Alvaro Muñoz
ebaac5f5cb
fix: enforce input,output,env prefixes in MaD
2024-02-14 14:03:11 +01:00
erik-krogh
7c2465e7b7
add change-note
2024-02-14 13:53:43 +01:00
erik-krogh
a2bd45d0cb
apply suggestions from code review
2024-02-14 13:50:27 +01:00
Rasmus Wriedt Larsen
9399258e3b
Merge branch 'main' into amammad-python-bombs
2024-02-14 13:37:59 +01:00
Jeroen Ketema
46bc311111
C++: Support constexpr if in the IR
2024-02-14 13:37:56 +01:00
Tony Torralba
5ce35e47b9
Adjust a test case so that the key isn't considered dummy
...
(len < 4)
2024-02-14 13:06:31 +01:00
Ian Lynagh
48ea94ba23
Kotlin: Handle PsiSourceManager moving
2024-02-14 11:55:54 +00:00
Ian Lynagh
1b40b595fa
Kotlin: Handle forAllMethodsWithBody being removed
...
Per:
commit 28797a31b4d9b7f5c99d162ab19fc6b46f8e529d
Author: Alexander Udalov <alexander.udalov@jetbrains.com >
Date: Thu Feb 1 13:22:48 2024 +0100
JVM: refactor JvmDefaultMode, remove/rename some entries
[...]
- remove forAllMethodsWithBody because its behavior is now equivalent to
isEnabled
[...]
2024-02-14 11:55:54 +00:00
Óscar San José
cd00a4dacd
Merge pull request #15584 from jsoref/github-only
...
Limit xl runner jobs to github org
2024-02-14 12:49:07 +01:00
Asger F
75a95ffcd1
Merge pull request #15602 from asgerf/js/block-logical-and-flow
...
JS: Fix flow through &&
2024-02-14 12:29:40 +01:00
Tony Torralba
458bbb3581
Rename fwk module
2024-02-14 12:23:27 +01:00
Tony Torralba
16284fdd20
Discard sources that are obvious dummy values
2024-02-14 12:21:52 +01:00
Tony Torralba
a76de495e0
Simplify sanitizers
...
Use DataFlow::returnedWithError instead
2024-02-14 12:21:51 +01:00
Tony Torralba
6b74cb7e75
Remove unneeded $ANYVERSION
2024-02-14 12:21:51 +01:00
Tony Torralba
3fb422ca25
Split Jwt.qll into framework libraries, which makes more sense
2024-02-14 12:21:38 +01:00
Tony Torralba
8afaa231ee
Update go/ql/lib/semmle/go/security/Jwt.qll
2024-02-14 12:15:20 +01:00
Tony Torralba
304998d50e
Update go/ql/src/Security/CWE-798/HardcodedCredentials.ql
2024-02-14 12:15:20 +01:00
Tony Torralba
84d1d72497
Apply suggestions from code review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-02-14 12:15:19 +01:00
Tony Torralba
750c8085cb
Remove duplicated main from tests
2024-02-14 12:15:19 +01:00
Tony Torralba
ba1faea630
Go: Promote go/hardcoded-key from experimental
2024-02-14 12:15:14 +01:00
Jeroen Ketema
337db6b29b
Merge pull request #15609 from jketema/destructors3
...
C++: Output the declaration entries used in range-based for-loops
2024-02-14 11:37:09 +01:00
Alvaro Muñoz
7139d3b6d2
Merge pull request #8 from GitHubSecurityLab/changed-files-sources
...
Add some changed-files sources
2024-02-14 10:56:20 +01:00
Alvaro Muñoz
2b3b3732b9
resolve conflicts
2024-02-14 10:55:31 +01:00
Alvaro Muñoz
6b83afebaa
Merge pull request #9 from GitHubSecurityLab/content_set
...
feat(field-flow): enhance dataflow tracking
2024-02-14 10:49:11 +01:00
Asger F
2172c4863f
Merge pull request #15380 from asgerf/js/endpoint-naming
...
