Michael Nebel
8f5b8f494f
C#: Update dispatch logic and other libraries to handle params collection types.
2025-01-02 11:13:10 +01:00
Edward Minnix III
453913cd9f
Remove Parameter from this PR
2024-12-19 23:11:07 -05:00
Ed Minnix
84936c0fc0
Change note
2024-12-19 09:02:02 -05:00
Ed Minnix
b618ae06e8
Model Blazor attributes as marking sources
...
The attributes
- `[Parameter]`
- `[SupplyParameterFromFormAttribute]`
- `[SupplyParameterFromQueryAttribute]`
Tell Blazor to initialize the variables with parameters defined by the
route/form values/query parameters/etc. Values derived from the URI or
form should be classified as `remote` flow sources.
2024-12-19 09:01:56 -05:00
Ed Minnix
00ecdb0a83
Fix typo in NavigationManager name in model
2024-12-18 20:52:00 -05:00
Michael Nebel
bd9f656be2
C#: Add ql doc to TestLibrary.
2024-12-17 14:40:01 +01:00
Michael Nebel
a91c1dc715
C#: Move external api declarations to the library pack.
2024-12-17 14:39:59 +01:00
Edward Minnix III
9a80c403a0
Merge pull request #18278 from egregius313/egregius313/csharp/markup-string
...
C#: Add `html-injection` sinks for Blazor `MarkupString`
2024-12-16 10:21:04 -05:00
Edward Minnix III
360398481b
Merge pull request #18280 from egregius313/egregius313/csharp/blazor/runtime-helpers/typecheck
...
C#: Add summary for `Microsoft.AspNetCore.Components.CompilerServices.RuntimeHelper::TypeCheck<T>`
2024-12-16 10:19:38 -05:00
Michael Nebel
aaf0cd5dee
Merge pull request #17968 from michaelnebel/java/movetestutils
...
Move test utilities to the query pack.
2024-12-16 13:41:30 +01:00
Ed Minnix
129388c78a
Fix change note
2024-12-13 12:48:01 -05:00
Ed Minnix
68e2f27180
Add summary Microsoft.AspNetCore.Components.CompilerServices.RuntimeHelpers::TypeCheck<T>
2024-12-12 22:10:15 -05:00
Ed Minnix
0a967325e7
Change note
2024-12-12 16:22:09 -05:00
Ed Minnix
40ea5f582c
MarkupString models
2024-12-12 16:18:29 -05:00
Michael Nebel
0bfc1b6ea8
Also move the postprocessing queries to the library pack.
2024-12-12 15:03:03 +01:00
Michael Nebel
941b0abbf6
Move modules to the library packs.
2024-12-12 15:03:01 +01:00
Tom Hvitved
fc70024f52
C#: Remove false-positive reflection calls in dataflow
2024-12-11 14:15:58 +01:00
Mathias Vorreiter Pedersen
dcc35a5724
Merge pull request #18221 from MathiasVP/add-microsoft-aspnetcore-mvc-model
...
C#: Add a MaD model for `Microsoft.AspNetCore.Mvc.Controller.View`
2024-12-09 13:24:02 +00:00
Michael Nebel
b9253222a6
C#: Add change-note.
2024-12-06 14:30:50 +01:00
Mathias Vorreiter Pedersen
0d616ca7ef
C#: Respond to PR comments.
2024-12-06 12:23:35 +00:00
Mathias Vorreiter Pedersen
4af18be70b
C#: Add change note.
2024-12-05 14:42:59 +00:00
Mathias Vorreiter Pedersen
5bebfdeb2a
C#: Add a MaD model for the 'Microsoft.AspNetCore.Mvc.Controller.View' method.
2024-12-05 13:59:59 +00:00
Anders Schack-Mulligen
4bf63fedc9
Merge pull request #18179 from aschackmull/dataflow/accesspath-notypes
...
Dataflow: Remove tracked types from Access Paths, track tainted object type, and tweak type pruning.
