Maiky
4be5cf4e78
Update javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-06-12 19:38:02 +02:00
Rasmus Wriedt Larsen
ec18786488
JS: Provide better model for Array.splice
2024-06-12 16:29:21 +02:00
Mathias Vorreiter Pedersen
5b3403c4b1
C++: Fix bad join in 'lastRefRedefExt'.
2024-06-12 15:24:58 +01:00
Michael B. Gale
e10e2899bd
Go: Update comment in gen.py
2024-06-12 15:24:33 +01:00
Rasmus Wriedt Larsen
54a0e6dc45
JS: Add new test for Array.splice
2024-06-12 16:24:33 +02:00
Michael B. Gale
8629e00686
Go: Remove workspace from vendor/modules.txt
2024-06-12 15:22:56 +01:00
Rasmus Wriedt Larsen
9ed6da1072
JS: prepare to extend Array tests
...
Oh how I have enjoyed working with InlineExpectationTests for these sort
of things, not worrying about all the .expected files changing because
you add a few lines in the middle of your tests :D
2024-06-12 16:22:55 +02:00
Michael B. Gale
a90968d277
Go: Replace go work vendor with go mod vendor
2024-06-12 15:19:14 +01:00
Rasmus Wriedt Larsen
1027ca266d
JS: Allow many Array steps to be used in type-tracking
2024-06-12 16:14:13 +02:00
Joe Farebrother
90d6f2ece3
Factor out nameIndicatesRelevantSensitiveData
2024-06-12 15:11:47 +01:00
Tom Hvitved
605fe54a06
Ruby: Remove two Cartesian products
2024-06-12 15:11:43 +01:00
Joe Farebrother
5f08371f19
Add change note
2024-06-12 15:11:39 +01:00
Joe Farebrother
07f03be8cc
Add unit tests
2024-06-12 15:11:35 +01:00
Joe Farebrother
b0c03f6d68
Allow implicit read steps on sinks
2024-06-12 15:11:32 +01:00
Joe Farebrother
8b51ee8fe8
Use additional sensitive data heuristics in CleartextSources
2024-06-12 15:11:27 +01:00
Michael B. Gale
a04f08f026
Go: Remove go.work file
2024-06-12 15:10:28 +01:00
Tamás Vajk
a756f86847
Merge pull request #16732 from tamasvajk/refactor/extraction-states
...
C#: Refactor extractor state classes and simplify extraction code
2024-06-12 15:20:11 +02:00
Tamas Vajk
0df6a1c4b1
Fix quality issues
2024-06-12 14:48:16 +02:00
Michael Nebel
48739da565
C#: Update expected test output.
2024-06-12 14:16:31 +02:00
Michael Nebel
91ebeee429
C#: Perceive field and property reads as additional flow steps in sink extrapolation.
2024-06-12 14:16:26 +02:00
Michael Nebel
5aee35256d
C#: Add member flow example.
2024-06-12 14:16:22 +02:00
Michael Nebel
4b62cb64ed
C#: Update expected test output.
2024-06-12 14:16:17 +02:00
Michael Nebel
0bbf131fdb
C#: Add some compound sink examples.
2024-06-12 14:16:12 +02:00
Kasper Svendsen
7c2ee80bc3
Document builtin InternSets module
2024-06-12 13:56:48 +02:00
Tamas Vajk
e3cbf1479a
Fix quality issue
2024-06-12 13:25:34 +02:00
Arthur Baars
4ee80653e2
Merge pull request #16471 from Sim4n6/ruby-UBV
...
Ruby: Add some method calls as a Source
2024-06-12 12:42:08 +02:00
Tamas Vajk
3551386a1a
Simplify standalone extractor
2024-06-12 12:30:08 +02:00
Owen Mansel-Chan
6af1ed9d75
Merge pull request #16730 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-06-12 11:22:29 +01:00
Tamas Vajk
cdca607828
Rename Extractor to ExtractionContext
2024-06-12 11:43:19 +02:00
Alvaro Muñoz
c61e71f22d
Update build.yml
2024-06-12 11:19:06 +02:00
Alvaro Muñoz
f8dd493a68
Update build.yml
2024-06-12 11:15:17 +02:00
Tamas Vajk
af2a78ea4d
Reduce references to Extract class
2024-06-12 11:13:05 +02:00
Alvaro Muñoz
f068504c4f
Bump qlpack versions
2024-06-12 10:07:36 +02:00
Alvaro Muñoz
95b5eff5d0
Merge pull request #41 from github/js_extractor
...
Move from yaml to js extractor
2024-06-12 10:05:16 +02:00
Alvaro Muñoz
e5eb85695d
Update action to use javascript extractor
2024-06-12 10:04:50 +02:00
Alvaro Muñoz
e2fb677abb
Remove DS_Store
2024-06-12 09:48:27 +02:00
Paolo Tranquilli
183a825841
Kotlin: expose kotlin version picker for internal packaging
2024-06-12 09:29:57 +02:00
Alvaro Muñoz
63fd73020c
Update lock files
2024-06-12 08:54:01 +02:00
Alvaro Muñoz
df3d6131a8
Update lock files
2024-06-12 08:50:49 +02:00
github-actions[bot]
bbeebfae73
Add changed framework coverage reports
2024-06-12 00:17:31 +00:00
Joe Farebrother
f441c68f7e
Merge pull request #16657 from joefarebrother/python-partial-ssrf-fp
...
Python: Add additional sanitizers to SSRF
2024-06-11 23:20:50 +01:00
Mauro Baluda
1db5e32e86
Extract SAP XSJS file types as Javascript
2024-06-11 23:53:41 +02:00
Mauro Baluda
45a48f360f
Extract SAP XSJS file types as Javascript
2024-06-11 23:51:44 +02:00
Michael B. Gale
e9bd85e0ba
Merge pull request #16704 from github/mbg/go/fix/build-scripts-running-more-than-once
2024-06-11 22:23:15 +01:00
Michael B. Gale
202d77d94f
Merge pull request #16726 from github/mbg/go/log-one-line-for-stray-sources
...
Go: Only log one line for stray .go files
2024-06-11 22:16:21 +01:00
Alvaro Muñoz
ad1f35c86a
Move from yaml to js extractor
2024-06-11 21:24:22 +02:00
Owen Mansel-Chan
24c9062b35
Merge pull request #16671 from owen-mc/go/mad-builtin-taint-models-try-2
...
Go: Convert old-style models for built-ins to MaD
2024-06-11 19:45:34 +01:00
Michael B. Gale
d8d1ae632c
Merge branch 'mbg/go/fix/build-scripts-running-more-than-once' into mbg/go/fix/too-many-go-mod-files-initialised
2024-06-11 18:31:03 +01:00
Michael B. Gale
0f56e408f8
Merge branch 'main' into mbg/go/fix/build-scripts-running-more-than-once
2024-06-11 18:29:41 +01:00
Michael B. Gale
864d629a13
Go: Prevent go.mod files from being added to every directory with stray source files
2024-06-11 18:24:11 +01:00
