Граф коммитов

1343 Коммитов

Автор SHA1 Сообщение Дата
github-actions[bot] 92af5f5386 Post-release preparation for codeql-cli-2.15.4 2023-12-06 22:59:22 +00:00
github-actions[bot] c04457e9e7 Release preparation for version 2.15.4 2023-12-06 21:11:50 +00:00
dependabot[bot] d2cad03e28
Bump the extractor-dependencies group in /go/extractor with 1 update
Bumps the extractor-dependencies group in /go/extractor with 1 update: [golang.org/x/tools](https://github.com/golang/tools).

- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-28 03:58:15 +00:00
Owen Mansel-Chan 6f9a70475d
Merge pull request #14882 from owen-mc/go/minor-fixes
Go: improve CallNode documentation
2023-11-24 10:36:07 +00:00
Owen Mansel-Chan 2c99e70e2b
Merge pull request #14890 from owen-mc/go/fix-change-note-query-reference
Go: Change how we refer to a query in a change note
2023-11-23 14:15:05 +00:00
Owen Mansel-Chan 25a2aef623
Update library name in change note 2023-11-23 13:42:21 +00:00
Owen Mansel-Chan 25d5104468
Change how we refer to a query in a change note 2023-11-23 13:22:05 +00:00
Owen Mansel-Chan a130c0f6b3
Merge branch 'main' into main 2023-11-22 16:50:41 +00:00
Owen Mansel-Chan dd8fb29a65
Improve QLDocs of CallNode and MethodCallNode
When a function is assigned to a variable and called through that
variable then we can't always tell it was a method.
2023-11-22 16:32:10 +00:00
Owen Mansel-Chan d26dc68baa
Merge pull request #14798 from owen-mc/go/improve-value-flow-through-slice-exprs
Go: model value flow with array content through slice expressions
2023-11-21 11:50:08 +00:00
github-actions[bot] bad499e360 Post-release preparation for codeql-cli-2.15.3 2023-11-17 14:35:41 +00:00
Yunus AYDIN 9e5a80ac59 update select clause and expected file 2023-11-17 13:37:17 +03:00
Yunus AYDIN 7bf7e59017 update expected file 2023-11-17 13:06:46 +03:00
Yunus AYDIN 4f6421946c update the rule and select clause 2023-11-17 10:49:02 +03:00
Yunus AYDIN 43f100fd69
Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2023-11-17 10:40:42 +03:00
Yunus AYDIN 96646abab9
Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2023-11-17 10:40:32 +03:00
Yunus AYDIN 0091b83258
Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2023-11-17 10:40:18 +03:00
Yunus AYDIN 8ff38321a3 update rule and expected file 2023-11-17 00:08:01 +03:00
github-actions[bot] 6ec9b95072 Release preparation for version 2.15.3 2023-11-16 13:07:16 +00:00
Yunus AYDIN 8a24daf293 modify tests and rule 2023-11-15 19:38:16 +03:00
Owen Mansel-Chan 64bf6cc62b
Update existing test (extra nodes, no extra alerts) 2023-11-15 15:33:09 +00:00
Owen Mansel-Chan 1ac3a9e8d3
Add change note 2023-11-15 15:12:58 +00:00
Owen Mansel-Chan e0879969c9
Update tests 2023-11-15 15:08:48 +00:00
Owen Mansel-Chan aaa8f9c41f
Add read and store steps for SliceElementNode 2023-11-15 14:58:23 +00:00
Owen Mansel-Chan 2b897a9825
Add synthetic SliceElementNode 2023-11-15 14:58:21 +00:00
Owen Mansel-Chan 5af3e119a6
Test value flow through SliceExpr with array content 2023-11-15 14:57:53 +00:00
Yunus AYDIN 7877082869 fix tests code issues and expected file 2023-11-15 16:08:20 +03:00
Yunus AYDIN 1ed4d2ada7 remove database 2023-11-15 15:49:31 +03:00
Yunus AYDIN 1e915720e9 fix the rule issues 2023-11-15 15:49:09 +03:00
Yunus AYDIN d5f254781e
Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2023-11-15 15:11:02 +03:00
Yunus AYDIN fa1fa0d19d
Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2023-11-15 15:08:29 +03:00
Yunus AYDIN 74f1344ac5
Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2023-11-15 15:08:14 +03:00
Yunus AYDIN 9178cec0e6 fix test errors 2023-11-15 09:33:52 +03:00
Owen Mansel-Chan 83d1fc33e1
Add change note 2023-11-14 23:16:32 +00:00
Yunus AYDIN 2cea720f6e remove wcd directory 2023-11-14 20:19:49 +03:00
Yunus AYDIN dbdf9e1a4f remove change-notes and fix build error 2023-11-14 20:19:28 +03:00
Yunus AYDIN e576650293 remove qhelp file and add qlref 2023-11-14 17:23:42 +03:00
Owen Mansel-Chan 45faed057c
Improve SliceExpr documentation 2023-11-14 11:25:16 +00:00
Yunus AYDIN 47ef123601 Fix Pull Requests Problems 2023-11-14 09:26:37 +03:00
Owen Mansel-Chan c8779d0d0b
Fix another test
No change in alerts, just 3 extra nodes.
2023-11-13 23:56:25 +00:00
Owen Mansel-Chan 28160e418c
Update tests 2023-11-13 23:26:30 +00:00
Owen Mansel-Chan ed349f7d6b
Improve value flow through arrays 2023-11-13 23:26:16 +00:00
Yunus AYDIN bf59c94d24 fix changelog pipeline error 2023-11-14 00:11:27 +03:00
Yunus AYDIN 4317e58414 Add Web Cache Deception QHelp and Example Code Snippet for Vulnerable and Fixed Version 2023-11-13 23:54:29 +03:00
Yunus AYDIN 78a6522190 Rename Folder 2023-11-13 23:40:51 +03:00
Yunus AYDIN 95395322a8 Format Document 2023-11-13 23:39:58 +03:00
Yunus AYDIN 1eb1293230 Add Web Cache Deception Query and Example Code Snippet 2023-11-13 23:35:17 +03:00
Owen Mansel-Chan 359dcf37e9
Merge pull request #14649 from Kwstubbs/go-cors
Go: Add Cors Gin Support
2023-11-13 15:46:59 +00:00
Maiky 6e533c6284 Import `PathGraph` 2023-11-12 18:22:14 +01:00
Maiky 2b1b4cd85d Remove unused `LdapConn` 2023-11-12 18:18:43 +01:00