Merge pull request #7401 from github/release-prep/2.7.4

Release preparation for version 2.7.4
2026-05-18 05:07:06 +02:00 · 2021-12-14 16:42:33 -05:00 · 2021-12-14 21:35:09 +00:00 · 2021-12-14 13:53:08 -05:00 · 2021-12-14 12:35:04 -05:00 · 2021-12-14 12:05:15 -05:00
528 changed files with 1386 additions and 911 deletions
--- a/cpp/change-notes/2021-11-01-isFromSystemMacroDefinition.md
+++ b/cpp/change-notes/2021-11-01-isFromSystemMacroDefinition.md
@@ -1,4 +0,0 @@
-lgtm,codescanning
-* The QL library `semmle.code.cpp.commons.Exclusions` now contains a predicate
-  `isFromSystemMacroDefinition` for identifying code that originates from a
-  macro outside the project being analyzed.
--- a/cpp/change-notes/2021-11-09-use-of-http.md
+++ b/cpp/change-notes/2021-11-09-use-of-http.md
@@ -1,2 +0,0 @@
-lgtm,codescanning
-* A new query `cpp/non-https-url` has been added for C/C++. The query flags uses of `http` URLs that might be better replaced with `https`.
--- a/cpp/change-notes/2021-11-25-certificate-not-checked.md
+++ b/cpp/change-notes/2021-11-25-certificate-not-checked.md
@@ -1,2 +0,0 @@
-lgtm,codescanning
-* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/change-notes/2021-11-25-certificate-result-conflation.md
+++ b/cpp/change-notes/2021-11-25-certificate-result-conflation.md
@@ -1,2 +0,0 @@
-lgtm,codescanning
-* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/old-change-notes/2020-09-29-range-analysis-rollup.md
+++ b/cpp/old-change-notes/2020-09-29-range-analysis-rollup.md
--- a/cpp/old-change-notes/2020-10-21-erroneous-types.md
+++ b/cpp/old-change-notes/2020-10-21-erroneous-types.md
--- a/cpp/old-change-notes/2020-10-21-size-check-queries.md
+++ b/cpp/old-change-notes/2020-10-21-size-check-queries.md
--- a/cpp/old-change-notes/2020-11-02-unused-local-variable.md
+++ b/cpp/old-change-notes/2020-11-02-unused-local-variable.md
--- a/cpp/old-change-notes/2020-11-05-formatting-function.md
+++ b/cpp/old-change-notes/2020-11-05-formatting-function.md
--- a/cpp/old-change-notes/2020-11-05-private-models.md
+++ b/cpp/old-change-notes/2020-11-05-private-models.md
--- a/cpp/old-change-notes/2020-11-12-unsafe-use-of-this.md
+++ b/cpp/old-change-notes/2020-11-12-unsafe-use-of-this.md
--- a/cpp/old-change-notes/2020-11-27-downgrade-to-recommendation.md
+++ b/cpp/old-change-notes/2020-11-27-downgrade-to-recommendation.md
--- a/cpp/old-change-notes/2021-02-04-unsigned-difference-expression-compared-zero.md
+++ b/cpp/old-change-notes/2021-02-04-unsigned-difference-expression-compared-zero.md
--- a/cpp/old-change-notes/2021-02-24-memset-may-be-deleted.md
+++ b/cpp/old-change-notes/2021-02-24-memset-may-be-deleted.md
--- a/cpp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
+++ b/cpp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
--- a/cpp/old-change-notes/2021-03-11-failed-extractions.md
+++ b/cpp/old-change-notes/2021-03-11-failed-extractions.md
--- a/cpp/old-change-notes/2021-03-11-overflow-abs.md
+++ b/cpp/old-change-notes/2021-03-11-overflow-abs.md
--- a/cpp/old-change-notes/2021-03-17-av-rule-79.md
+++ b/cpp/old-change-notes/2021-03-17-av-rule-79.md
--- a/cpp/old-change-notes/2021-04-06-assign-where-compare-meant.md
