Chris Smowton 1f9f6d7c33 Java: Report log-injection at the source rather than the sink ...

This should remove the problem of excessive grouping of different alerts that share a sink location, often due to wrapper functions that form the ultimate sink of all logging calls in a given codebase.

2022-06-22 13:05:20 +01:00

..

.settings

…

.vs

…

Advisory

Extract override modifier

2022-05-10 19:51:28 +01:00

Architecture

Java: Performance tweaks

2022-02-21 17:05:00 +00:00

change-notes

Java: Report log-injection at the source rather than the sink

2022-06-22 13:05:20 +01:00

codeql-suites

Packaging: Java refactoring

2021-08-19 14:09:35 -07:00

Compatibility/JDK9

add all remaining explicit this

2021-11-26 13:50:10 +01:00

Complexity

Java: Rename Block -> BlockStmt

2020-09-08 08:40:20 +02:00

DeadCode

simplify expressions that could be type-casts

2022-01-20 10:41:35 +01:00

Diagnostics

Kotlin: Autoformat

2022-05-10 19:51:31 +01:00

experimental

Merge pull request #9618 from aschackmull/dataflow/deprecate-barrierguard-class

2022-06-22 10:44:08 +02:00

external

add all remaining explicit this

2021-11-26 13:50:10 +01:00

filters

Java: Delete filter queries.

2021-03-25 09:47:31 +01:00

Frameworks

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

Language Abuse

Kotlin: Fix TypeVariableHidesType performance regression

2022-05-10 19:51:30 +01:00

Likely Bugs

Java: Remove some redundant string concatenations

2022-06-16 16:38:17 +01:00

meta

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

Metrics

Rename framework coverage query

2022-02-08 11:14:03 +01:00

Performance

Kotlin: exclude Kotlin source from 'inner class could be static' check

2022-05-13 11:20:28 +02:00

Security/CWE

Java: Report log-injection at the source rather than the sink

2022-06-22 13:05:20 +01:00

semmle/code/xml

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

Telemetry

Update java/ql/src/Telemetry/ExternalLibraryUsage.ql

2022-06-20 16:15:06 +02:00

utils

Java: Update FlowTestCase generator with provenance wildcard.

2022-06-20 16:20:02 +02:00

Violations of Best Practice

Java: Rename FloatingPointLiteral to FloatLiteral

2022-05-16 22:06:04 +02:00

.project

…

.qlpath

…

AlertSuppression.ql

add all remaining explicit this

2021-11-26 13:50:10 +01:00

AlertSuppressionAnnotations.ql

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CHANGELOG.md

Release preparation for version 2.9.4

2022-06-15 08:22:38 +00:00

codeql-pack.release.yml

Release preparation for version 2.9.4

2022-06-15 08:22:38 +00:00

definitions.ql

Java: Refactor definitions query, add queries for ide search

2020-05-07 12:44:36 -04:00

definitions.qll

Replace getEncodedFile with shared getFileBySourceArchiveName predicate

2020-11-10 13:55:27 +00:00

IDEContextual.qll

Update comment to be a QLDoc comment

2020-11-10 14:14:27 +00:00

localDefinitions.ql

Replace getEncodedFile with shared getFileBySourceArchiveName predicate

2020-11-10 13:55:27 +00:00

localReferences.ql

Replace getEncodedFile with shared getFileBySourceArchiveName predicate

2020-11-10 13:55:27 +00:00

printAst.ql

Replace getEncodedFile with shared getFileBySourceArchiveName predicate

2020-11-10 13:55:27 +00:00

qlpack.lock.yml

Packaging: Java refactoring

2021-08-19 14:09:35 -07:00

qlpack.yml

Bump minor version of all regularly released packs

2022-06-21 11:22:58 +01:00

queries.xml

…