Simon Friis Vindum
|
46cd62bd51
|
Rust: Use .. notation in model
|
2025-09-17 09:18:41 +02:00 |
|
Simon Friis Vindum
|
f432498574
|
Rust: Use comma notation in Warp model
|
2025-09-17 09:18:40 +02:00 |
|
Simon Friis Vindum
|
1af6b37fc4
|
Rust: Add models for Warp
|
2025-09-17 09:18:39 +02:00 |
|
Simon Friis Vindum
|
bfe934118d
|
Rust: Add web framework tests for Warp
|
2025-09-17 09:18:37 +02:00 |
|
Chad Bentz
|
c5e3be2c4c
|
Grape - detect params calls inside helper methods
- added unit tests for flow using inline format
- removed grape from Arel tests (temporary)
|
2025-09-16 17:09:18 -04:00 |
|
Geoffrey White
|
6f1fcbf41b
|
Rust: Add IPv6 private address range (and explanatory comments).
|
2025-09-16 17:21:08 +01:00 |
|
Alex Eyers-Taylor
|
f5134e3125
|
Java: Eliminate pointless use of PathNodes over DataFlow::Node
The use of PathNode prevents these from being overlay informed.
|
2025-09-16 17:20:44 +01:00 |
|
Taus
|
8fd62252fd
|
Python: Fix bad join in globalVariableNestedFieldJumpStep
|
2025-09-16 18:12:29 +02:00 |
|
Napalys Klicius
|
431fc8880e
|
Python: Add change note
|
2025-09-16 18:08:53 +02:00 |
|
Napalys Klicius
|
e82fe9d919
|
Python: Updated doc string and removed redundant predicate.
|
2025-09-16 18:08:53 +02:00 |
|
Taus
|
e228aac61f
|
Python: Use AttrWrite.writes
Also applies @napalys' fix to the base case.
|
2025-09-16 18:08:53 +02:00 |
|
Taus
|
6f9e06c59e
|
Python: Add AttrWrite.writes and AttrRead.reads
The latter of these is identical to `AttrRef.accesses`, but makes the
API a bit more intuitive.
|
2025-09-16 18:08:53 +02:00 |
|
Napalys Klicius
|
8393ccf39d
|
Python: Update globalVariableAttrPathAtDepth base case
|
2025-09-16 18:08:53 +02:00 |
|
Taus
|
6133f01c81
|
Python: Rewrite access path computation
|
2025-09-16 18:08:53 +02:00 |
|
Taus
|
69b5853477
|
Python: Keep track of access path
|
2025-09-16 18:08:53 +02:00 |
|
Napalys Klicius
|
e60d0c88f1
|
Python: Add global variable nested field jump steps
|
2025-09-16 18:08:53 +02:00 |
|
Napalys Klicius
|
9d4b168977
|
Python: Added extra test for global variable nested attribute reads/writes.
|
2025-09-16 18:08:53 +02:00 |
|
Napalys Klicius
|
6c779c7fa5
|
Python: Added extra test cases for path injection with FastAPI
|
2025-09-16 18:08:53 +02:00 |
|
Napalys Klicius
|
f209e3a0fe
|
Python: Updated PathInjection tests to use inline test expectations
|
2025-09-16 18:08:53 +02:00 |
|
Alex Eyers-Taylor
|
2201974844
|
Jave: Use force local to make parsing local after global regex finding.
|
2025-09-16 15:55:04 +01:00 |
|
github-actions[bot]
|
02a1b1efcb
|
Release preparation for version 2.23.1
|
2025-09-16 14:14:42 +00:00 |
|
Geoffrey White
|
7c22fe269f
|
Merge branch 'main' into https
|
2025-09-16 14:28:23 +01:00 |
|
Chad Bentz
|
ffd32efba2
|
codeql query format
|
2025-09-16 09:08:07 -04:00 |
|
Geoffrey White
|
31bf86fd1b
|
Rust: Improve the flow around the qhelp example.
|
2025-09-16 14:04:55 +01:00 |
|
Geoffrey White
|
0eb602aad2
|
Rust: Update a redirected URL.
