Jeroen Ketema
|
66fea698a2
|
C#: Add CWE-73 tag to cs/assembly-path-injection
Use of CWE-114 is discoraged, and CWE-73 seems appropriate as the assembly
path is user controlled here.
|
2026-07-09 17:10:13 +02:00 |
|
Nora Dimitrijević
|
f2085c2293
|
C#: mass enable diff-informed data flow
An auto-generated patch that enables diff-informed data flow in the obvious cases.
Builds on https://github.com/github/codeql/pull/18344 and https://github.com/github/codeql-patch/pull/88
|
2025-06-11 18:56:25 +02:00 |
|
Rasmus Wriedt Larsen
|
8c10155eb7
|
mass rename to ActiveThreatModelSource
|
2024-09-12 10:16:55 +02:00 |
|
Ed Minnix
|
ec6e17360d
|
Replace Main-method parameters with ThreatModelFlowSource
|
2024-03-07 12:30:08 -05:00 |
|
Ed Minnix
|
f388a0f10c
|
Deprecate direct uses of RemoteFlowSource and replace with ThreatModelFlowSource
|
2024-02-29 12:02:57 -05:00 |
|
Tom Hvitved
|
b72f34591d
|
C#: Use {get,has}FullyQualifiedName throughout
|
2023-11-10 08:46:15 +01:00 |
|
Michael Nebel
|
9a62f51694
|
C#: Re-factor AssemblyPathInjection to use the new API.
|
2023-04-13 14:54:25 +02:00 |
|
Michael Nebel
|
c24302bec2
|
C#: Replace all uses of the deprecated hasQualifiedName/1 predicate.
|
2022-12-06 11:59:12 +01:00 |
|
erik-krogh
|
887062d339
|
update cs/assembly-path-injection and cs/hardcoded-key to path-problems
|
2022-11-11 10:55:36 +01:00 |
|
erik-krogh
|
326666ac85
|
update the alert-messages of csharp queries
|
2022-09-26 14:01:39 +02:00 |
|
Calum Grant
|
771e686946
|
Update security-severity scores
|
2021-06-15 13:25:17 +01:00 |
|
Calum Grant
|
a594afb828
|
Add security-severity metadata
|
2021-06-10 20:11:08 +01:00 |
|
Anders Schack-Mulligen
|
8f2094f0bf
|
Autoformat.
|
2020-11-30 14:42:38 +01:00 |
|
Tom Hvitved
|
fddbce0b7b
|
C#: Move all predefined sources and sinks into security/dataflow/flow{sinks,sources}
|
2020-03-25 20:05:39 +01:00 |
|
Calum Grant
|
be68b6f938
|
C#: Add precision to queries
|
2020-01-21 13:24:48 +00:00 |
|
alistair
|
27d0b51c6b
|
CPP & C#: Review of qhelp
PR #2151 got merged without a review of the qhelp
by a technical writer.
The current PR makes changes I would have suggested on that PR.
|
2019-10-30 16:10:03 +00:00 |
|
Geoffrey White
|
47169e2ece
|
C#: Fix autoformat.
|
2019-10-22 09:56:49 +01:00 |
|
Geoffrey White
|
3b674de12c
|
C#: Disable precision tags for now.
|
2019-10-22 09:56:49 +01:00 |
|
Geoffrey White
|
49e7addaa4
|
C#: Autoformat.
|
2019-10-22 09:56:42 +01:00 |
|
Raul Garcia (MSFT)
|
cb8dcf7db2
|
Publishing queries to the OSS Semmle repository
|
2019-10-22 09:55:39 +01:00 |
|