Nick Rolfe
e1f2433dbf
Ruby: make resolveConstant overlay[global]
2025-07-09 11:59:25 +01:00
Geoffrey White
22aa7f378a
Rust: Expand the test cases around IDs as sensitive data.
2025-07-09 11:33:47 +01:00
Geoffrey White
1124355cdb
Rust: Add a test case for 'from_trusted_iterator' as sensitive data FP.
2025-07-09 11:26:59 +01:00
Jonas Jensen
5a1246a586
Merge remote-tracking branch 'upstream/main' into approximate-related-location
2025-07-09 10:10:20 +02:00
Jonas Jensen
0d7a842e2f
Shared: improve documentation in AlertFiltering
2025-07-09 09:43:49 +02:00
Jonas Jensen
f1e9f0e323
Shared: improve join order in filterByLocation
...
It's better to join with the range expression first since that will only
multiply tuple counts by the number of lines in an average source/sink.
Joining with `restrictAlertsToStartLine` first would multiply tuple
counts by the number of sources/sinks in a given file.
2025-07-09 09:24:26 +02:00
Paolo Tranquilli
5722084dd5
Merge pull request #19999 from github/redsun82/rust-sha256s
...
Rust: set SHA256s in `MODULE.bazel`
2025-07-09 09:20:54 +02:00
Adnan Khan
db954d6d9f
Merge branch 'main' into patch-1
2025-07-08 23:31:35 -07:00
Arthur Baars
5b7485d11d
Rust: add testcase for impl trait on i32
2025-07-08 21:36:37 +02:00
Tom Hvitved
156f867c96
Merge pull request #19996 from hvitved/rust/type-inference-str-literal
...
Rust: Adjust the inferred type of string literals
2025-07-08 20:29:43 +02:00
Jaroslav Lobačevski
9393181c4e
Add tests and path normalization fix to handle $ expansion
2025-07-08 16:18:12 +00:00
Owen Mansel-Chan
a5333ae1a1
Add change note
2025-07-08 16:51:22 +01:00
Paolo Tranquilli
98195db500
Rust: set SHA256s in MODULE.bazel
2025-07-08 17:49:30 +02:00
AdnaneKhan
5d6a5d5cbb
Add change notes and test workflow file.
2025-07-08 10:35:39 -04:00
Adnan Khan
f4f919635a
Correctly specify regex.
...
Co-authored-by: Jaroslav Lobačevski <jarlob@github.com >
2025-07-08 10:17:29 -04:00
Geoffrey White
b1d5b8175c
Rust: Add the original test back as well.
2025-07-08 15:10:55 +01:00
Geoffrey White
d19259e6bb
Update rust/ql/test/library-tests/frameworks/postgres/main.rs
...
Co-authored-by: Arthur Baars <aibaars@github.com >
2025-07-08 15:03:44 +01:00
Geoffrey White
7211f4ace3
Update rust/ql/lib/codeql/rust/frameworks/rustcrypto/rustcrypto.model.yml
...
Co-authored-by: Arthur Baars <aibaars@github.com >
2025-07-08 15:01:43 +01:00
Tom Hvitved
22b833fbda
Rust: Fix bad join
2025-07-08 16:00:36 +02:00
Owen Mansel-Chan
990043ce86
Add net/http.Head and net/http.Client.Head as client requests
...
They were previously deliberately excluded.
2025-07-08 14:31:48 +01:00
Owen Mansel-Chan
71703aa497
Improve formatting of some QL
2025-07-08 14:29:11 +01:00
Geoffrey White
f3b5cc79ff
Merge branch 'main' into sqlx
2025-07-08 13:58:19 +01:00
Tamás Vajk
4f1ca21ef9
Merge pull request #19875 from tamasvajk/quality/spec_chars
...
Java: Add query to detect special characters in string literals
2025-07-08 14:56:35 +02:00
Tamas Vajk
5f7d746266
Java: Add query to detect non-case labels in switch statements
2025-07-08 14:53:39 +02:00
Owen Mansel-Chan
d437a096f1
Test more client request URL sinks
2025-07-08 13:20:04 +01:00
Nick Rolfe
b51940d1e2
Ruby: add overlay[local] annotations to AST/CFG/SSA layers
2025-07-08 13:09:27 +01:00
Tamas Vajk
ccbf7055f1
Adjust query precision
2025-07-08 13:31:08 +02:00
Tamas Vajk
d16570b05e
Revert "Adjust query tags"
...
This reverts commit 92685e6c2de69898d556706b04e6c562e54b26b8.
2025-07-08 13:28:26 +02:00
Tamas Vajk
c4def103f7
Improve query documentation
2025-07-08 13:28:26 +02:00
Tamas Vajk
15de398806
Adjust query tags
2025-07-08 13:28:25 +02:00
Tamas Vajk
a0c9c98373
Adjust references in query doc
2025-07-08 13:28:25 +02:00
Tamas Vajk
fd8b37cc28
Exclude Kotlin files
2025-07-08 13:28:24 +02:00
Tamas Vajk
09a2aeead6
Java: Add query to detect special characters in string literals
2025-07-08 13:28:18 +02:00
Tamás Vajk
f940cb2bdd
Merge pull request #19950 from tamasvajk/quality/useless-record-member
...
Java: Add 'Useless serialization member in record class' query
2025-07-08 13:26:11 +02:00
Tom Hvitved
2a207f9f6f
Rust: Update inline expectations
2025-07-08 13:03:16 +02:00
Tom Hvitved
73f854f073
Rust: Adjust the inferred type of string literals
2025-07-08 13:03:12 +02:00
Tom Hvitved
411aa6d2e5
Merge pull request #19971 from hvitved/rust/type-inference-for-range
...
Rust: Improve type inference for `for` loops and range expressions
2025-07-08 12:57:21 +02:00
Geoffrey White
3dabd51cf7
Rust: Fix a summaryModelDeprecated that was causing problems.
2025-07-08 11:24:57 +01:00
Tom Hvitved
1518cade7b
Address review comments
2025-07-08 11:29:24 +02:00
Tamas Vajk
813ce7d3f8
Rename query
2025-07-08 11:28:12 +02:00
Tamas Vajk
f2805ba80c
Improve query help
2025-07-08 11:28:11 +02:00
Tamas Vajk
82fe647a40
Improve alert message
2025-07-08 11:28:11 +02:00
Tamas Vajk
528389af38
Adjust expected file for query suite integration test
2025-07-08 11:28:10 +02:00
Tamas Vajk
a2d4f58af7
Use inline test expectations
2025-07-08 11:28:10 +02:00
Tamas Vajk
2cd0c64e41
Improve query quality
2025-07-08 11:28:09 +02:00
Tamas Vajk
e0cb1792bd
Java: Add 'Useless serialization member in record class' query
2025-07-08 11:28:09 +02:00
Tom Hvitved
6876838dd1
Rust: Add change note
2025-07-08 11:20:45 +02:00
Tom Hvitved
7701a31f4a
Rust: Improve type inference for for loops and range expressions
2025-07-08 11:20:42 +02:00
Tom Hvitved
52abf3ba02
Merge pull request #19997 from hvitved/java/use-mad-in-log-injection-test
...
Java: Use MaD in log injection test
2025-07-08 11:02:51 +02:00
Geoffrey White
f57d691424
Rust: Fix typo in model.
2025-07-08 09:51:20 +01:00