|
2025-09-16 14:00:43 +01:00 |
|
Asger F
|
7670a2bd77
|
Merge pull request #20375 from asgerf/js/promise-try
JS: Support Promise.try and Array.prototype.with
|
2025-09-16 14:44:07 +02:00 |
|
Geoffrey White
|
5d40075944
|
Merge branch 'main' into assignment
|
2025-09-16 13:30:20 +01:00 |
|
Jonas Jensen
|
eac8a79d49
|
Merge pull request #20420 from jbj/no-qll-deprecation
Docs: remove 1-year deprecation period for QL libraries
|
2025-09-16 14:18:36 +02:00 |
|
Napalys Klicius
|
97a11de1e3
|
Merge pull request #20435 from Napalys/js/promisification_modeling
JS: Promisification library modeling and enhance flow
|
2025-09-16 14:07:53 +02:00 |
|
Geoffrey White
|
4b281fdf12
|
Rust: Use case insensitive regexps.
|
2025-09-16 13:02:54 +01:00 |
|
Michael Nebel
|
d903448695
|
C#: Add change note.
|
2025-09-16 13:58:28 +02:00 |
|
Michael Nebel
|
f9cecfb666
|
C#: Update integration test expected output.
|
2025-09-16 13:56:14 +02:00 |
|
Michael Nebel
|
98a7cd24c0
|
C#: Remove all cs/xmldoc/* queries from the code-quality-extended suite.
|
2025-09-16 13:56:13 +02:00 |
|
Michael Nebel
|
0ce0e834ed
|
C#: Update integration tests expected output.
|
2025-09-16 13:56:11 +02:00 |
|
Michael Nebel
|
cdd379113e
|
C#: Remove cs/captured-foreach-variable from the code-quality-extended suite.
|
2025-09-16 13:56:09 +02:00 |
|
Michael Nebel
|
47873c20de
|
C#: Fix incorrect tagging.
|
2025-09-16 13:56:07 +02:00 |
|
Michael Nebel
|
c9a761f202
|
C#: Remove the cs/xmldoc/missing-xmldoc from the code-quality-extended.
|
2025-09-16 13:56:05 +02:00 |
|
Michael Nebel
|
906e9de5ee
|
C#: Update query-suite integration tests expected output.
|
2025-09-16 13:56:04 +02:00 |
|
Michael Nebel
|
17735a9a43
|
C#: Add queries medium precision queries to the code-quality-extended suite (and update tags).
|
2025-09-16 13:56:02 +02:00 |
|
Geoffrey White
|
80ce55ab10
|
Rust: Make the private address spaces URL more accurate.
|
2025-09-16 12:53:44 +01:00 |
|
Asger F
|
edf79a3730
|
JS: Change note
|
2025-09-16 13:53:31 +02:00 |
|
Asger F
|
0b900711bf
|
Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-09-16 13:48:26 +02:00 |
|
Geoffrey White
|
0f5aa857b8
|
Rust: Remove unnecessary import.
|
2025-09-16 12:41:28 +01:00 |
|
Geoffrey White
|
9c7fc58337
|
Rust: Add tests for a few more edge cases.
|
2025-09-16 12:41:00 +01:00 |
|
Michael Nebel
|
6d9e489e7c
|
Merge pull request #20445 from michaelnebel/csharp/fixintegrationtest
C#: Fix failing integration test after new version of `NewtonSoft.JSon` has been released.
|
2025-09-16 13:38:55 +02:00 |
|
Geoffrey White
|
0924dec545
|
Rust: Make the tests of the example code closer to the actual example code.
|
2025-09-16 12:28:52 +01:00 |
|
Tom Hvitved
|
a2d83274bc
|
Merge pull request #20441 from geoffw0/fixrfquery
Rust: Fix a minor issue with the test for rust/request-forgery
|
2025-09-16 13:22:58 +02:00 |
|
Geoffrey White
|
7b04cf1a73
|
Rust: Fix up the test annotations.
|
2025-09-16 12:20:29 +01:00 |
|
Michael Nebel
|
8fbd720fe5
|
C#: Fix failing integration test after new version of NewtonSoft.JSon has been released.
|
2025-09-16 13:14:23 +02:00 |
|
Napalys Klicius
|
49ccb8ce2b
|
JS: Simplify exist clause to use Promisify::PromisifyAllCall instead of DataFlow::SourceNode
|
2025-09-16 13:13:15 +02:00 |
|