+++ b/cpp/old-change-notes/2021-04-06-assign-where-compare-meant.md
--- a/cpp/old-change-notes/2021-04-09-unsigned-difference-expression-compared-zero.md
+++ b/cpp/old-change-notes/2021-04-09-unsigned-difference-expression-compared-zero.md
--- a/cpp/old-change-notes/2021-04-13-arithmetic-queries.md
+++ b/cpp/old-change-notes/2021-04-13-arithmetic-queries.md
--- a/cpp/old-change-notes/2021-04-21-return-stack-allocated-object.md
+++ b/cpp/old-change-notes/2021-04-21-return-stack-allocated-object.md
--- a/cpp/old-change-notes/2021-04-26-more-sound-expr-might-overflow.md
+++ b/cpp/old-change-notes/2021-04-26-more-sound-expr-might-overflow.md
--- a/cpp/old-change-notes/2021-05-10-comparison-with-wider-type.md
+++ b/cpp/old-change-notes/2021-05-10-comparison-with-wider-type.md
--- a/cpp/old-change-notes/2021-05-12-uncontrolled-arithmetic.md
+++ b/cpp/old-change-notes/2021-05-12-uncontrolled-arithmetic.md
--- a/cpp/old-change-notes/2021-05-14-uncontrolled-allocation-size.md
+++ b/cpp/old-change-notes/2021-05-14-uncontrolled-allocation-size.md
--- a/cpp/old-change-notes/2021-05-18-static-buffer-overflow.md
+++ b/cpp/old-change-notes/2021-05-18-static-buffer-overflow.md
--- a/cpp/old-change-notes/2021-05-19-weak-cryptographic-algorithm.md
+++ b/cpp/old-change-notes/2021-05-19-weak-cryptographic-algorithm.md
--- a/cpp/old-change-notes/2021-05-20-incorrect-allocation-error-handling.md
+++ b/cpp/old-change-notes/2021-05-20-incorrect-allocation-error-handling.md
--- a/cpp/old-change-notes/2021-05-20-ref-qualifiers.md
+++ b/cpp/old-change-notes/2021-05-20-ref-qualifiers.md
--- a/cpp/old-change-notes/2021-05-21-unsafe-strncat.md
+++ b/cpp/old-change-notes/2021-05-21-unsafe-strncat.md
--- a/cpp/old-change-notes/2021-06-10-cleartext-transmission.md
+++ b/cpp/old-change-notes/2021-06-10-cleartext-transmission.md
--- a/cpp/old-change-notes/2021-06-10-std-types.md
+++ b/cpp/old-change-notes/2021-06-10-std-types.md
--- a/cpp/old-change-notes/2021-06-21-weak-cryptographic-algorithm.md
+++ b/cpp/old-change-notes/2021-06-21-weak-cryptographic-algorithm.md
--- a/cpp/old-change-notes/2021-06-22-sql-tainted.md
+++ b/cpp/old-change-notes/2021-06-22-sql-tainted.md
--- a/cpp/old-change-notes/2021-06-24-dataflow-implicit-reads.md
+++ b/cpp/old-change-notes/2021-06-24-dataflow-implicit-reads.md
--- a/cpp/old-change-notes/2021-06-24-uncontrolled-arithmetic.md
+++ b/cpp/old-change-notes/2021-06-24-uncontrolled-arithmetic.md
--- a/cpp/old-change-notes/2021-06-30-wrong-type-format-argument.md
+++ b/cpp/old-change-notes/2021-06-30-wrong-type-format-argument.md
--- a/cpp/old-change-notes/2021-07-13-cleartext-storage-file.md
+++ b/cpp/old-change-notes/2021-07-13-cleartext-storage-file.md
--- a/cpp/old-change-notes/2021-07-20-toctou-race-condition.md
+++ b/cpp/old-change-notes/2021-07-20-toctou-race-condition.md
--- a/cpp/old-change-notes/2021-07-27-uncontrolled-arithmetic.md
+++ b/cpp/old-change-notes/2021-07-27-uncontrolled-arithmetic.md
--- a/cpp/old-change-notes/2021-07-29-virtual-function-declaration-specifiers.md
+++ b/cpp/old-change-notes/2021-07-29-virtual-function-declaration-specifiers.md
--- a/cpp/old-change-notes/2021-08-10-has-trailing-return-type.md
