Taus
7176898503
Python: Fix library tests
2025-11-26 12:30:31 +00:00
Taus
b3b87c968b
Python: Fix extractor/experimental tests
2025-11-26 12:30:31 +00:00
Taus
665104e626
Python: Fix Python 3 tests
2025-11-26 12:30:31 +00:00
Taus
85029bd77d
Python: Fix Python 2 tests
2025-11-26 12:30:30 +00:00
Taus
5b63b4957c
Python: Fix query tests
...
Mostly just adding `private import LegacyPointsTo`. Sometimes getting
rid of other imports that are superceded by that module.
2025-11-26 12:30:30 +00:00
Taus
2732a652ab
Python: Fix example snippets
...
One might argue that these should be rewritten entirely to use more
modern APIs, but for now I'll be content with just having them compile
properly.
2025-11-26 12:30:30 +00:00
Taus
0a4ec2ca10
Python: Move some non-points-to methods out of points-to
...
These methods were in `pointsto.Base` but did not actually interact with
the points-to machinery directly, so they were easy to move out.
2025-11-26 12:30:30 +00:00
Taus
f0465f441f
Python: Get rid of some get...Object methods
...
This frees `Class.qll`, `Exprs.qll`, and `Function.qll` from the
clutches of points-to. For the somewhat complicated setup with
`getLiteralObject` (an abstract method), I opted for a slightly ugly but
workable solution of just defining a predicate on `ImmutableLiteral`
that inlines each predicate body, special-cased to the specific instance
to which it applies.
2025-11-26 12:30:30 +00:00
Taus
78c33ab55a
Python: Remove points-to references from python.qll
...
For now, these have just been made into `private` imports. After doing
this, I went through all of the (now not compiling) files and added in
private imports to the modules that they actually depended on.
I also added an explicit import of `LegacyPointsTo` (even though it may
be unnecessary) in cases where the points-to dependency was somewhat
surprising (and one we want to get rid of). This was primarily inside
the various SSA layers.
For modules inside `semmle.python.{types, objects, pointsto}` I did not
bother, as these are fairly clearly related to points-to.
2025-11-26 12:30:30 +00:00
Simon Friis Vindum
1c8cc39a6a
Merge pull request #20906 from paldepind/rust/enum-fieldless
...
Rust: Add predicates for fieldless and unit-only enums
2025-11-26 12:52:28 +01:00
Owen Mansel-Chan
1d0fcd77d8
Add change note
2025-11-26 11:24:04 +00:00
Joe Farebrother
8d313ff85b
qldoc fixes
2025-11-26 11:23:04 +00:00
Joe Farebrother
6207137ef0
Add changenote
2025-11-26 11:21:05 +00:00
Owen Mansel-Chan
eca9ec59c4
Add exclusions to data flow consistency checks
2025-11-26 11:12:44 +00:00
Owen Mansel-Chan
a2e68487ea
Shared: allow exclusions to localFlowIsLocal
2025-11-26 11:00:30 +00:00
Owen Mansel-Chan
916fe69e65
Accept data flow consistency test results
2025-11-26 11:00:25 +00:00
Joe Farebrother
eb7fe71557
Fix namespace instances and update tests
2025-11-26 10:51:16 +00:00
Tom Hvitved
7e5131891c
Rust: Special-case Self::AssocType in path resolution
2025-11-26 11:50:35 +01:00
Asger F
dbf14c190a
Factor XML discard predicates into OverlayXml.qll
2025-11-26 11:48:32 +01:00
Owen Mansel-Chan
7cd04e346e
Move existing consistency query to new place
2025-11-26 10:44:59 +00:00
Owen Mansel-Chan
fba53b58f8
Run data flow consistency tests in CI
2025-11-26 10:44:56 +00:00
Asger F
037f354abf
JS: Update another expected file
2025-11-26 11:42:39 +01:00
Asger F
b33af5b377
JS: Fix typo
2025-11-26 11:40:41 +01:00
Tom Hvitved
0d46dc0461
Rust: More path resolution tests
2025-11-26 11:33:17 +01:00
Asger F
7bd1985407
JS: Add proxy as a route handler name
2025-11-26 11:22:08 +01:00
Asger F
7848369f77
JS: Change note
2025-11-26 11:20:42 +01:00
Asger F
f9033f2abd
JS: Look for special folders in root, even if 'src' exists
2025-11-26 11:16:40 +01:00
Asger F
f0ecf1599c
JS: Add test with file named 'page'
2025-11-26 11:16:12 +01:00
Asger F
e54789d1bd
JS: Recognise route.ts outside api folder
2025-11-26 11:16:11 +01:00
Asger F
f52f5b63e6
JS: Add test with route.ts outside 'api'
2025-11-26 11:16:09 +01:00
Owen Mansel-Chan
0414555e43
Merge pull request #20741 from aegilops/java-kotlin-sensitive-logging-substring-barriers
...
java: Added Java/Kotlin Sensitive Logging barriers (substrings)
2025-11-26 09:55:14 +00:00
Asger F
0245b9d609
Merge pull request #20911 from asgerf/js/next-folders
...
JS: Fix project layout detection for Next.js apps
2025-11-26 09:09:54 +01:00
Simon Friis Vindum
7278bc75ca
Rust: Remove unused function in XSS tests
2025-11-26 08:57:47 +01:00
Owen Mansel-Chan
f0dec21b9b
Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers
2025-11-25 23:24:58 +00:00
Joe Farebrother
83eadbad60
Add namespace models
2025-11-25 16:56:36 +00:00
Joe Farebrother
85cb3e026c
Merge pull request #20762 from joefarebrother/go-insecure-cookie
...
Go: Promote non-httponly cookie query, and add insecure cookie query
2025-11-25 16:39:45 +00:00
Mathias Vorreiter Pedersen
295dc6971f
Merge branch 'main' into ignore-non-type-template-params
2025-11-25 15:37:25 +00:00
Simon Friis Vindum
7c7663629e
Rust: Fix typo in change note for XSS query
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-11-25 16:13:11 +01:00
Asger F
5b4e114955
JS: Add test
2025-11-25 16:04:30 +01:00
Mathias Vorreiter Pedersen
73b6fa69a9
C++: Fix Code Scanning alert.
2025-11-25 15:03:26 +00:00
Mathias Vorreiter Pedersen
0deac833e4
C++: Accept test changes.
2025-11-25 14:59:09 +00:00
Asger F
a91969b7e1
JS: Change note
2025-11-25 15:58:11 +01:00
Mathias Vorreiter Pedersen
05737af165
C++: Only support non-type template parameters in tail position.
2025-11-25 14:55:44 +00:00
Mathias Vorreiter Pedersen
faa55f50e7
C++: Add another test with a template function whose non-type template parameter is in tail position.
2025-11-25 14:55:18 +00:00
Asger F
e95b3590f0
JS: Fix project layout detection for Next.js apps
...
Some parts of the code did not handle case where 'pages' was located at 'app/pages'.
2025-11-25 15:54:45 +01:00
Joe Farebrother
cece73bdbf
Remove references to gorilla
2025-11-25 14:36:16 +00:00
Joe Farebrother
c7b16a043e
Address reviews - update comments, remove unneeded stubs
2025-11-25 14:36:00 +00:00
Joe Farebrother
c6110ed541
Split SecureCookies into query specific files
2025-11-25 14:35:47 +00:00
Joe Farebrother
5b702d963e
Refactor parts of SensitiveCookieNameConfig
2025-11-25 14:35:42 +00:00
Joe Farebrother
03d63dec2e
Address reviews - rename and update doc comments
2025-11-25 14:35:29 +00:00
