Asger F
8599ab2503
JS: Fix attributes nodes missing an enclosing callable
2025-03-11 16:47:48 +01:00
Geoffrey White
044d0a13f0
Rust: Include WeakSensitiveDataHashing sinks as well.
2025-03-11 15:41:38 +00:00
Geoffrey White
4924a0faf3
Rust: Introduce a QuerySink class, common to all query sinks.
2025-03-11 15:41:37 +00:00
Geoffrey White
dc7d7f121e
Rust: Clarify doc on FlowSink, FlowSource.
2025-03-11 15:41:35 +00:00
Michael Nebel
371a72ecec
C#: Move Bad test into other file to avoid sync-files breakage.
2025-03-11 14:54:13 +01:00
Michael Nebel
1286420d39
C#: Add change-note.
2025-03-11 14:42:51 +01:00
Michael Nebel
120af3611a
C#: Update test expected output.
2025-03-11 14:39:09 +01:00
Michael Nebel
150aa5d1cf
C#: Include normal switch/case statements in the white list and allow the use of wildcards when there is a condition.
2025-03-11 14:37:56 +01:00
Michael Nebel
c15137e992
C#: Update test expected output.
2025-03-11 14:36:34 +01:00
Michael Nebel
f42ae48ffa
C#: Add some switch case examples.
2025-03-11 14:35:04 +01:00
Asger F
087c555796
Merge pull request #18670 from asgerf/js/test-suite
...
JS: Update test suite to use post-processed inline expectations
2025-03-11 13:58:01 +01:00
Michael Nebel
4451e55bba
C#: Convert cs/constant-condition tests to inline expectation tests.
2025-03-11 13:35:05 +01:00
Asger F
6499e5458b
JS: Restore line lost in merge
...
'Accept incoming changes' in vscode somehow deleted this line.
2025-03-11 13:19:29 +01:00
Asger F
e8c5e4d006
Merge branch 'main' into js/test-suite
2025-03-11 13:17:08 +01:00
Arthur Baars
3991dc3aa3
Rust: improve performance of Crate::toString
2025-03-11 12:57:16 +01:00
Napalys Klicius
a4f2264f17
Merge pull request #18899 from Napalys/js/ecma-2024-regex
...
JS: Add ECMAScript 2024 `v` Flag Operators for Regex Parsing
2025-03-11 12:50:44 +01:00
Simon Friis Vindum
1e0b78ebd3
Rust: Update regex injection description
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-03-11 12:47:12 +01:00
Michael Nebel
744936fbd7
C#: Add cs/local-not-disposed to the CCR suite.
2025-03-11 12:46:16 +01:00
Arthur Baars
66ab3a8002
Rust: add Locatable::fromSource
2025-03-11 12:32:56 +01:00
Napalys
c001435258
Refactor Angular2 API to use httpClientApiNode for HttpClient method calls
2025-03-11 12:32:24 +01:00
Owen Mansel-Chan
22b36a86ce
Merge pull request #18940 from owen-mc/go/unhandled-close-writable-handle
...
Go: Add test for FP in `go/unhandled-writable-file-close`
2025-03-11 11:13:36 +00:00
Napalys Klicius
a900f2cea4
Update javascript/ql/lib/change-notes/2025-03-03-regex-v.md
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-11 11:57:28 +01:00
Óscar San José
8b33dcd018
Merge branch 'main' into oscarsj/add-actions-analysis
2025-03-11 11:51:24 +01:00
Geoffrey White
a0f4fa28b2
Rust: hardcoded -> hard-coded.
2025-03-11 09:40:47 +00:00
Geoffrey White
5c394a9371
Correct modelgenerator exclusion for the security-experimental-selectors.yml suite helper.
2025-03-11 08:53:47 +00:00
Napalys Klicius
3191b2c6fc
Update javascript/extractor/src/com/semmle/js/parser/RegExpParser.java
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2025-03-11 09:40:24 +01:00
Napalys Klicius
7c9edff33c
Merge pull request #18964 from Napalys/js/mark_down_table
...