+++ b/cpp/old-change-notes/2021-08-10-has-trailing-return-type.md
--- a/cpp/old-change-notes/2021-08-17-has-c-linkage.md
+++ b/cpp/old-change-notes/2021-08-17-has-c-linkage.md
--- a/cpp/old-change-notes/2021-08-23-ctime-weaken-claims.md
+++ b/cpp/old-change-notes/2021-08-23-ctime-weaken-claims.md
--- a/cpp/old-change-notes/2021-08-23-getPrimaryQlClasses.md
+++ b/cpp/old-change-notes/2021-08-23-getPrimaryQlClasses.md
--- a/cpp/old-change-notes/2021-08-24-implicit-downcast-from-bitfield.md
+++ b/cpp/old-change-notes/2021-08-24-implicit-downcast-from-bitfield.md
--- a/cpp/old-change-notes/2021-08-31-range-analysis-upper-bound.md
+++ b/cpp/old-change-notes/2021-08-31-range-analysis-upper-bound.md
--- a/cpp/old-change-notes/2021-09-13-overflow-static.md
+++ b/cpp/old-change-notes/2021-09-13-overflow-static.md
--- a/cpp/old-change-notes/2021-09-27-command-line-injection.md
+++ b/cpp/old-change-notes/2021-09-27-command-line-injection.md
--- a/cpp/old-change-notes/2021-09-27-overflow-static.md
+++ b/cpp/old-change-notes/2021-09-27-overflow-static.md
--- a/cpp/old-change-notes/2021-10-01-improper-null-termination.md
+++ b/cpp/old-change-notes/2021-10-01-improper-null-termination.md
--- a/cpp/old-change-notes/2021-10-07-extraction-errors.md
+++ b/cpp/old-change-notes/2021-10-07-extraction-errors.md
--- a/cpp/ql/lib/CHANGELOG.md
+++ b/cpp/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.5
+
 ## 0.0.4

 ### New Features
--- a/cpp/ql/lib/change-notes/released/0.0.5.md
+++ b/cpp/ql/lib/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/cpp/ql/lib/codeql-pack.release.yml
+++ b/cpp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/cpp/ql/lib/qlpack.yml
+++ b/cpp/ql/lib/qlpack.yml
@@ -1,8 +1,8 @@
 name: codeql/cpp-all
-version: 0.0.5-dev
+version: 0.0.5
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp
 library: true
 dependencies:
-  codeql/cpp-upgrades: 0.0.3
+  codeql/cpp-upgrades: ^0.0.3
--- a/cpp/ql/src/CHANGELOG.md
+++ b/cpp/ql/src/CHANGELOG.md
@@ -1,3 +1,10 @@
+## 0.0.5
+
+### New Queries
+
+* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
+* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
+
 ## 0.0.4

 ### New Queries
--- a/cpp/ql/src/change-notes/released/0.0.5.md
+++ b/cpp/ql/src/change-notes/released/0.0.5.md
@@ -0,0 +1,6 @@
+## 0.0.5
+
+### New Queries
+
+* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
+* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/ql/src/codeql-pack.release.yml
+++ b/cpp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/cpp/ql/src/qlpack.yml
+++ b/cpp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.0.5-dev
+version: 0.0.5
 groups: cpp
 dependencies:
    codeql/cpp-all: "*"
--- a/cpp/upgrades/CHANGELOG.md
+++ b/cpp/upgrades/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.5
+
 ## 0.0.4
--- a/cpp/upgrades/change-notes/released/0.0.5.md
+++ b/cpp/upgrades/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/cpp/upgrades/codeql-pack.release.yml
+++ b/cpp/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/cpp/upgrades/qlpack.yml
+++ b/cpp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-upgrades
 groups: cpp
 upgrades: .
