Jeroen Ketema
161c8c4d30
Merge pull request #22149 from jketema/jketema/cwe-114-tag
...
C++/C#: Specify additional CWE tags for queries that specify CWE 114
2026-07-09 18:02:21 +02:00
Jeroen Ketema
66fea698a2
C#: Add CWE-73 tag to cs/assembly-path-injection
...
Use of CWE-114 is discoraged, and CWE-73 seems appropriate as the assembly
path is user controlled here.
2026-07-09 17:10:13 +02:00
Owen Mansel-Chan
f67b7299f9
Update query example (synced file)
2026-07-07 14:09:50 +01:00
Owen Mansel-Chan
366d70bfee
Convert qlref tests to inline expectations
2026-07-07 14:09:48 +01:00
Owen Mansel-Chan
a5ef036465
Note that common standard library types can be vulnerable to gadget-chain attacks
2026-05-08 14:18:54 +01:00
Owen Mansel-Chan
4e47f7706d
C#: Clarify that deserialization following a schema is safe
2026-05-08 14:06:07 +01:00
Anders Schack-Mulligen
f912731cd4
Merge pull request #21565 from aschackmull/csharp/cfg2
...
C#: Replace CFG with the shared implementation
2026-04-21 15:50:38 +02:00
Anders Schack-Mulligen
d3e580fd0e
C#: Introduce Expr.getIntValue.
2026-04-13 14:52:38 +02:00
Anders Schack-Mulligen
03f6bdbdd2
C#: Update some references in preparation for CFG swap.
2026-04-10 15:47:11 +02:00
Anders Schack-Mulligen
61976e3ef0
C#: Rename ControlFlow::Node to ControlFlowNode.
2026-04-10 15:47:10 +02:00
Michael Nebel
9c095bc580
C#: Deprecate get[L|R]Value predicates.
2026-04-01 12:50:37 +02:00
Michael Nebel
51673312c5
C#: Upgrade libraries and queries to use the new Operation classes.
2026-03-24 15:32:08 +01:00
Owen Mansel-Chan
056aa342fe
Change @security-severity for log injection queries from 7.8 to 6.1
2026-03-13 10:02:01 +00:00
Owen Mansel-Chan
f58a6e5d3a
Change @security-severity for XSS queries from 6.1 to 7.8
2026-03-13 10:01:02 +00:00
Paolo Tranquilli
4973523404
C#: Fix CSRF query to check antiforgery attributes on base classes
...
Fixes https://github.com/github/codeql/discussions/21255
2026-02-04 09:42:20 +01:00
Chris Smowton
5bb31afc83
C# CSRF query: add support for ASP.NET Core
2025-12-08 11:51:01 +00:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Anders Schack-Mulligen
dc6d3fe7ba
Use flowFrom.
2025-12-03 14:04:18 +01:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
Joe Farebrother
c9a559a6d8
Restrict Append calls to string arguments
2025-11-10 14:14:06 +00:00
Joe Farebrother
0a085dccbe
Fix qhelp
2025-11-10 14:13:46 +00:00
Joe Farebrother
c734e74c76
Update qhelp
2025-11-10 14:13:31 +00:00
Joe Farebrother
6ba7ece2f0
Add httponly tests for aspnet core + fixes
2025-11-10 14:13:19 +00:00
Joe Farebrother
bb010fee6b
Add tests for secure cookie using aspnetcore
2025-11-10 14:13:04 +00:00
Joe Farebrother
3cdfa8e0ac
Update comments and names
2025-11-10 14:12:57 +00:00
Joe Farebrother
a87a03cfa8
Move to main query pack
2025-11-10 14:12:48 +00:00
Nora Dimitrijević
ba22f0d7d2
C#/DontInstallRootCert
2025-10-28 09:39:21 +01:00
Paolo Tranquilli
316225bb88
Csharp: rename predicate
2025-10-21 11:47:54 +02:00
Paolo Tranquilli
6f8b1f6f4c
Csharp: address review
2025-10-21 11:43:58 +02:00
Paolo Tranquilli
c3fd06c8a4
Csharp: fix cs/web/missing-x-frame-options to also consider location elements
...
As explained in
https://learn.microsoft.com/en-us/previous-versions/aspnet/ms178692(v=vs.100) ,
it is possible to add `system.webServer` elements nested inside
`location` elements in `Web.config`.
2025-10-17 11:27:31 +02:00
Anders Schack-Mulligen
8b50ac291f
C#: Use shared SuccessorType.
2025-09-01 12:53:24 +02:00
Napalys Klicius
3369e16b1b
Merge pull request #20254 from Napalys/cs/ldap-injection-qhelp
...
CS: Update `cs/ldap-injection` qhelp
2025-08-21 08:57:03 +02:00
Napalys Klicius
71a8e10f3d
CS: added extra guidance in recommendation section for LDAPInjection
2025-08-20 13:37:02 +02:00
Napalys Klicius
c475bedf73
CS: removed dead links from LDAPInjection qhelp
2025-08-20 12:58:54 +02:00
Nora Dimitrijević
218fcbbec5
[DIFF-INFORMED] C#: HardcodedConnectionString
2025-07-21 11:28:55 +02:00
Nora Dimitrijević
634bfa914f
C#: mass-add none() location overrides
2025-06-17 17:00:48 +02:00
Nora Dimitrijević
79e982af38
Merge pull request #19661 from d10c/d10c/csharp/diff-informed
...
C#: mass enable diff-informed data flow
2025-06-17 14:52:24 +02:00
Nora Dimitrijević
f2085c2293
C#: mass enable diff-informed data flow
...
An auto-generated patch that enables diff-informed data flow in the obvious cases.
Builds on https://github.com/github/codeql/pull/18344 and https://github.com/github/codeql-patch/pull/88
2025-06-11 18:56:25 +02:00
Chad Bentz
77e49f1f90
Merge branch 'main' into cwe-134
2025-06-06 11:16:10 -04:00
Chad Bentz
8a81aa1762
Set CWE-134 from 9.3 to 7.3 CVSS score for memory safe languages
...
- Sync up to score given to javascript/ruby
2025-05-19 14:43:08 -04:00
Michael Nebel
03ecd24469
Lower the precision of a range of harcoded password queries to remove them from query suites.
2025-05-19 09:26:45 +02:00
Michael Nebel
133e8d4897
C#: Include CompositeFormat.Parse as Format like method.
2025-05-12 15:44:59 +02:00
Owen Mansel-Chan
cf614a596d
Fix cwe tags to include leading zero
2025-04-30 16:43:03 +01:00
Michael Nebel
062a2ad97d
C#: Include exception property accesses in the exception information exposure query.
2024-10-23 13:08:08 +02:00
Rasmus Wriedt Larsen
8c10155eb7
mass rename to ActiveThreatModelSource
2024-09-12 10:16:55 +02:00
Chanel Young
716e2737d1
formatting
2024-06-05 09:01:10 -07:00
Chanel Young
5ee7004a62
fp case if encrypt set in initializer
2024-05-16 17:59:17 -07:00
Tom Hvitved
d8d7688f88
C#: Fix another bad join
2024-04-23 15:39:59 +02:00
Tom Hvitved
6aa4c5c187
C#: Fix a bad join
2024-04-23 11:47:55 +02:00
Joe Farebrother
3567c30020
Set precision to high
2024-04-16 09:41:46 +01:00
