github-actions[bot]
66c51e979e
Release preparation for version 2.23.8
2025-12-08 14:38:23 +00:00
github-actions[bot]
085faa2bdb
Post-release preparation for codeql-cli-2.23.7
2025-12-02 16:39:43 +00:00
github-actions[bot]
a045b317ac
Release preparation for version 2.23.7
2025-12-02 15:31:27 +00:00
github-actions[bot]
19a13467e0
Release preparation for version 2.23.7
2025-12-01 16:07:37 +00:00
Óscar San José
1cc5b3444a
Fix date format in change note file
2025-12-01 15:39:37 +01:00
Simon Friis Vindum
86eb949673
Merge pull request #20902 from paldepind/rust/xss-query
...
Rust: Add new query for XSS vulnerabilities
2025-11-28 09:09:14 +01:00
Simon Friis Vindum
97dad2db17
Rust: Apply suggestions from docs review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-11-27 11:43:41 +01:00
Geoffrey White
e8cb6b8f54
Rust: Fix a couple of comments.
2025-11-27 09:24:34 +00:00
Tom Hvitved
f0cac321b2
Merge pull request #20236 from hvitved/rust/type-inference-async-dyn-future
...
Rust: Model `async` return types as `dyn Future`
2025-11-27 09:41:02 +01:00
Simon Friis Vindum
8b32679475
Merge pull request #20921 from paldepind/rust/barrier-tweaks
...
Rust: Tweaks and improvements to data flow barriers
2025-11-27 08:56:04 +01:00
Tom Hvitved
a9b58b8db3
Rust: Model async return types as dyn Future
2025-11-26 21:03:03 +01:00
Simon Friis Vindum
329df20e55
Rust: Fix typo
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-26 15:48:34 +01:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
Simon Friis Vindum
815af34c66
Rust: Add additional barriers to queries
2025-11-26 14:54:11 +01:00
Simon Friis Vindum
081ab499c2
Rust: Add barrier for fieldless enum types
2025-11-26 14:46:58 +01:00
Simon Friis Vindum
6050a0e1a8
Rust: Split boolean from number barriers
2025-11-26 14:45:31 +01:00
Simon Friis Vindum
1c8cc39a6a
Merge pull request #20906 from paldepind/rust/enum-fieldless
...
Rust: Add predicates for fieldless and unit-only enums
2025-11-26 12:52:28 +01:00
Simon Friis Vindum
7278bc75ca
Rust: Remove unused function in XSS tests
2025-11-26 08:57:47 +01:00
Simon Friis Vindum
7c7663629e
Rust: Fix typo in change note for XSS query
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-11-25 16:13:11 +01:00
Simon Friis Vindum
9ae4c14ffb
Rust: Address PR feedback
2025-11-25 14:20:17 +01:00
Simon Friis Vindum
4f13ae3fc9
Rust: Add qldoc
2025-11-25 13:35:14 +01:00
Simon Friis Vindum
393da4567e
Rust: Add tests for Enum
2025-11-25 13:35:12 +01:00
Simon Friis Vindum
50e8d0ca20
Rust: Add isFieldless and isUnitOnly to Enum
2025-11-25 13:35:11 +01:00
Simon Friis Vindum
b4ae58871a
Rust: Tweak existing isStruct predicates
2025-11-25 13:35:10 +01:00
Geoffrey White
1c2d8bb70e
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
...
Rust: Improve rust/access-invalid-pointer
2025-11-25 09:49:07 +00:00
Simon Friis Vindum
411d1fa861
Rust: Fix grammar and typos
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-25 09:31:00 +01:00
Simon Friis Vindum
ce25def71e
Rust: Update integration test expected files
2025-11-25 08:23:52 +01:00
Geoffrey White
daead038ab
Merge pull request #20829 from geoffw0/cert-checks
...
Rust: New Query rust/disabled-certificate-check
2025-11-24 15:21:58 +00:00
Simon Friis Vindum
597c81d659
Rust: Add change note for XSS query
2025-11-24 15:46:27 +01:00
Simon Friis Vindum
9c2858d69b
Rust: Add qhelp for XSS query
2025-11-24 15:46:26 +01:00
Simon Friis Vindum
9e2bf76a7f
Rust: Add XSS sinks for Actix and Warp
2025-11-24 15:46:25 +01:00
Simon Friis Vindum
ae9c753371
Rust: Add XSS query
2025-11-24 15:46:24 +01:00
Simon Friis Vindum
0f4561efc3
Rust: Add XSS examples
2025-11-24 15:46:23 +01:00
Tom Hvitved
43111b8eaa
Merge pull request #20716 from hvitved/rust/path-resolution-variable-impl
...
Rust: Path resolution before variable resolution
2025-11-24 13:08:53 +01:00
Tom Hvitved
ac644b257a
Merge pull request #20848 from hvitved/rust/ranked-forex-rename
...
Rust: Use `ToIndex` instead of `FromIndex` in ranked `forex` predicates
2025-11-24 13:05:58 +01:00
Tom Hvitved
17e1e1713e
Rust: Add placeholder declarations for &mut and *mut
2025-11-23 20:56:07 +01:00
Tom Hvitved
b16f8c20a9
Update rust/ql/lib/codeql/rust/internal/PathResolution.qll
...
Co-authored-by: Simon Friis Vindum <paldepind@github.com >
2025-11-23 19:05:24 +01:00
Geoffrey White
b62968fa0f
Rust: Spelling.
2025-11-22 09:22:33 +00:00
Geoffrey White
993154ed57
Rust: Avoid duplicating sinks.
2025-11-21 19:34:16 +00:00
Geoffrey White
0ea28b4026
Rust: Test .expected changes.
2025-11-21 18:57:06 +00:00
Geoffrey White
ff8032a4ec
Rust: Fix after merge.
2025-11-21 18:53:57 +00:00
Geoffrey White
eb674d08d6
Rust: Reinstate the original function names model but call it a heuristic now.
2025-11-21 18:46:12 +00:00
Geoffrey White
2ce4c47646
Rust: More sinks from the MRVA-1000.
2025-11-21 18:43:35 +00:00
Geoffrey White
80615056c0
Merge remote-tracking branch 'upstream/main' into cert-checks
2025-11-21 18:40:40 +00:00
Geoffrey White
988aca1f85
Rust: Correct QLDoc comment.
2025-11-21 18:13:08 +00:00
Geoffrey White
03fc4cb0aa
Merge remote-tracking branch 'upstream/main' into access-invalid-pointer-fp
2025-11-21 17:39:56 +00:00
Geoffrey White
9db1722060
Rust: Accept consistency check changes.
2025-11-21 17:35:34 +00:00
Geoffrey White
e01c871b70
Rust: Accept changes to the dataflow/sources/file test.
2025-11-21 17:12:23 +00:00
Geoffrey White
3ad014b2f9
Rust: Additional sinks found in MRVA-1000.
2025-11-21 16:33:59 +00:00
Geoffrey White
ace7a77fd6
Rust: Switch to MaD models.
2025-11-21 16:27:52 +00:00