Simon Friis Vindum
875c7da87c
Rust: Improve comments in type inference
2025-09-15 10:37:38 +02:00
Anders Schack-Mulligen
b308c5438f
Java: Add a change note, and a minor ql comment.
2025-09-15 10:14:26 +02:00
Simon Friis Vindum
50bdc658ba
Rust: Apply documentation tweaks
2025-09-15 09:32:33 +02:00
Chad Bentz
5cfa6e83b3
Add support for route parameters(+ blocks), headers, and cookies in Grape API
2025-09-12 22:51:47 -04:00
Chad Bentz
3252bd39d2
Enhance Grape framework with additional data flow modeling and helper method support
2025-09-12 22:13:21 -04:00
Chad Bentz
738ab6fba7
Refactor Grape framework code for improved readability and consistency
2025-09-12 19:23:15 -04:00
Chad Bentz
d295acc3c3
Add initial support for Ruby Grape
2025-09-12 19:22:05 -04:00
Geoffrey White
989081ba4a
Rust: Change note.
2025-09-12 18:12:59 +01:00
Geoffrey White
118ac07b71
Rust: Convert 'from' models into one generic one.
2025-09-12 18:05:30 +01:00
Geoffrey White
9f83b67a7c
Rust: Model vec::from_elem.
2025-09-12 17:30:44 +01:00
Geoffrey White
e2d94127d6
Rust: Model vec::from.
2025-09-12 16:44:47 +01:00
Geoffrey White
5d3ea2f4d3
Rust: Add models for the cookie and biscotti crates.
2025-09-12 16:13:14 +01:00
Geoffrey White
2bb9e2f7be
Rust: Add test cases for hardcoded cryptographic constants in cookies.
2025-09-12 15:42:56 +01:00
Simon Friis Vindum
e2e6fd0683
Rust: Address feedback from PR review
2025-09-12 16:10:58 +02:00
Simon Friis Vindum
19c529e87b
Bazel: regenerate vendored cargo dependencies
2025-09-12 15:48:23 +02:00
Simon Friis Vindum
3cf1a16a13
Cargo: upgrade dependencies
2025-09-12 15:45:37 +02:00
Anders Schack-Mulligen
e302616135
Java: Accept qltest change.
2025-09-12 15:41:18 +02:00
Anders Schack-Mulligen
f9ffee010f
Java: Minor nullness cleanup.
2025-09-12 15:41:17 +02:00
Anders Schack-Mulligen
2743fc0be1
Guards: Include ConditionalExpr in exprHasValue.
2025-09-12 15:41:17 +02:00
Anders Schack-Mulligen
e8f1ec68db
Java: Accept guards test results.
2025-09-12 15:41:17 +02:00
Anders Schack-Mulligen
60d07cf30d
Java: Clean up IntegerGuards.qll
2025-09-12 15:41:16 +02:00
Anders Schack-Mulligen
03321ff910
Java: Replace nullness implementation.
2025-09-12 15:41:16 +02:00
Anders Schack-Mulligen
4a8ffea0f6
Shared: Add control flow reachability lib.
2025-09-12 15:41:15 +02:00
Simon Friis Vindum
f48b643375
Bazel: regenerate vendored cargo dependencies
2025-09-12 15:38:18 +02:00
Simon Friis Vindum
12dcd751d3
Rust: Accept test changes
2025-09-12 15:34:09 +02:00
Simon Friis Vindum
29ba013580
Rust: Add support for resolving methods from blanket implementations
2025-09-12 15:34:04 +02:00
Chris Smowton
db5c58180e
Change note
2025-09-12 14:32:12 +01:00
Chris Smowton
f5780ae369
Amend docstring
2025-09-12 14:32:10 +01:00
Chris Smowton
4fb133a43d
Recognise that a less-than test is as good as a non-equal test for mitigating off-by-one array access
2025-09-12 14:32:07 +01:00
Simon Friis Vindum
d10cdfb7f1
Rust: Move existing blanket implementation test
2025-09-12 15:31:42 +02:00
Simon Friis Vindum
69a1c7e1e8
Rust: Add tests with blanket implementation
2025-09-12 15:26:19 +02:00
Anders Schack-Mulligen
452bbf7289
Java: Add some more nullness tests.
2025-09-12 13:38:21 +02:00
Anders Schack-Mulligen
924a8eac5c
Java: Improve precision of SuccessorType labels in CFG.
2025-09-12 13:38:21 +02:00
Anders Schack-Mulligen
1ebdcdfa8c
Guards: Support integer ranges.
2025-09-12 13:38:20 +02:00
Anders Schack-Mulligen
db1f399067
Java: Preparatory Nullness refactor.
2025-09-12 13:38:20 +02:00
Anders Schack-Mulligen
e8ddac08b7
Merge pull request #20377 from aschackmull/java/preconditions
...
Java: Consolidate Assertions.qll and Preconditions.qll.
2025-09-12 13:37:41 +02:00
Alexander Eyers-Taylor
e9fcd985f9
Merge pull request #20357 from github/alexet/java-global-virtual-dispatch
...
Java: Make Virtual Dispatch Global, but keep SSA local.
2025-09-12 12:20:46 +01:00
Geoffrey White
d638ee9741
Merge pull request #20404 from geoffw0/rustanalyzerdoc
...
Rust: add `rust-analyzer` update instructions
2025-09-12 11:17:10 +01:00
Jeroen Ketema
7c35835e25
Merge pull request #20422 from jketema/go-log
...
Go: Retrofit the change log to mention Go 1.25
2025-09-12 11:20:03 +02:00
Jeroen Ketema
a773042c5d
Merge pull request #20407 from jketema/dyn-too-many
...
C++: Add `cpp/uninitialized-local` test
2025-09-12 11:12:28 +02:00
Jeroen Ketema
0f5bd3799e
Merge branch 'main' into go-log
2025-09-12 11:12:01 +02:00
Jeroen Ketema
3de9356141
Go: Retrofit the change log to mention Go 1.25
...
This can only be a minor change (or something similar) to stay within the
semantic versioning contraints. This is because only the patch version of
the Go ql library pack was bumped during the release. Since there were no new
language features in Go 1.25, this might also be the most accurate choice here.
2025-09-12 11:08:42 +02:00
Jeroen Ketema
352610d651
C++: Add GOOD annotation
2025-09-12 10:29:27 +02:00
Simon Friis Vindum
fd5b5baa8f
Merge pull request #20403 from paldepind/rust/certain-struct-expr
...
Rust: Infer certain type information for struct expressions
2025-09-12 10:28:07 +02:00
Geoffrey White
92124a9033
Update rust/README.md
2025-09-12 09:01:13 +01:00
Jonas Jensen
5ac80353d2
Docs: remove outdated link to change notes.
...
The change notes are now maintained under each query pack, so there's no
single place where we can link to it.
2025-09-12 09:26:23 +02:00
Jonas Jensen
cb766de37e
Docs: remove 1-year deprecation period for QL libs
...
Internal reference: codeql-team ADR 0011.
2025-09-12 09:24:13 +02:00
Simon Friis Vindum
b456a8c4e5
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-09-12 09:09:00 +02:00
Asger F
132a8b8b53
JS: Model json and jsonp methods
2025-09-12 08:51:23 +02:00
Asger F
d729ab501b
JS: Add test that calls .json or .jsonp
2025-09-12 08:51:21 +02:00
