Rasmus Lerchedahl Petersen
3457f23db5
Python: Add change note
2023-08-10 20:53:43 +02:00
Geoffrey White
0a2e4def8e
Swift: Change note.
2023-08-10 19:53:24 +01:00
Geoffrey White
4f5d7e1b6f
Swift: Accept test changes.
2023-08-10 19:49:27 +01:00
Geoffrey White
936b1ced4d
Swift: Add one last test case (and address a .expected change elsewhere).
2023-08-10 19:39:39 +01:00
Rasmus Lerchedahl Petersen
e5cd3e8f64
Python: nice locations for import aliases
...
These were computed wrongly before.
2023-08-10 20:27:06 +02:00
Tom Hvitved
b28f60ccd2
Ruby: Add test for documenting missing flow through destructured parameters
2023-08-10 20:22:11 +02:00
Robert Marsh
36bdadfc36
Merge pull request #13933 from geoffw0/madtuples
...
Swift: Models-as-data support for tuple content
2023-08-10 14:17:45 -04:00
Ian Lynagh
58da62e244
Kotlin: Handle null parent IDs in getFunctionLabel correctly
2023-08-10 18:49:10 +01:00
Erik Krogh Kristensen
3e2c6d69f9
Merge pull request #13940 from erik-krogh/rate-default
...
JS: change the defaults in the qhelp for missing-rate-limit to something more reasonable
2023-08-10 19:25:33 +02:00
Geoffrey White
94a5aa450c
Swift: Edit the weak sensitive data hashing examples and qhelp to encourage use of HMAC and key derivation algorithms where appropriate.
2023-08-10 18:21:25 +01:00
Owen Mansel-Chan
08e1e8a120
Improve inaccurate deprecation comments
2023-08-10 15:50:08 +01:00
Owen Mansel-Chan
94c15f712a
Remove unnecessary fieldFlowBranchLimit
2023-08-10 15:50:06 +01:00
Owen Mansel-Chan
0928fa6e1f
Give MyFlowstate a less generic name
2023-08-10 15:50:05 +01:00
Owen Mansel-Chan
36b1a0dc54
Update for recent changes to DsnInjection
2023-08-10 15:50:03 +01:00
Owen Mansel-Chan
2578ef4786
Remove output from running query like a test
2023-08-10 15:50:02 +01:00
Owen Mansel-Chan
089ea010d7
Improve QLDoc for Config::FlowState in StringBreak
2023-08-10 15:50:01 +01:00
Owen Mansel-Chan
e33d303b48
Do not make unnecessary changes
2023-08-10 15:49:59 +01:00
Owen Mansel-Chan
e6c8a0b653
Use more descriptive names for merged path graphs
2023-08-10 15:49:58 +01:00
Owen Mansel-Chan
6b4bf12316
Revert edit to deprecated class
2023-08-10 15:49:57 +01:00
Owen Mansel-Chan
039925164d
Keep newline at the end of identical-files.json
...
VS Code's JSON formatter removed it automatically. It turns out
that the easiest way to keep it is to use the
`files.insertFinalNewline` setting, which the JSON formatter obeys.
2023-08-10 15:49:55 +01:00
Owen Mansel-Chan
046e517c3f
Remove unnecessary import
2023-08-10 15:49:54 +01:00
Owen Mansel-Chan
81d4149a17
Note deprecation in QLDoc for LogInjection
2023-08-10 15:49:52 +01:00
Owen Mansel-Chan
b6b7e1589c
Make taint tracking tests use new API
2023-08-10 15:49:51 +01:00
Owen Mansel-Chan
c11da5bf67
Make taint tracking tests use InlineFlowTest
2023-08-10 15:49:50 +01:00
Owen Mansel-Chan
663fb2cc06
Make taint tracking tests use config from InlineFlowTest
2023-08-10 15:49:48 +01:00
Owen Mansel-Chan
8db3e4a9b4
Make IncorrectIntegerConversion use new API
2023-08-10 15:49:47 +01:00
Owen Mansel-Chan
6c0c8d6963
Make BadRedirectCheck use new API
2023-08-10 15:49:45 +01:00
Owen Mansel-Chan
442dfc1833
Make InsecureTLS use new API
2023-08-10 15:49:44 +01:00
Owen Mansel-Chan
b00e44725c
Make CorsMisconfiguration use new API
2023-08-10 15:49:43 +01:00
Owen Mansel-Chan
9b19cde8ab
Make SensitiveConditionBypass use new API
2023-08-10 15:49:42 +01:00
Owen Mansel-Chan
2d3d21d074
Make StackTraceExposure use new API
2023-08-10 15:49:40 +01:00
Owen Mansel-Chan
d9844bd4d6
Make WrongUsageOfUnsafe use new API
2023-08-10 15:49:39 +01:00
Owen Mansel-Chan
00ea023fdb
Make ConditionalBypass use new API
2023-08-10 15:49:37 +01:00
Owen Mansel-Chan
1b4fef9c21
Make HTMLTemplateEscapingPassthrough use new API
...
Removed edges and nodes are mostly duplicates. They were only there
originally due to multiple configurations being in scope.
`DataFlow::PathNode` has union semantics for configurations. Nodes are
only generated if they are reachable from a source, but this includes
sources from other configurations.
No alerts are lost.
2023-08-10 15:49:36 +01:00
Owen Mansel-Chan
ea1f39683d
Make DivideByZero use new API
...
The extra nodes in .expected files are due to the changes from
https://github.com/github/codeql/pull/13717 , which are not applied to
configuration classes extending DataFlow::Configuration or
TaintTracking::Configuration.
2023-08-10 15:49:35 +01:00
Owen Mansel-Chan
045936b1fd
Make PamAuthBypass use new API
2023-08-10 15:49:33 +01:00
Owen Mansel-Chan
cfc4a6a6b7
Make Timing use new API
2023-08-10 15:49:32 +01:00
Owen Mansel-Chan
39762da5e0
Make DsnInjection use new API
2023-08-10 15:49:31 +01:00
Owen Mansel-Chan
a53da376d1
Make LDAPInjection use new API
2023-08-10 15:49:29 +01:00
Owen Mansel-Chan
f60ca76eb2
Make EmailInjection use new API
2023-08-10 15:49:28 +01:00
Owen Mansel-Chan
1962aa3de4
Make SSRF use new API
2023-08-10 15:49:27 +01:00
Owen Mansel-Chan
71735c86c2
Make WeakCryptoAlgorithm use new API
2023-08-10 15:49:25 +01:00
Owen Mansel-Chan
46185e3a02
Make HardcodedKeys use new API
2023-08-10 15:49:24 +01:00
Owen Mansel-Chan
b5ac0c94c6
Make ZipSlip use new API
2023-08-10 15:49:23 +01:00
Owen Mansel-Chan
7341b6156d
Make XPathInjection use new API
2023-08-10 15:49:21 +01:00
Owen Mansel-Chan
a6177b3c92
Make UnsafeUnzipSymlink use new API
2023-08-10 15:49:20 +01:00
Owen Mansel-Chan
7db1daba6e
Make TaintedPath use new API
2023-08-10 15:49:19 +01:00
Owen Mansel-Chan
6c91f77776
Make StringBreak use new API
2023-08-10 15:49:17 +01:00
Owen Mansel-Chan
30ae34352b
Make StoredXss use new API
2023-08-10 15:49:16 +01:00
Owen Mansel-Chan
4334a51cf3
Make StoredCommand use new API
2023-08-10 15:49:15 +01:00
