Paolo Tranquilli
4973523404
C#: Fix CSRF query to check antiforgery attributes on base classes
...
Fixes https://github.com/github/codeql/discussions/21255
2026-02-04 09:42:20 +01:00
github-actions[bot]
73d06f26cb
Post-release preparation for codeql-cli-2.24.1
2026-02-02 14:04:26 +00:00
github-actions[bot]
0db542e9f0
Release preparation for version 2.24.1
2026-02-02 12:09:09 +00:00
Tom Hvitved
b11b091559
C#: Adapt to changes in FlowSummaryImpl
2026-01-26 12:39:38 +01:00
github-actions[bot]
48475e66af
Post-release preparation for codeql-cli-2.24.0
2026-01-19 15:49:08 +00:00
github-actions[bot]
4142b9c4ce
Release preparation for version 2.24.0
2026-01-19 14:49:14 +00:00
Ian Lynagh
dcd0a69759
Merge remote-tracking branch 'upstream/main' into igfoo/mb
2026-01-13 01:01:35 +00:00
github-actions[bot]
2cb932cf5d
Post-release preparation for codeql-cli-2.23.9
2026-01-06 15:42:16 +00:00
github-actions[bot]
c00663766e
Release preparation for version 2.23.9
2026-01-05 11:57:06 +00:00
Jon Janego
425d62cfd6
Update PathCombine metadata for clarity
2025-12-17 09:50:11 -06:00
Jon Janego
e36b602743
Enhance PathCombine.ql metadata details
2025-12-17 09:16:56 -06:00
Jon Janego
7423f6f99b
Fix typo in warning message for Path.Combine
2025-12-17 09:16:05 -06:00
Jon Janego
576f270753
Update PathCombine.ql
2025-12-16 16:39:06 -06:00
Jon Janego
30673a2fc8
Enhance PathCombine metadata with detailed description
...
Updated the `name` and `description` of PathCombine.ql to provide more details about the issue.
2025-12-16 10:37:53 -06:00
Jon Janego
84a501d360
Update csharp/ql/src/Bad Practices/PathCombine.ql
...
Co-authored-by: Tom Hvitved <hvitved@github.com >
2025-12-16 09:10:39 -06:00
Jon Janego
bd9b657e91
Update csharp/ql/src/Bad Practices/PathCombine.ql
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-15 15:20:52 -06:00
Jon Janego
f6e3e192ca
Clarify Path.Combine call behavior in documentation
...
Updated the name and description to clarify the issue with Path.Combine.
2025-12-15 15:18:34 -06:00
Óscar San José
d972af9ef8
Merge branch 'main' of https://github.com/github/codeql into oscarsj/mergeback-rc-3-20-into-main
2025-12-12 13:22:08 +01:00
Tom Hvitved
a060218109
Add change note
2025-12-11 13:43:52 +01:00
Anders Schack-Mulligen
139dc0acaf
Merge pull request #20922 from aschackmull/csharp/object-initializer
...
C#: Replace initializer splitting with an ObjectInitMethod.
2025-12-09 10:35:02 +01:00
github-actions[bot]
2854330759
Post-release preparation for codeql-cli-2.23.8
2025-12-08 15:49:10 +00:00
github-actions[bot]
66c51e979e
Release preparation for version 2.23.8
2025-12-08 14:38:23 +00:00
Chris Smowton
79718b6dcb
Change note
2025-12-08 11:54:02 +00:00
Chris Smowton
5bb31afc83
C# CSRF query: add support for ASP.NET Core
2025-12-08 11:51:01 +00:00
Óscar San José
bc6133de5c
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
2025-12-05 19:31:47 +01:00
Anders Schack-Mulligen
607ad1f886
Merge pull request #20961 from aschackmull/dataflow/flowfrom
...
Dataflow: Add flowFrom predicates to mirror flowTo.
2025-12-04 10:09:29 +01:00
Tom Hvitved
3ba256a72a
C#/Java: Go back to access path limit 2
2025-12-03 15:05:02 +01:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Anders Schack-Mulligen
dc6d3fe7ba
Use flowFrom.
2025-12-03 14:04:18 +01:00
github-actions[bot]
085faa2bdb
Post-release preparation for codeql-cli-2.23.7
2025-12-02 16:39:43 +00:00
github-actions[bot]
a045b317ac
Release preparation for version 2.23.7
2025-12-02 15:31:27 +00:00
Anders Schack-Mulligen
24a575a7a5
C#: Replace initializer splitting with ObjectInitMethod.
2025-12-02 13:49:14 +01:00
github-actions[bot]
19a13467e0
Release preparation for version 2.23.7
2025-12-01 16:07:37 +00:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
github-actions[bot]
5ee45af3aa
Post-release preparation for codeql-cli-2.23.6
2025-11-18 09:53:12 +00:00
Paolo Tranquilli
4c1f2b840e
C#: change capitalization
2025-11-18 10:06:19 +01:00
Paolo Tranquilli
1c81c4d4c9
C#: make some tweaks to change logs
2025-11-18 10:01:36 +01:00
github-actions[bot]
18fa6799ce
Release preparation for version 2.23.6
2025-11-17 16:38:07 +00:00
Paolo Tranquilli
12f1bd8ffd
C#: add missing * to change note
2025-11-17 15:00:30 +01:00
Anders Schack-Mulligen
4867306b5e
C#: Add change note.
2025-11-14 11:44:27 +01:00
Joe Farebrother
c9a559a6d8
Restrict Append calls to string arguments
2025-11-10 14:14:06 +00:00
Joe Farebrother
0a085dccbe
Fix qhelp
2025-11-10 14:13:46 +00:00
Joe Farebrother
d29fc9d2d0
Add changenote
2025-11-10 14:13:41 +00:00
Joe Farebrother
c734e74c76
Update qhelp
2025-11-10 14:13:31 +00:00
Joe Farebrother
cdd1edd53b
Remove experimental versions
2025-11-10 14:13:26 +00:00
Joe Farebrother
6ba7ece2f0
Add httponly tests for aspnet core + fixes
2025-11-10 14:13:19 +00:00
Joe Farebrother
bb010fee6b
Add tests for secure cookie using aspnetcore
2025-11-10 14:13:04 +00:00
Joe Farebrother
3cdfa8e0ac
Update comments and names
2025-11-10 14:12:57 +00:00
Joe Farebrother
a87a03cfa8
Move to main query pack
2025-11-10 14:12:48 +00:00
Joe Farebrother
71ad5a340f
Refactor httponly cookie query
2025-11-10 14:12:43 +00:00
