85368 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Michael Nebel	40204911bc	C#: Only allow source propgatation upwards in the call stack if the call path consists of unique call targets (to avoid unwanted virtual dispatch). This severely tightens the generation of extrapolated sources.	2024-06-19 14:10:49 +02:00
Paul Hodgkinson	3a98edb60b	Merge branch 'main' into aegilops/js/insecure-helmet-middleware	2024-06-19 12:53:32 +01:00
Tom Hvitved	6dbdc9e17f	Merge pull request #16784 from github/redsun82/fix-warnings-in-ql-tests ... C++/Java: Accept new warning format in ql tests	2024-06-19 13:05:50 +02:00
aegilops	d142f830da	Change note and changed name of query in .ql file	2024-06-19 12:04:32 +01:00
aegilops	8a3cec4977	Fix formatting for check	2024-06-19 11:38:20 +01:00
Paolo Tranquilli	b7a2ea8981	CI: accept other diagnostic format related test changes	2024-06-19 11:33:50 +02:00
Paolo Tranquilli	59f8f8a394	Merge branch 'main' into redsun82/fix-warnings-in-ql-tests	2024-06-19 11:21:36 +02:00
aegilops	de96d3951d	Renamed to helmetProperty everywhere	2024-06-19 10:15:06 +01:00
aegilops	f4691b1919	Changed to more-modern Dataflow libraries	2024-06-19 10:11:06 +01:00
aegilops	81ef255a87	Change to helmetProperty from helmetSetting variable name	2024-06-19 10:09:50 +01:00
Tamás Vajk	45ece48b6f	Merge pull request #16776 from tamasvajk/fix/source-generator-folder ... C#: Make sure no file is added twice to the compilation	2024-06-19 10:09:50 +02:00
Paolo Tranquilli	919ddccfdb	C++/Java: Accept new warning format in ql tests	2024-06-19 09:13:18 +02:00
aegilops	da9e1e61a4	Moved examples into separate files	2024-06-18 19:50:06 +01:00
Edward Minnix III	7adfa6bbed	Merge pull request #16709 from egregius313/egregius313/go/df/threat-models/refactor-queries ... Go: Refactor queries to use `ThreatModelFlowSource` instead of `RemoteFlowSource`	2024-06-18 13:56:00 -04:00
Alex Ford	51f3f15e42	Ruby: remove outdated test comment	2024-06-18 17:51:49 +01:00
Alex Ford	d79a253c20	Ruby: remove unused import	2024-06-18 17:49:14 +01:00
Alex Ford	7380e29774	Ruby: changenote for rb/weak-sensitive-data-hashing	2024-06-18 17:48:51 +01:00
Alex Ford	d994959720	Ruby: add tests for rb/weak-sensitive-data-hashing	2024-06-18 17:47:32 +01:00
Alex Ford	81ec6861f9	Ruby: fix some SensitiveDataSource definitions	2024-06-18 17:46:52 +01:00
am0o0	eb1999f8b3	revert .vscode/settings.json :((	2024-06-18 18:43:20 +02:00
am0o0	ccb923a436	fix formatting	2024-06-18 18:31:29 +02:00
Ed Minnix	5bbd003dfc	Reword change note	2024-06-18 12:27:21 -04:00
Ed Minnix	b53712cae0	Change note	2024-06-18 12:27:19 -04:00
Ed Minnix	6a0be6ad09	ExternalAPIs	2024-06-18 12:27:18 -04:00
Ed Minnix	46e16b88bb	Refactor experimental queries to use ThreadModelFlowSource	2024-06-18 12:27:17 -04:00
Ed Minnix	cfd5f53eb0	Refactor Customizations libraries to use ThreatModelFlowSource	2024-06-18 12:27:15 -04:00
Edward Minnix III	8997f2cdf2	Merge pull request #16697 from egregius313/egregius313/go/dataflow/threat-modeling ... Go: Introduce Threat Modeling	2024-06-18 12:25:33 -04:00
Alex Ford	f217de9623	Ruby: Move SensitiveDataSource logic into a private module	2024-06-18 16:58:30 +01:00
am0o0	1f99559e9f	Revert "update id of the query file" ... This reverts commit 1f112467ce.	2024-06-18 17:33:07 +02:00
am0o0	cb39ae7dd3	revert .vscode/settings.json	2024-06-18 17:27:15 +02:00
am0o0	8a7fdfa6fe	fix conflict	2024-06-18 17:18:59 +02:00
Taus	59a77a873c	Merge pull request #16754 from github/tausbn/python-disregard-unused-imports-in-pytest-tests ... Python: Disregard unused imports in `pytest` tests	2024-06-18 15:10:31 +02:00
Florin Coada	b7b35e5913	Merge pull request #16778 from github/coadaflorin/2.17.4-changedocs-patch ... 2.17.4 Changelog patch	2024-06-18 13:49:17 +01:00
Owen Mansel-Chan	9403bf25d8	Merge pull request #16667 from smowton/smowton/fix/global-variable-side-effect ... Add support for flow through content of global variables	2024-06-18 13:41:57 +01:00
Florin Coada	34f5b676f1	2.17.4 Changelogs patch	2024-06-18 13:34:03 +01:00
Tamas Vajk	6c8e391a63	C#: Make sure no file is added twice to the compilation	2024-06-18 13:45:09 +02:00
Tamas Vajk	5170585515	C#: Add integration test with file added multiple times in the same compilation	2024-06-18 13:45:06 +02:00
Alex Ford	6a46fb54c5	Ruby: Add SensitiveDataSource abstract class	2024-06-18 12:11:28 +01:00
Michael Nebel	1c3ceacf04	C#: Some renaming and re-factoring.	2024-06-18 13:05:21 +02:00
Michael Nebel	dfaa40a1d2	C#: Update expected test output from model generation.	2024-06-18 13:05:17 +02:00
Michael Nebel	b5d6a6db7e	C#: Use the same types as sanitizers for source and sink model as we use for summary model generation.	2024-06-18 13:05:12 +02:00
Michael Nebel	031e44b157	C#: Add some source/sink model generator test examples.	2024-06-18 13:05:07 +02:00
Max Schaefer	2c4a95bb5e	Merge pull request #16777 from github/max-schaefer-patch-1 ... Swift: Add missing bracket in example	2024-06-18 11:39:42 +01:00
Alex Ford	6c3d90e8a0	Merge pull request #16650 from alexrford/rb/routing-improvements ... Ruby: ActionDispatch - support `path => target` route format	2024-06-18 11:17:05 +01:00
Max Schaefer	9ca74de3e9	Swift: Add missing bracket in example	2024-06-18 11:00:59 +01:00
Joe Farebrother	33704779ea	Merge pull request #16503 from joefarebrother/ruby-sensitive-sources ... Ruby: Use additional sensitive data heuristics for CleartextSources	2024-06-18 10:57:55 +01:00
Michael Nebel	cd9d58fdc8	Merge pull request #16772 from michaelnebel/java/taintedpermissionthreatmodel ... Java: Opt-in `java/tainted-permissions-check` to threat models.	2024-06-18 10:54:28 +02:00
Joe Farebrother	eee7f5a896	Use a combined regex for performance	2024-06-17 22:21:33 +01:00
Cornelius Riemenschneider	0f98d9e815	Merge pull request #16774 from github/criemen/cleanup ... Remove unused bzl files.	2024-06-17 20:04:25 +02:00
Chris Smowton	4da5d6660a	Add change note	2024-06-17 16:49:09 +01:00