2024-12-05 09:58:36 +01:00
github-actions[bot]
cf71a1525b
Post-release preparation for codeql-cli-2.20.0
2024-12-04 18:36:17 +00:00
github-actions[bot]
96564b7128
Release preparation for version 2.20.0
2024-12-04 16:01:14 +00:00
Henry Mercer
963f084d87
Merge branch 'main' into henrymercer/merge-back-rc-3.16
2024-12-04 13:39:10 +00:00
Anders Schack-Mulligen
03fdceb0fd
Merge pull request #18191 from aschackmull/dataflow/remove-deprecated-lib
...
Dataflow: Delete the old configuration-class based api.
2024-12-04 11:31:46 +01:00
Mathias Vorreiter Pedersen
eefa066d44
Merge pull request #18195 from MathiasVP/dynamic-property-field-flow
...
C#: Add field-flow for dynamic fields
2024-12-04 10:09:20 +00:00
Anders Schack-Mulligen
5042753b29
C#/Java: Add change notes.
2024-12-04 10:20:43 +01:00
Michael Nebel
801f696bbb
Merge pull request #18159 from michaelnebel/csharp/publicprotected
...
C#: Only extract public and protected members from metadata.
2024-12-04 09:48:36 +01:00
Mathias Vorreiter Pedersen
9885a1cad1
Update csharp/ql/lib/change-notes/2024-12-03-dynamic-field-flow.md
2024-12-03 19:58:22 +00:00
Mathias Vorreiter Pedersen
919405e586
C#: Support mixing dynamic properties and fields (instead of just properties) and accept test changes.
2024-12-03 19:36:42 +00:00
Anders Schack-Mulligen
dbb260dfd2
C#: Remove reference to the deleted api.
2024-12-03 20:08:44 +01:00
Anders Schack-Mulligen
cca27e4c77
Add change notes for all languages.
2024-12-03 19:42:33 +01:00
Mathias Vorreiter Pedersen
da7bfb9297
C#: Add change note.
2024-12-03 17:38:26 +00:00
Mathias Vorreiter Pedersen
041df780c1
C#: Add field-flow through dynamic members.
2024-12-03 17:34:55 +00:00
Anders Schack-Mulligen
0d9e578857
C#: Delete deprecated data flow api.
2024-12-03 14:42:34 +01:00
Michael Nebel
4675426241
C#: Update change note with info on private fields.
2024-12-03 14:12:09 +01:00
Michael Nebel
cc4382c785
Merge pull request #18186 from michaelnebel/csharp/removechangenote
...
C#: Remove change note.
2024-12-03 11:45:34 +01:00
Michael Nebel
27d2f9e402
C#: Add change-note.
2024-12-03 10:14:22 +01:00
Tom Hvitved
fbeb6f3940
Shared: Move shared logic into FlowSummaryImpl.qll
2024-12-03 09:11:11 +01:00
Michael Nebel
86515b0140
C#: Remove change note.
2024-12-03 08:55:04 +01:00
Ed Minnix
a7a77a5f23
Added NavigationManager::BaseUri
2024-11-28 09:16:45 -05:00
Ed Minnix
5bcc694f6a
Fix typo
2024-11-28 09:06:18 -05:00
Ed Minnix
61a4b251c0
NavigationManager::Uri and URI-parsing utilities
2024-11-28 08:59:57 -05:00
Ed Minnix
a4b2ee1205
Fix generic
2024-11-26 22:42:13 -05:00
Ed Minnix
b820b324bd
Change note
2024-11-26 22:32:45 -05:00
Ed Minnix
216d298780
Microsoft.JSInterop models
2024-11-26 22:29:43 -05:00
Alexander Eyers-Taylor
c0474c4e45
Revert "Revert "Post-release preparation for codeql-cli-2.19.4""
2024-11-21 15:37:52 +00:00
Alexander Eyers-Taylor
4effe9e364
Revert "Post-release preparation for codeql-cli-2.19.4"
2024-11-21 14:43:15 +00:00