-version: 0.0.5-dev
+version: 0.0.5
 library: true
--- a/csharp/old-change-notes/2020-08-18-ast-viewer.md
+++ b/csharp/old-change-notes/2020-08-18-ast-viewer.md
--- a/csharp/old-change-notes/2020-08-18-partial-method-bodies.md
+++ b/csharp/old-change-notes/2020-08-18-partial-method-bodies.md
--- a/csharp/old-change-notes/2020-08-26-implicit-array-lengths.md
+++ b/csharp/old-change-notes/2020-08-26-implicit-array-lengths.md
--- a/csharp/old-change-notes/2020-09-02-assembly-insensitive-trap.md
+++ b/csharp/old-change-notes/2020-09-02-assembly-insensitive-trap.md
--- a/csharp/old-change-notes/2020-09-22-weak-encryption.md
+++ b/csharp/old-change-notes/2020-09-22-weak-encryption.md
--- a/csharp/old-change-notes/2020-10-21-AST-printing-improvements.md
+++ b/csharp/old-change-notes/2020-10-21-AST-printing-improvements.md
--- a/csharp/old-change-notes/2020-10-21-CodeAnalysis-attributes-in-assert.md
+++ b/csharp/old-change-notes/2020-10-21-CodeAnalysis-attributes-in-assert.md
--- a/csharp/old-change-notes/2020-10-21-rework-attribute-extraction.md
+++ b/csharp/old-change-notes/2020-10-21-rework-attribute-extraction.md
--- a/csharp/old-change-notes/2020-10-28-cil-to-string.md
+++ b/csharp/old-change-notes/2020-10-28-cil-to-string.md
--- a/csharp/old-change-notes/2020-11-05-get-sourcedeclaration-rename.md
+++ b/csharp/old-change-notes/2020-11-05-get-sourcedeclaration-rename.md
--- a/csharp/old-change-notes/2020-11-18-lambda-modifiers.md
+++ b/csharp/old-change-notes/2020-11-18-lambda-modifiers.md
--- a/csharp/old-change-notes/2020-11-18-local-function-attributable.md
+++ b/csharp/old-change-notes/2020-11-18-local-function-attributable.md
--- a/csharp/old-change-notes/2020-12-08-cil-enum-underlying-type.md
+++ b/csharp/old-change-notes/2020-12-08-cil-enum-underlying-type.md
--- a/csharp/old-change-notes/2020-12-17-format-method-empty-overload.md
+++ b/csharp/old-change-notes/2020-12-17-format-method-empty-overload.md
--- a/csharp/old-change-notes/2020-12-18-extract-custom-modifiers.md
+++ b/csharp/old-change-notes/2020-12-18-extract-custom-modifiers.md
--- a/csharp/old-change-notes/2020-12-21-merge-format-queries.md
+++ b/csharp/old-change-notes/2020-12-21-merge-format-queries.md
--- a/csharp/old-change-notes/2021-01-14-Unary-pattern.md
+++ b/csharp/old-change-notes/2021-01-14-Unary-pattern.md
--- a/csharp/old-change-notes/2021-01-15-Relational-pattern.md
+++ b/csharp/old-change-notes/2021-01-15-Relational-pattern.md
--- a/csharp/old-change-notes/2021-01-19-Function-pointer.md
+++ b/csharp/old-change-notes/2021-01-19-Function-pointer.md
--- a/csharp/old-change-notes/2021-01-25-Function-pointer-cil.md
+++ b/csharp/old-change-notes/2021-01-25-Function-pointer-cil.md
--- a/csharp/old-change-notes/2021-01-27-Add-binary-pattern.md
+++ b/csharp/old-change-notes/2021-01-27-Add-binary-pattern.md
--- a/csharp/old-change-notes/2021-02-01-Preprocessor-directives.md
+++ b/csharp/old-change-notes/2021-02-01-Preprocessor-directives.md
--- a/csharp/old-change-notes/2021-02-02-foreach-underlying-methods.md
+++ b/csharp/old-change-notes/2021-02-02-foreach-underlying-methods.md
--- a/csharp/old-change-notes/2021-02-04-Records.md
+++ b/csharp/old-change-notes/2021-02-04-Records.md
--- a/csharp/old-change-notes/2021-02-12-with-expression.md
+++ b/csharp/old-change-notes/2021-02-12-with-expression.md