JS: Refactor `markdown-table` library modeling
2025-03-11 09:02:56 +01:00
Asger F
b583e52a87
Merge pull request #18962 from asgerf/js/local-type-indirection
...
JS: Unfold local type aliases in getAnUnderlyingType
2025-03-11 08:54:03 +01:00
Napalys
08c07f815f
Improved documentation, removed union fram change note.
2025-03-11 08:30:17 +01:00
Napalys Klicius
1ad8b4677d
Update javascript/ql/lib/change-notes/2025-03-10-js-refactor-markdown-table.md
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-11 08:07:49 +01:00
Remco Vermeulen
8f603251d7
Add missing dependency
...
The query pack has suites that rely on the `codeql/suite-helpers` pack, but doesn't include it as a dependency.
This will cause error when resolving suites referring the Actions query pack.
2025-03-10 18:31:01 -07:00
Jami Cogswell
41aeb874f1
Java: add change note
2025-03-10 18:56:13 -04:00
Jami Cogswell
76433a31f7
Java: generalize sanitizer and add tests
2025-03-10 18:56:01 -04:00
Jami Cogswell
ab3690f666
Java: initial sanitizer
2025-03-10 18:55:56 -04:00
Jami Cogswell
94080a6e47
Java: initial tests
2025-03-10 18:55:54 -04:00
Erik Krogh Kristensen
e6884cf705
Merge pull request #18959 from erik-krogh/faster-routing
...
JS: ensure the result from getPathFromFork is unique (to avoid a blowup)
2025-03-10 21:45:14 +01:00
Jaroslav Lobačevski
fa35d6c3ac
Minor example workflow fix
2025-03-10 20:43:16 +00:00
REDMOND\brodes
f72efa638a
Uncommenting out generic dataflow
2025-03-10 16:12:53 -04:00
REDMOND\brodes
c83cb533ce
Adding an instantiation of the additional flow step class to automatically apply to generic dataflow. Flow step passthrough comes from the algorithm to getter flow passthroughs.
2025-03-10 15:56:01 -04:00
Asger F
73c0a93fc4
Merge pull request #18963 from asgerf/js/disable-tainted-nodes
...
JS: Remove TaintedNodes.ql from default meta query suite
2025-03-10 20:49:46 +01:00
Geoffrey White
e3beacbda2
Rust: Print models (temporary, to see how this differs on CI).
2025-03-10 19:38:36 +00:00
REDMOND\brodes
036035b6a2
Adding modeling for OpenSSL random number generation.
2025-03-10 15:04:19 -04:00
Napalys
4a365857f1
Added change note.
2025-03-10 19:40:41 +01:00
Napalys
13c701948a
Refactor Markdown taint steps and update expected results for reflected XSS tests
2025-03-10 19:27:36 +01:00
REDMOND\brodes
fe52351aed
Stubbing out hash operation node, borrowing from cipher operaiton node
2025-03-10 14:10:55 -04:00
Geoffrey White
7717f92ec6
Rust: Clean up the test (it turns out a nested UnusedVariable.qlref is not needed) and accept consistency check changes.
2025-03-10 17:59:19 +00:00
REDMOND\brodes
73368ea59a
Adding hashes to openssl library import
2025-03-10 13:27:39 -04:00
Paolo Tranquilli
d1876251ee
Merge pull request #18918 from github/redsun82/rust-tweak-qltest-logs
...
Rust: tweak qltest logs
2025-03-10 17:47:30 +01:00
REDMOND\brodes
0672027822
Tracing new notion of known getters, which now includes direct getters for cipher and hash. Removed a redundant hash qll, and fixed misplacement of has type in model.
2025-03-10 11:46:26 -04:00
REDMOND\brodes
451808616e
Getting rid of commented out code.
2025-03-10 11:35:16 -04:00
