Chris Smowton 1f9f6d7c33 Java: Report log-injection at the source rather than the sink ...

This should remove the problem of excessive grouping of different alerts that share a sink location, often due to wrapper functions that form the ultimate sink of all logging calls in a given codebase.

2022-06-22 13:05:20 +01:00

..

.settings

…

.vs

…

Advisory

Extract override modifier

2022-05-10 19:51:28 +01:00

Architecture

Java: Performance tweaks

2022-02-21 17:05:00 +00:00

change-notes

Java: Report log-injection at the source rather than the sink

2022-06-22 13:05:20 +01:00

codeql-suites

Packaging: Java refactoring

2021-08-19 14:09:35 -07:00

Compatibility/JDK9

add all remaining explicit this

2021-11-26 13:50:10 +01:00

Complexity

…

DeadCode

simplify expressions that could be type-casts

2022-01-20 10:41:35 +01:00

Diagnostics

Kotlin: Autoformat

2022-05-10 19:51:31 +01:00

experimental

Merge pull request #9618 from aschackmull/dataflow/deprecate-barrierguard-class

2022-06-22 10:44:08 +02:00

external

add all remaining explicit this

2021-11-26 13:50:10 +01:00

filters

…

Frameworks

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

Language Abuse

Kotlin: Fix TypeVariableHidesType performance regression

2022-05-10 19:51:30 +01:00

Likely Bugs

Java: Remove some redundant string concatenations

2022-06-16 16:38:17 +01:00

meta

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

Metrics

Rename framework coverage query

2022-02-08 11:14:03 +01:00

Performance

Kotlin: exclude Kotlin source from 'inner class could be static' check

2022-05-13 11:20:28 +02:00

Security/CWE

Java: Report log-injection at the source rather than the sink

2022-06-22 13:05:20 +01:00

semmle/code/xml

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

Telemetry

Update java/ql/src/Telemetry/ExternalLibraryUsage.ql

2022-06-20 16:15:06 +02:00

utils

Java: Update FlowTestCase generator with provenance wildcard.

2022-06-20 16:20:02 +02:00

Violations of Best Practice

Java: Rename FloatingPointLiteral to FloatLiteral

2022-05-16 22:06:04 +02:00

.project

…

.qlpath

…

AlertSuppression.ql

add all remaining explicit this

2021-11-26 13:50:10 +01:00

AlertSuppressionAnnotations.ql

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CHANGELOG.md

Release preparation for version 2.9.4

2022-06-15 08:22:38 +00:00

codeql-pack.release.yml

Release preparation for version 2.9.4

2022-06-15 08:22:38 +00:00

definitions.ql

…

definitions.qll

…

IDEContextual.qll

…

localDefinitions.ql

…

localReferences.ql

…

printAst.ql

…

qlpack.lock.yml

Packaging: Java refactoring

2021-08-19 14:09:35 -07:00

qlpack.yml

Bump minor version of all regularly released packs

2022-06-21 11:22:58 +01:00

queries.xml

…