--- a/csharp/old-change-notes/2021-02-26-tuple-dataflow.md
+++ b/csharp/old-change-notes/2021-02-26-tuple-dataflow.md
--- a/csharp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
+++ b/csharp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
--- a/csharp/old-change-notes/2021-03-02-dotnet5.md
+++ b/csharp/old-change-notes/2021-03-02-dotnet5.md
--- a/csharp/old-change-notes/2021-03-24-cil-ssa.md
+++ b/csharp/old-change-notes/2021-03-24-cil-ssa.md
--- a/csharp/old-change-notes/2021-03-24-remove-legacy-queries.md
+++ b/csharp/old-change-notes/2021-03-24-remove-legacy-queries.md
--- a/csharp/old-change-notes/2021-03-24-remove-vuln-package-query.md
+++ b/csharp/old-change-notes/2021-03-24-remove-vuln-package-query.md
--- a/csharp/old-change-notes/2021-04-09-dapper-support.md
+++ b/csharp/old-change-notes/2021-04-09-dapper-support.md
--- a/csharp/old-change-notes/2021-04-09-default-argument-values.md
+++ b/csharp/old-change-notes/2021-04-09-default-argument-values.md
--- a/csharp/old-change-notes/2021-04-14-customizations.md
+++ b/csharp/old-change-notes/2021-04-14-customizations.md
--- a/csharp/old-change-notes/2021-04-22-console-read-local-source.md
+++ b/csharp/old-change-notes/2021-04-22-console-read-local-source.md
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Dave Bartolomeo	712d71856b	Merge pull request #7401 from github/release-prep/2.7.4 Release preparation for version 2.7.4	2021-12-14 16:42:33 -05:00
github-actions[bot]	59da2cdf69	Release preparation for version 2.7.4	2021-12-14 21:35:09 +00:00
Dave Bartolomeo	6664a3814a	Merge pull request #7398 from github/dbartol/fix-change-notes Fix change notes	2021-12-14 13:53:08 -05:00
Dave Bartolomeo	fa40d59332	Move older change notes to `old-change-notes` Now that change notes are per-package, new change notes should be created in the `change-notes` folder under the affected pack (e.g., `cpp/ql/src/change-notes` for C++ query change notes. I've moved all of the change note files that were added before we started publishing them in packs to an `old-change-notes` directory under each language, to reduce the temptation to add new change notes there. I'm working on a document to describe how and when to create change notes for packs separately.	2021-12-14 12:35:04 -05:00
Dave Bartolomeo	a62f181d42	Move new change notes to appropriate packs	2021-12-14 12:05:15 -05:00
Erik Krogh Kristensen	de4458346f	Merge pull request #7344 from SZFsir/main JS: Improve inter-procedural type inference for FunctionExpr	2021-12-13 21:58:53 +01:00
Nick Rolfe	dc27089714	Merge pull request #7375 from github/nickrolfe/cargo_update Ruby: update crate versions	2021-12-13 18:16:29 +00:00
Dave Bartolomeo	7732c0885f	Merge pull request #7374 from aeisenberg/aesenberg/upgrades-semver Fix semver for upgrades references	2021-12-13 13:06:59 -05:00
Andrew Eisenberg	0669ef505e	Fix semver for upgrades references Ensure the version range is flexible enough to handle future version changes.	2021-12-13 09:03:33 -08:00
Aditya Sharad	372f099850	Merge pull request #7323 from adityasharad/atm/perf-debugging-std-lib JS: Performance improvements to libraries using regex matching	2021-12-13 08:53:11 -08:00
Nick Rolfe	b18f7a9bd7	Ruby: update crate versions	2021-12-13 15:37:35 +00:00
