Without a concrete ExternalStringKind class, there will be no flow for
ExternalStringKind by default.

This includes a new abstract class that represents all the Ldap injection
santizers and can be used to add additional santizers through
extension.

This is done for logical cohesion. We already have the capability of
extending additional taint steps by extending
`TaintTracking::AdditionalTaintStep`.

Co-authored-by: Felicity Chapman <felicitymay@github.com>

Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>

C++: make IR BarrierGuard::checks match AST

Python: Fix typo in qhelp file

Approved by mchammer01

Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>

Moved things around so there is only a single `<example>` tag (and had to rewrite contents a bit).

C#: Make fields readonly

C#: Fix tags typo

…tion.

Add Log4J 2 and a new search string secret

Approved by esbena

…ess-isLValue

[Java] Simplify VarAccess.isLValue()

C++: SimpleRangeAnalysis: unsigned multiplication

C++: SAL.qll QLDoc and cleanup

Co-authored-by: Jonas Jensen <jbj@github.com>

C++: Model more of std::string in models.

…rmat

Approved by aibaars

Co-authored-by: Taus <tausbn@github.com>

Co-authored-by: Taus <tausbn@github.com>

C++: Detect GoogleTest tests cases in FNumberOfTests.ql

Python: Dataflow, test magic methods

Approved by yoff

C++: Split test file stl.cpp