JS: Add library for naming endpoints
2024-02-14 10:48:13 +01:00
Alvaro Muñoz
e6b4676f90
feat(field-flow): enhance dataflow tracking
...
implement field flow to reduce false positives
2024-02-14 10:47:00 +01:00
Asger F
18db769d6d
JS: Update expected output
2024-02-14 10:45:51 +01:00
Asger F
bafe5e3d8e
JS: Add test case (with old expected data)
2024-02-14 10:45:51 +01:00
Anders Schack-Mulligen
393251dde6
Merge pull request #15582 from hvitved/dataflow/cache-viable-callable-ext
...
Data flow: Cache `viableCallableExt`
2024-02-14 10:31:43 +01:00
Óscar San José
96ed6597dd
Merge branch 'main' into github-only
2024-02-14 10:23:39 +01:00
Michael Nebel
bafea9190d
Merge pull request #15474 from michaelnebel/csharp/primaryconstructors
...
C# 12: Primary constructors.
2024-02-14 10:09:23 +01:00
Anders Schack-Mulligen
fb2d36ddac
Merge pull request #15451 from Marcono1234/marcono1234/java-assignment-doc
...
Java: Document which assignment type is covered by which class
2024-02-14 08:59:50 +01:00
Asger F
9a08c27ad4
JS: Change note
2024-02-13 22:43:41 +01:00
Jeroen Ketema
c79cc493e8
C++: Accept more test changes
2024-02-13 21:53:51 +01:00
Geoffrey White
0d6c141d72
Merge pull request #15607 from geoffw0/unsafeunpack
...
Swift: Trivial changes to swift/unsafe-unpacking
2024-02-13 20:49:57 +00:00
Jeroen Ketema
a3b3aa4f25
C++: Update tests after extractor changes
2024-02-13 21:31:21 +01:00
Jeroen Ketema
caf09e0735
C++: Update IR comment that no longer applies
2024-02-13 21:30:58 +01:00
Jeroen Ketema
b3aea0f893
C++: Do not print the qualifier of OverloadedPointerDereferenceExpr twice in PrintAST
2024-02-13 21:29:21 +01:00
Michael B. Gale
f7955db841
Merge pull request #15603 from github/mbg/go/fix-file-info-extraction
2024-02-13 20:02:13 +00:00
Jeroen Ketema
b776cbe668
Merge pull request #15597 from jketema/destructors2
...
C++: Update test results of `constexpr if` destructors
2024-02-13 19:59:19 +01:00
Geoffrey White
159080f133
Swift: Accept test changes.
2024-02-13 18:06:17 +00:00
Geoffrey White
65e3ae0c45
Swift: Move the two CWE-022 tests into a common directory.
2024-02-13 17:50:30 +00:00
Michael B. Gale
205847df64
Go: Add DummyFile class
2024-02-13 17:49:31 +00:00
Michael B. Gale
c6f4495ada
Go: Exclude dummy files from File
2024-02-13 17:46:41 +00:00
Geoffrey White
dfba6b97ac
Swift: Case consistency.
2024-02-13 17:45:55 +00:00
Geoffrey White
42e708b387
Swift: Tweak the change note.
2024-02-13 17:43:43 +00:00
Benjamin Rodes
5c508553f3
Efficiency improvement (force a better join order)
2024-02-13 09:42:08 -08:00
Asger F
f5c437694c
Update UselessConditional.expected
2024-02-13 18:31:24 +01:00
Asger F
f27fda801e
Update tests.expected
2024-02-13 18:30:23 +01:00
Geoffrey White
fd1314bea4
Merge pull request #14888 from maikypedia/maikypedia/swift-zip
...
Swift: Add Unsafe Unpacking Query (CWE-022)
2024-02-13 16:05:22 +00:00