Michael Nebel	c0b61d7f73	Merge pull request #7370 from michaelnebel/csharp-mad-textreader C#: Flow summaries for virtual members in abstract classes should also apply to overrides.	2021-12-13 15:00:54 +01:00
Alex Ford	124aac23c6	Merge pull request #7371 from github/ruby/comment-new-syntax Ruby: use Ruby object instantiation syntax in a comment	2021-12-13 13:23:03 +00:00
Alex Ford	4ae92667e1	Ruby: use Ruby object instantiation syntax in a comment	2021-12-13 12:54:45 +00:00
Michael Nebel	ba23393c0d	C#: Update test as we now also implicitly gets flow summary for StreamReader.	2021-12-13 13:51:53 +01:00
Michael Nebel	a6eba04793	C#: Convert System.IO.TextReader flow to CSV format.	2021-12-13 13:51:18 +01:00
Michael Nebel	88bb8a2704	C#: Update flow summaries test cases.	2021-12-13 13:14:49 +01:00
Michael Nebel	d699ca9aa8	C#: Flow summaries should also apply for overides or virtual members in abstract classes.	2021-12-13 13:09:40 +01:00
Michael Nebel	7ff2ee695d	Merge pull request #7348 from michaelnebel/csharp-mad-as-csv-json C#: Convert flow summaries for JSon.NET	2021-12-13 11:57:55 +01:00
JrXnm	efc9e67ec2	Update javascript/ql/lib/semmle/javascript/dataflow/internal/InterProceduralTypeInference.qll Fix multiple declare may mismatch issue Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2021-12-13 18:36:06 +08:00
JrXnm	fad95d8935	Update javascript/ql/lib/semmle/javascript/dataflow/internal/InterProceduralTypeInference.qll Commit coding style suggestion Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2021-12-13 18:32:11 +08:00
Michael Nebel	f32d464c0f	C#: Ensure bi-directional import for External flow.	2021-12-13 10:50:49 +01:00
Michael Nebel	327cf444f4	C#: Convert Newtonsoft.JSon.Linq.JObject and Newtonsoft.JSon.Linq.JToken flow to CSV format.	2021-12-13 10:50:49 +01:00
Michael Nebel	f3c0eadbce	C#: Fix the existing callableFlow for JObject to target the inherited ToString methods from JToken.	2021-12-13 10:50:49 +01:00
Michael Nebel	58f36e4b31	C#: Convert NewtonSoft.Json.JSonSerializer flow to CSV format.	2021-12-13 10:50:49 +01:00
Michael Nebel	90e49508a3	C#: Convert Newtonsoft.Json.JsonConvert flow to CSV format.	2021-12-13 10:50:48 +01:00
Michael Nebel	a4bea05fa7	Merge pull request #7342 from michaelnebel/csharp-mad-as-csv3 C#: More Flow summaries in CSV format.	2021-12-13 10:32:28 +01:00
Michael Nebel	be1e75471e	C#: Ensure bi-directional import for external flow.	2021-12-13 09:23:11 +01:00
Michael Nebel	1cab177f8a	C#: Convert System.Web.HttpUtility flow to CSV format.	2021-12-13 09:19:41 +01:00
Michael Nebel	0e0c3e3937	C#: Convert System.Web.HttpServerUtility flow to CSV format.	2021-12-13 09:19:41 +01:00
Michael Nebel	6301e726ee	C#: Update HttpServerUtility stub with HtmlEncode method and update flow summaries test.	2021-12-13 09:19:41 +01:00
Michael Nebel	1cd37dddf5	C#: Convert System.Net.WebUtility flow to CSV format.	2021-12-13 09:19:41 +01:00
Michael Nebel	07a4f5f748	C#: Update FlowSummaries test as the bogus flow summaries for the KeyValuePair default constructor has been removed.	2021-12-13 09:19:41 +01:00
Michael Nebel	679aad138e	C#: Convert System.Collections.Generic.KeyValuePair flow to CSV format.	2021-12-13 09:19:36 +01:00
Michael Nebel	42bf866fb3	C#: Convert System.Web.UI.WebControls.Textbox flow to CSV format.	2021-12-13 09:18:34 +01:00
Michael Nebel	9604ed883c	C#: Convert System.NET.IPHostEntry flow to CSV format.	2021-12-13 09:17:27 +01:00
