Óscar San José
d972af9ef8
Merge branch 'main' of https://github.com/github/codeql into oscarsj/mergeback-rc-3-20-into-main
2025-12-12 13:22:08 +01:00
Tom Hvitved
a060218109
Add change note
2025-12-11 13:43:52 +01:00
Anders Schack-Mulligen
139dc0acaf
Merge pull request #20922 from aschackmull/csharp/object-initializer
...
C#: Replace initializer splitting with an ObjectInitMethod.
2025-12-09 10:35:02 +01:00
github-actions[bot]
2854330759
Post-release preparation for codeql-cli-2.23.8
2025-12-08 15:49:10 +00:00
github-actions[bot]
66c51e979e
Release preparation for version 2.23.8
2025-12-08 14:38:23 +00:00
Chris Smowton
79718b6dcb
Change note
2025-12-08 11:54:02 +00:00
Chris Smowton
5bb31afc83
C# CSRF query: add support for ASP.NET Core
2025-12-08 11:51:01 +00:00
Óscar San José
bc6133de5c
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
2025-12-05 19:31:47 +01:00
Anders Schack-Mulligen
607ad1f886
Merge pull request #20961 from aschackmull/dataflow/flowfrom
...
Dataflow: Add flowFrom predicates to mirror flowTo.
2025-12-04 10:09:29 +01:00
Tom Hvitved
3ba256a72a
C#/Java: Go back to access path limit 2
2025-12-03 15:05:02 +01:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Anders Schack-Mulligen
dc6d3fe7ba
Use flowFrom.
2025-12-03 14:04:18 +01:00
github-actions[bot]
085faa2bdb
Post-release preparation for codeql-cli-2.23.7
2025-12-02 16:39:43 +00:00
github-actions[bot]
a045b317ac
Release preparation for version 2.23.7
2025-12-02 15:31:27 +00:00
Anders Schack-Mulligen
24a575a7a5
C#: Replace initializer splitting with ObjectInitMethod.
2025-12-02 13:49:14 +01:00
github-actions[bot]
19a13467e0
Release preparation for version 2.23.7
2025-12-01 16:07:37 +00:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
github-actions[bot]
5ee45af3aa
Post-release preparation for codeql-cli-2.23.6
2025-11-18 09:53:12 +00:00
Paolo Tranquilli
4c1f2b840e
C#: change capitalization
2025-11-18 10:06:19 +01:00
Paolo Tranquilli
1c81c4d4c9
C#: make some tweaks to change logs
2025-11-18 10:01:36 +01:00
github-actions[bot]
18fa6799ce
Release preparation for version 2.23.6
2025-11-17 16:38:07 +00:00
Paolo Tranquilli
12f1bd8ffd
C#: add missing * to change note
2025-11-17 15:00:30 +01:00
Anders Schack-Mulligen
4867306b5e
C#: Add change note.
2025-11-14 11:44:27 +01:00
Joe Farebrother
c9a559a6d8
Restrict Append calls to string arguments
2025-11-10 14:14:06 +00:00
Joe Farebrother
0a085dccbe
Fix qhelp
2025-11-10 14:13:46 +00:00
Joe Farebrother
d29fc9d2d0
Add changenote
2025-11-10 14:13:41 +00:00
Joe Farebrother
c734e74c76
Update qhelp
2025-11-10 14:13:31 +00:00
Joe Farebrother
cdd1edd53b
Remove experimental versions
2025-11-10 14:13:26 +00:00
Joe Farebrother
6ba7ece2f0
Add httponly tests for aspnet core + fixes
2025-11-10 14:13:19 +00:00
Joe Farebrother
bb010fee6b
Add tests for secure cookie using aspnetcore
2025-11-10 14:13:04 +00:00
Joe Farebrother
3cdfa8e0ac
Update comments and names
2025-11-10 14:12:57 +00:00
Joe Farebrother
a87a03cfa8
Move to main query pack
2025-11-10 14:12:48 +00:00
Joe Farebrother
71ad5a340f
Refactor httponly cookie query
2025-11-10 14:12:43 +00:00
Joe Farebrother
a1864edcb6
Presere behaviour for insecure cookie constructor
2025-11-10 14:12:36 +00:00
Joe Farebrother
d3ea6758c3
Simplify checks for assignments to false to creation case
2025-11-10 14:12:30 +00:00
Joe Farebrother
7bb65fef1b
Refactor secure cookie query
2025-11-10 14:12:24 +00:00
github-actions[bot]
4014df9a6e
Post-release preparation for codeql-cli-2.23.4
2025-11-04 17:57:52 +00:00
Michael B. Gale
e825a3acf7
C#: Minor changelog improvements
2025-11-03 15:03:46 +00:00
github-actions[bot]
64fcdd1f2f
Release preparation for version 2.23.4
2025-11-03 14:52:23 +00:00
Anders Schack-Mulligen
4f6528a9fb
C#: Deprecate AbstractValue.
2025-10-31 14:23:23 +01:00
Nora Dimitrijević
ba22f0d7d2
C#/DontInstallRootCert
2025-10-28 09:39:21 +01:00
Paolo Tranquilli
105f810654
Merge pull request #20658 from github/redsun82/csharp-fix-xframe-options-in-location
...
Csharp: fix `cs/web/missing-x-frame-options` to also consider `location` elements
2025-10-27 13:49:09 +01:00
Paolo Tranquilli
3f98d32124
C#: Update change note for location handling in query
2025-10-27 09:51:10 +01:00
Anders Schack-Mulligen
8a3f62b9b6
Merge pull request #20558 from aschackmull/csharp/guards3
...
C#: Instantiate shared Guards and shared ControlFlowReachability and replace nullness
2025-10-23 08:43:14 +02:00
Anders Schack-Mulligen
7d0e4f58f3
C#: Fix join-order issue in ConstantCondition.
2025-10-22 15:52:51 +02:00
Paolo Tranquilli
316225bb88
Csharp: rename predicate
2025-10-21 11:47:54 +02:00
Paolo Tranquilli
6f8b1f6f4c
Csharp: address review
2025-10-21 11:43:58 +02:00
Paolo Tranquilli
0c719af33c
Csharp: add change note
2025-10-17 12:05:52 +02:00
Paolo Tranquilli
c3fd06c8a4
Csharp: fix cs/web/missing-x-frame-options to also consider location elements
...
As explained in
https://learn.microsoft.com/en-us/previous-versions/aspnet/ms178692(v=vs.100) ,
it is possible to add `system.webServer` elements nested inside
`location` elements in `Web.config`.
2025-10-17 11:27:31 +02:00
github-actions[bot]
6dd07790ac
Post-release preparation for codeql-cli-2.23.3
2025-10-14 11:16:33 +00:00
