
Alexandre Boulgakov
18d9310a61
C++: Update tests to reflect on-demand indexing of special member functions.
...
None of these tests were relying on the removed rows.
2024-07-12 18:06:56 +01:00
Sid Shankar
772344dfa4
Merge pull request #16886 from aegilops/aegilops/polyfill-io-compromised-script
2024-07-12 11:34:17 -04:00
Paul Hodgkinson
de5ec1fc01
Merge branch 'main' into aegilops/polyfill-io-compromised-script
2024-07-12 14:22:15 +01:00
Rasmus Wriedt Larsen
efcd4e297e
Add change-note
2024-07-12 15:21:51 +02:00
aegilops
79980a98a2
Added links to eventual location of CUSTOMIZING.md
2024-07-12 14:21:50 +01:00
Paul Hodgkinson
11249e7182
Apply suggestions from code review - docs tweaks of CUSTOMIZING.md
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2024-07-12 14:20:03 +01:00
Rasmus Wriedt Larsen
db8a5306cf
Python: Add MaD support for DictionaryElement/DictionaryElementAny for sources
2024-07-12 15:19:40 +02:00
Rasmus Wriedt Larsen
eed8b3e87b
Python: Add more tests for MaD sources
2024-07-12 15:10:23 +02:00
