erik-krogh
f2d6640003
fix ambiguous import. It could refer both to a module or a file
2024-03-12 15:15:50 +01:00
Asger F
b3fad7a8dc
JS: Rename Iterators2 -> Iterators
2024-03-12 15:12:07 +01:00
Asger F
5aafd33cec
JS: Rename Arrays2 -> Arrays
2024-03-12 15:11:29 +01:00
erik-krogh
c1fd7a6190
autoformat
2024-03-12 15:09:45 +01:00
Asger F
76e0445af0
JS: Be consistent about caching in PreCallGraphStep
2024-03-12 15:08:59 +01:00
Geoffrey White
a27949cffa
C++: Set certain = true in storeStepImpl.
2024-03-12 14:08:20 +00:00
Tamas Vajk
b07b0762f2
Adjust based on code review feedback
2024-03-12 15:07:58 +01:00
erik-krogh
74876ff49b
add change-note
2024-03-12 15:07:36 +01:00
erik-krogh
52f71e4553
small fixes based on review
2024-03-12 15:07:29 +01:00
Ian Lynagh
c2aa334465
Java: Accept test changes
2024-03-12 14:03:02 +00:00
Asger F
28fc8ba0c1
JS: Remove EmptyType
2024-03-12 14:59:04 +01:00
Tom Hvitved
695e728ed5
Ruby: Lower access path limit to 1 for OrmTracking
2024-03-12 14:58:29 +01:00
Tom Hvitved
dddba3228b
Merge pull request #15867 from hvitved/dataflow/ap-limit
...
Data flow: Add `ConfigSig::accessPathLimit`
2024-03-12 14:57:51 +01:00
Asger F
f94aa2ceec
Update javascript/ql/lib/semmle/javascript/dataflow/internal/DataFlowNode.qll
2024-03-12 14:41:11 +01:00
erik-krogh
6be0ed1dc3
narrow the version specifier used for TypeScript
2024-03-12 13:42:58 +01:00
Tom Hvitved
d7790faece
Address review comments
2024-03-12 13:34:55 +01:00
erik-krogh
95a5ec7f27
add test that the new Object.groupBy method has a type
2024-03-12 13:22:11 +01:00
Owen Mansel-Chan
33c17313b4
Add test for not extracting values for intermediate string concatenations
2024-03-12 11:59:10 +00:00
Michael Nebel
50851210ea
Merge pull request #15794 from michaelnebel/csharp/removecil
...
C#: Delete the CIL extractor.
2024-03-12 12:48:41 +01:00
Mathias Vorreiter Pedersen
1a42e55095
Merge pull request #15820 from MathiasVP/add-type-confusion-query
...
C++: Add a new query for detecting type confusion vulnerabilities
2024-03-12 10:29:22 +00:00
Tom Hvitved
0e0b73a5e6
Address review comment
2024-03-12 11:22:04 +01:00
Michael Nebel
eb62c033aa
C#: Remove the cil extractor option.
2024-03-12 11:12:56 +01:00
Michael Nebel
f59aaf1d75
C#: Add change note.
2024-03-12 11:12:55 +01:00
Michael Nebel
2e5155d1f8
C#: Remove all CIL related tests.
2024-03-12 11:12:55 +01:00
Michael Nebel
af06202241
C#: Cleanup implementation.
2024-03-12 11:12:55 +01:00
Michael Nebel
bf27f203d5
C#: Remove CIL extractor projects.
2024-03-12 11:12:55 +01:00
Alvaro Muñoz
37331c3d43
Merge pull request #28 from GitHubSecurityLab/new_ast_refactor
...
Refactor ast nodes
2024-03-12 10:17:34 +01:00
Alvaro Muñoz
9b97dbd870
Refactor ast nodes
2024-03-12 10:16:43 +01:00
Tamas Vajk
1633673cc2
C#: Deduplicate not yet restored package names
2024-03-12 09:22:38 +01:00
Kevin Stubbings
5acc15bfff
fix grammar
2024-03-11 20:13:08 -07:00
Kevin Stubbings
30fe4168e3
Removed filepath.base sanitizer
2024-03-11 15:08:10 -07:00
Angela P Wen
ca12348ecb
Merge pull request #15880 from github/sitedocs/2.16.4-2
...
Add changelog for 2.16.4
2024-03-11 14:59:53 -07:00
Kevin Stubbings
c4c0b22bc7
Formattinga and change notes
2024-03-11 14:54:30 -07:00
Kevin Stubbings
c9b49d3760
resolve feedback
2024-03-11 14:54:28 -07:00
Kevin Stubbings
530c76ca8b
Add New Sanitizers and Modify Old Ones
2024-03-11 14:53:29 -07:00
Pierre
d1f8336be6
Add changelog for 2.16.4
2024-03-11 22:21:25 +01:00
Ed Minnix
7745c2c2b7
Change note
2024-03-11 17:00:12 -04:00
Tom Hvitved
8d767862dc
Swift: Implement new data flow interface
2024-03-11 20:56:38 +01:00
Tom Hvitved
1c57e99686
C++: Implement new data flow interface
2024-03-11 20:56:38 +01:00
Tom Hvitved
257686eb9a
C#: Implement new data flow interface
2024-03-11 20:56:38 +01:00
Tom Hvitved
4291290277
Ruby: Implement new data flow interface
2024-03-11 20:56:38 +01:00
Tom Hvitved
e82e3180f0
Data flow: Replace hasLocationInfo with getLocation
2024-03-11 20:56:38 +01:00
Mathias Vorreiter Pedersen
9854ed4b89
C++: Delete comment.
2024-03-11 18:54:53 +00:00
Mathias Vorreiter Pedersen
2345907a52
C++: Reintroduce the 'cannotContainString' optimization that was removed in #15516 .
2024-03-11 18:49:03 +00:00
Mathias Vorreiter Pedersen
f97b6e2848
C++: Stop conflating pointers and indirections in the query.
2024-03-11 18:48:19 +00:00
Mathias Vorreiter Pedersen
32e532ff3c
C++: Some cleanup to avoid conflating the case of a function returning something as a return value, and a function updating one of its arguments.
2024-03-11 18:42:42 +00:00
Ed Minnix
bc745dfd5e
Windows registry sources
2024-03-11 13:55:34 -04:00
erik-krogh
9f410eb2d6
Merge branch 'main' into ts-54
2024-03-11 18:07:52 +01:00
Joe Farebrother
9c51514bd9
Merge pull request #15857 from joefarebrother/ruby-activerecord-from
...
Ruby: Model second argument of `ActiveRecord` `from`
2024-03-11 16:49:52 +00:00
Henry Mercer
c325ff8a23
Mark lines of code queries as telemetry queries
...
The new file coverage metrics are available in all supported GHES
versions. This PR tags lines of code queries as telemetry queries. Lines
of code information will still be available in the SARIF file, but it
will no longer be displayed in the logging output of the CLI.
The one exception is the metric queries for Java/Kotlin that provides
separate lines of code information for Java and Kotlin. I've kept these
since separate file coverage information for languages like Java and
Kotlin is only available for GHES 3.12 and later.
2024-03-11 16:40:31 +00:00