Michael Nebel	d804893a49	C#: Convert System.Net.Cookie flow to CSV format.	2021-12-13 09:16:05 +01:00
Michael Nebel	03fb244545	C#: Convert System.Web.HttpCookie flow to CSV format.	2021-12-13 09:13:14 +01:00
Michael Nebel	a6360215f3	Merge pull request #7304 from michaelnebel/csharp-mad-as-csv2 C#: Convert flow summaries to CSV format.	2021-12-13 08:56:06 +01:00
Harry Maclean	0ca9852cc8	Merge pull request #7325 from github/hmac/action-controller-private-methods Ruby: Don't count private methods as Rails actions	2021-12-13 20:47:22 +13:00
Harry Maclean	e1d290d4c0	Ruby: Don't count private methods as Rails actions Private instance methods on ActionController classes aren't valid request handlers. Routing to them will raise an exception.	2021-12-13 15:36:55 +13:00
Aditya Sharad	1857de1f33	JS: Speed up detection of jQuery marker comments Combine two regexes into a single one. This saves up to 5s on large databases by reducing the number of separate scans of the comments table before regex matching. The combined regex is slightly more permissive than the original two, since it allows a combination of the two matched formats. A string that matches one of the original regexes will match the combined regex.	2021-12-10 15:30:02 -08:00
Nick Rolfe	b80a84c156	Merge pull request #7341 from github/nickrolfe/cookies	2021-12-10 19:52:23 +00:00
Aditya Sharad	6a1aea740f	JS: Avoid scanning individual comment lines to find generated code markers Some subclasses of GeneratedCodeMarkerComment regex match against `getLine(_)`. When evaluated, this results in multiple scans (one per subclass that uses it) of all comment lines in the database, before regex matching against those lines. To make these scans smaller, regex match against the entire comment text without splitting them into lines. This is achieved using `?m` (multiline) and line boundaries in the regexes.	2021-12-10 11:41:54 -08:00
Aditya Sharad	c9a87234ef	JS: Factor helper predicate to improve SensitiveWrite performance	2021-12-10 11:41:53 -08:00
Nick Rolfe	b6c5b4d213	Ruby: define ActionViewCookiesCall	2021-12-10 16:36:26 +00:00
Michael Nebel	afa58f5676	C#: Ensure bi-directional importing of external flow for System.Text.	2021-12-10 10:28:35 +01:00
JrXnm	1a1a7413c2	JS: Improv inter-procedural type inference for FunctionExpr	2021-12-10 01:09:49 +08:00
Michael Nebel	d60b90acd3	C#: Manual update of System.String and System.Convert flow summaries.	2021-12-09 16:34:42 +01:00
Michael Nebel	e879ca7a3b	C#: Convert System.Convert flow to CSV format.	2021-12-09 16:34:42 +01:00
Michael Nebel	15b4b218c8	C#: Convert System.Nullable<> flow to CSV format.	2021-12-09 16:34:42 +01:00
Michael Nebel	bbab0e582a	C#: Convert System.Lazy<> flow to CSV format.	2021-12-09 16:34:42 +01:00
Michael Nebel	9e61dfb41f	C#: Convert System.Text.StringBuilder flow to CSV format.	2021-12-09 16:34:41 +01:00
Michael Nebel	5a26346ba5	C#: Allow the use of pointer types in CSV validation.	2021-12-09 16:34:41 +01:00
Michael Nebel	5376eb89b3	C#: Convert System.String flow to CSV format.	2021-12-09 16:34:41 +01:00
Nick Rolfe	d46564caa6	Ruby: treat ActionController#cookies as a remote flow source	2021-12-09 12:13:17 +00:00
Nick Rolfe	f6a8b9a7e5	Ruby: add cookies call to frameworks test	2021-12-09 12:07:04 +00:00