Commit Graph

86439 Commits

Author SHA1 Message Date
Asger F
cd0fd02e74 Rust: Remove 'Source' annotations from same line as Alert
Source tags should no longer be used when on the same line as the Alert.

The ones in this file went unnoticed however because *all* of them were on the same line as an Alert, which made the test library ignore all Source tags.
2025-02-21 14:44:48 +01:00
Asger F
cd2c4d5e3a JS: Use post-processed inline test in MissingCsrfMiddleware
This query flags the cookie-parsing middleware in order to consolidate huge numbers of alerts into a single alert, which is more manageable. But simply annotating the cookie-parsing middleware with 'Alert' isn't a very useful, we want to annotate which middlewares are vulnerable.
2025-02-21 14:44:46 +01:00
Asger F
e2fe74ccd6 JS: Add support for RelatedLocation tags 2025-02-21 14:44:45 +01:00
Anders Schack-Mulligen
9acb58e8c2 SSA: Add SsaNode predicates that don't mention DefinitionExt. 2025-02-21 14:43:51 +01:00
Tamas Vajk
24bd9fb7e5 Add queries to C# CCR suite 2025-02-21 14:24:09 +01:00
Simon Friis Vindum
4ef64cdf9f Merge pull request #18820 from paldepind/rust-fewer-no-match
Rust: Remove nonsentical no-match CFG edges
2025-02-21 14:18:23 +01:00
Napalys
3587ba593a Add change note and added tanstack to supported framework list 2025-02-21 13:47:48 +01:00
Napalys
ab0241c1de Added missing doc strings for Tanstack queries 2025-02-21 13:32:49 +01:00
Simon Friis Vindum
e6e4ff1b72 Rust: Accept changes to expected files 2025-02-21 13:24:06 +01:00
Napalys
1227a7eedc Add Tanstack framework support and enhance data flow tracking for fetch responses 2025-02-21 13:24:00 +01:00
Napalys
05690c21ed Added a test for tanstack/react-query useQuery 2025-02-21 13:24:00 +01:00
Simon Friis Vindum
0f627ae59a Merge branch 'main' into rust-fewer-no-match 2025-02-21 13:20:50 +01:00
Florin Coada
967c1ad51c Merge pull request #18832 from github/coadaflorin/csharp-changelog-clean
Coadaflorin/csharp changelog clean
2025-02-21 11:01:39 +00:00
Florin Coada
fd9475ea2f Add changelog for CodeQL CLI version 2.20.5 2025-02-21 10:48:21 +00:00
Florin Coada
38f538e76a Update 3.1.1.md 2025-02-21 10:44:20 +00:00
Florin Coada
b77b5fc308 Update CHANGELOG.md 2025-02-21 10:43:43 +00:00
Owen Mansel-Chan
50d1bc6aa0 Improve bad join order 2025-02-21 10:31:46 +00:00
Simon Friis Vindum
df2a110b41 Rust: Changes based on PR comments 2025-02-21 11:15:54 +01:00
Simon Friis Vindum
65bce9d7e0 Rust: Add CFG test with tuple struct pattern 2025-02-21 10:59:21 +01:00
Anders Schack-Mulligen
6932e000c6 Java: Switch BaseSSA to use shared SSA lib. 2025-02-21 08:57:23 +01:00
Anders Schack-Mulligen
1c616d10d4 Merge pull request #18819 from aschackmull/ssa/refactor-phiread3
Ssa: Refactor shared SSA in preparation for eliminating phi-read definitions
2025-02-21 08:56:38 +01:00
Owen Mansel-Chan
44c5df5246 Force global value fanout to go last 2025-02-21 01:01:09 +00:00
Owen Mansel-Chan
8aa9dd7092 Move go generate comment 2025-02-21 00:38:33 +00:00
Sarita Iyer
26da997bb2 Merge pull request #18809 from github/saritai/docs-formatting-fix
Fix table alignment in supported languages article
2025-02-20 16:35:39 -05:00
Ed Minnix
f7e094e887 Move depstubber line to test file 2025-02-20 16:28:51 -05:00
Paolo Tranquilli
45baceb2f5 Merge pull request #18821 from github/redsun82/rust-license
Rust: add licensing information to crates and extractor pack
2025-02-20 22:20:40 +01:00
Chris Smowton
311c1e1654 Merge pull request #18829 from smowton/smowton/admin/regularise-extractor-licenses
Regularise extractor pack licenses to all cite the MIT license that covers the whole CodeQL repository
2025-02-20 20:02:26 +00:00
Chris Smowton
a1ba584b20 Autoformat 2025-02-20 19:31:00 +00:00
Chris Smowton
4567e02b8c Regularise extractor pack licenses to all cite the MIT license that covers the whole CodeQL repository 2025-02-20 18:55:55 +00:00
Chris Smowton
fe34aa35a9 Merge pull request #18699 from github/smowton/admin/update-license
Update license; remove redundant Go qlpack license.
2025-02-20 18:19:51 +00:00
Geoffrey White
89355991df C++: Additional test cases. 2025-02-20 16:28:35 +00:00
Geoffrey White
e77ebf0715 C++: Test spacing. 2025-02-20 16:23:35 +00:00
REDMOND\brodes
9ac9252f75 Adding a todo 2025-02-20 11:11:41 -05:00
REDMOND\brodes
011ed3fbfd Simplifying additional flow step logic. 2025-02-20 11:10:24 -05:00
Alex Eyers-Taylor
53c5b8ff9e CPP: Prevent forced bad join order. 2025-02-20 16:06:42 +00:00
REDMOND\brodes
83dc5b9906 Fixing type bug 2025-02-20 10:45:33 -05:00
REDMOND\brodes
9ee4a7a7b8 Adding a sketch for a CipherOperation concept to model encryption/decryption operations. 2025-02-20 10:37:40 -05:00
Geoffrey White
b6f9055566 C++: Add and correct some QLDoc. 2025-02-20 15:33:59 +00:00
Geoffrey White
3954f5e45e C++: Add some test cases. 2025-02-20 15:21:25 +00:00
Geoffrey White
c36e91855f C++: Fix a test case. 2025-02-20 15:21:17 +00:00
Simon Friis Vindum
cd49df0ff2 Merge pull request #18784 from paldepind/rust-generate-sources-sinks
Rust: Generate sources and sinks
2025-02-20 15:59:58 +01:00
Owen Mansel-Chan
7b6a91e90e Fix bad join order in comparesFirstCharacter 2025-02-20 14:49:25 +00:00
Anders Schack-Mulligen
8c0cc077c8 Ssa: Fix qldoc duplicate word. 2025-02-20 15:49:23 +01:00
Tom Hvitved
22ed2e56a9 Merge pull request #18799 from hvitved/cfg/cond-split-prune
CFG: Prune `ConditionalCompletionSplitting` for unnecessary splits
2025-02-20 14:19:44 +01:00
Tom Hvitved
496f485375 Rust: Path resolution for bounded type parameters 2025-02-20 13:57:11 +01:00
Tom Hvitved
8f0aced868 Rust: Path resolution for trait items with default implementations 2025-02-20 13:56:19 +01:00
Chris Smowton
9162ce7d73 Add test for extraction of a Java file with a non-UTF-8 charset 2025-02-20 12:31:36 +00:00
Chris Smowton
be6162edc0 Add test for XML extraction with GBK charset 2025-02-20 12:31:36 +00:00
Tom Hvitved
1be903cb4f Rust: Add more path resolution tests 2025-02-20 12:04:20 +01:00
Simon Friis Vindum
b6144c2f08 Merge branch 'main' into rust-core-std-models 2025-02-20 12:00:47 +01:00