Joe Farebrother
74c424dc4c
Fixes, add secure query
2025-11-25 14:33:33 +00:00
Joe Farebrother
7d76619bea
Implement cookie write concepts and httponly query
2025-11-25 14:33:23 +00:00
Mathias Vorreiter Pedersen
26e5320a80
Merge pull request #20901 from MathiasVP/canonical-content
...
C++: Don't use `Field`s to define `FieldContent`
2025-11-25 13:54:19 +00:00
Simon Friis Vindum
9ae4c14ffb
Rust: Address PR feedback
2025-11-25 14:20:17 +01:00
Jeroen Ketema
861ca7526e
Merge branch 'main' into canonical-content
2025-11-25 14:08:42 +01:00
Mathias Vorreiter Pedersen
2024f32e81
C++: Add an example with missing flow.
2025-11-25 12:36:29 +00:00
Simon Friis Vindum
4f13ae3fc9
Rust: Add qldoc
2025-11-25 13:35:14 +01:00
Simon Friis Vindum
393da4567e
Rust: Add tests for Enum
2025-11-25 13:35:12 +01:00
Simon Friis Vindum
50e8d0ca20
Rust: Add isFieldless and isUnitOnly to Enum
2025-11-25 13:35:11 +01:00
Simon Friis Vindum
b4ae58871a
Rust: Tweak existing isStruct predicates
2025-11-25 13:35:10 +01:00
Mathias Vorreiter Pedersen
47ab307410
C++: Respond to review comments.
2025-11-25 12:06:58 +00:00
Alexander Köplinger
458f8570e8
Fix KeyError: 'name' in python/extractor/imp.py on Python 3.14
...
Follow-up to https://github.com/github/codeql/pull/20630
The fix didn't fully work since when we raise the ImportError in `find_module` we don't pass a named argument into the format string which causes a `KeyError`.
We need to use a format string without named arguments, like Python 3.13 and earlier did.
2025-11-25 12:38:55 +01:00
Geoffrey White
1c2d8bb70e
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
...
Rust: Improve rust/access-invalid-pointer
2025-11-25 09:49:07 +00:00
Simon Friis Vindum
411d1fa861
Rust: Fix grammar and typos
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-25 09:31:00 +01:00
Simon Friis Vindum
ce25def71e
Rust: Update integration test expected files
2025-11-25 08:23:52 +01:00
Geoffrey White
daead038ab
Merge pull request #20829 from geoffw0/cert-checks
...
Rust: New Query rust/disabled-certificate-check
2025-11-24 15:21:58 +00:00
Mathias Vorreiter Pedersen
eb6b08591d
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 15:01:09 +00:00
Mathias Vorreiter Pedersen
2e53370716
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 15:01:00 +00:00
Simon Friis Vindum
597c81d659
Rust: Add change note for XSS query
2025-11-24 15:46:27 +01:00
Simon Friis Vindum
9c2858d69b
Rust: Add qhelp for XSS query
2025-11-24 15:46:26 +01:00
Simon Friis Vindum
9e2bf76a7f
Rust: Add XSS sinks for Actix and Warp
2025-11-24 15:46:25 +01:00
Simon Friis Vindum
ae9c753371
Rust: Add XSS query
2025-11-24 15:46:24 +01:00
Simon Friis Vindum
0f4561efc3
Rust: Add XSS examples
2025-11-24 15:46:23 +01:00
Ian Lynagh
555301cec7
Merge pull request #20874 from igfoo/igfoo/overlay
...
C++: Add the beginnings of overlay support
2025-11-24 14:11:09 +00:00
Owen Mansel-Chan
1a59839f3c
Range library recognises long literals now
2025-11-24 14:10:54 +00:00
Owen Mansel-Chan
e37336d550
No need for getUnderlyingExpr to look through casts
2025-11-24 14:10:20 +00:00
Mathias Vorreiter Pedersen
0487e0622a
C++: Accept test changes from tests that use getAQlClass.
2025-11-24 14:04:35 +00:00
Mathias Vorreiter Pedersen
6bae58e29c
C++: Accept more test changes.
2025-11-24 12:35:19 +00:00
Mathias Vorreiter Pedersen
ecb80cb4fc
C++: Represent field content using a column that is shared by all template instantiations.
2025-11-24 12:29:49 +00:00
Mathias Vorreiter Pedersen
fd566780a6
Update cpp/ql/lib/semmle/code/cpp/dataflow/ExternalFlow.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 12:17:06 +00:00
Tom Hvitved
43111b8eaa
Merge pull request #20716 from hvitved/rust/path-resolution-variable-impl
...
Rust: Path resolution before variable resolution
2025-11-24 13:08:53 +01:00
Mathias Vorreiter Pedersen
98879d0f1a
C++: Accept test changes.
2025-11-24 12:06:38 +00:00
Mathias Vorreiter Pedersen
732e55df11
C++: Ignore template non-type parameters in MaD signature matching.
2025-11-24 12:06:24 +00:00
Tom Hvitved
ac644b257a
Merge pull request #20848 from hvitved/rust/ranked-forex-rename
...
Rust: Use `ToIndex` instead of `FromIndex` in ranked `forex` predicates
2025-11-24 13:05:58 +01:00
Tom Hvitved
c7a0411c55
Merge pull request #20892 from hvitved/rust/builtin-mut-placeholders
...
Rust: Add placeholder declarations for `&mut` and `*mut`
2025-11-24 13:05:15 +01:00
Mathias Vorreiter Pedersen
c9e9322143
C++: Add an example of missing MaD supporrt for non-type template parameters.
2025-11-24 12:02:54 +00:00
Eliav2
192f254b41
Merge branch 'main' into 20823-globalVarRef-document-defaultView
2025-11-23 22:03:30 +02:00
Tom Hvitved
17e1e1713e
Rust: Add placeholder declarations for &mut and *mut
2025-11-23 20:56:07 +01:00
Tom Hvitved
b16f8c20a9
Update rust/ql/lib/codeql/rust/internal/PathResolution.qll
...
Co-authored-by: Simon Friis Vindum <paldepind@github.com >
2025-11-23 19:05:24 +01:00
Geoffrey White
b62968fa0f
Rust: Spelling.
2025-11-22 09:22:33 +00:00
Geoffrey White
993154ed57
Rust: Avoid duplicating sinks.
2025-11-21 19:34:16 +00:00
Geoffrey White
0ea28b4026
Rust: Test .expected changes.
2025-11-21 18:57:06 +00:00
Geoffrey White
ff8032a4ec
Rust: Fix after merge.
2025-11-21 18:53:57 +00:00
Geoffrey White
eb674d08d6
Rust: Reinstate the original function names model but call it a heuristic now.
2025-11-21 18:46:12 +00:00
Geoffrey White
2ce4c47646
Rust: More sinks from the MRVA-1000.
2025-11-21 18:43:35 +00:00
Geoffrey White
80615056c0
Merge remote-tracking branch 'upstream/main' into cert-checks
2025-11-21 18:40:40 +00:00
Geoffrey White
988aca1f85
Rust: Correct QLDoc comment.
2025-11-21 18:13:08 +00:00
Geoffrey White
03fc4cb0aa
Merge remote-tracking branch 'upstream/main' into access-invalid-pointer-fp
2025-11-21 17:39:56 +00:00
Geoffrey White
9db1722060
Rust: Accept consistency check changes.
2025-11-21 17:35:34 +00:00
Geoffrey White
e01c871b70
Rust: Accept changes to the dataflow/sources/file test.
2025-11-21 17:12:23 +00:00
