Commit Graph

9040 Commits

Author SHA1 Message Date
Joe Farebrother
ae0b997c31 Add system.web tests for httponly cookie 2025-11-10 14:13:14 +00:00
Joe Farebrother
a9b97f7065 Add tests for insecure cookie using system.web 2025-11-10 14:13:09 +00:00
Joe Farebrother
bb010fee6b Add tests for secure cookie using aspnetcore 2025-11-10 14:13:04 +00:00
Joe Farebrother
3cdfa8e0ac Update comments and names 2025-11-10 14:12:57 +00:00
Joe Farebrother
a87a03cfa8 Move to main query pack 2025-11-10 14:12:48 +00:00
Joe Farebrother
71ad5a340f Refactor httponly cookie query 2025-11-10 14:12:43 +00:00
Joe Farebrother
a1864edcb6 Presere behaviour for insecure cookie constructor 2025-11-10 14:12:36 +00:00
Joe Farebrother
d3ea6758c3 Simplify checks for assignments to false to creation case 2025-11-10 14:12:30 +00:00
Joe Farebrother
7bb65fef1b Refactor secure cookie query 2025-11-10 14:12:24 +00:00
Michael Nebel
c44b74740e C#: Minor code quality improvements. 2025-11-10 14:23:59 +01:00
Michael Nebel
0a16cf68de C#: Do not require that comments and type locations are in source in test. 2025-11-10 13:53:41 +01:00
Michael Nebel
43118ecccc C#: The extraction of the TypeMentions for return type and explicit interface return type for methods have changed order. 2025-11-10 13:26:07 +01:00
Michael Nebel
ded1328103 C#: Do not extract comments when scaffolding. 2025-11-10 13:26:05 +01:00
Michael Nebel
9d300e3ad3 C#: Address comments in the QL implementation. 2025-11-07 15:52:37 +01:00
Michael Nebel
1657dfb551 C#: Remove expression population safeguard and guard creation of constructor initializer expressions. 2025-11-07 15:26:07 +01:00
Michael Nebel
7c670cdc3f C#: Address review comments and make more early returns in Populate. 2025-11-07 14:50:20 +01:00
Michael Nebel
446a87713a C#: Report more timing metrics to the console logger. 2025-11-06 15:17:45 +01:00
Michael Nebel
5ec0494467 Merge pull request #20731 from michaelnebel/csharp/updatedependencies
C#: Update extractor package dependencies.
2025-11-05 11:58:48 +01:00
Michael B. Gale
046db0419f Merge pull request #20758 from github/post-release-prep/codeql-cli-2.23.4
Post-release preparation for codeql-cli-2.23.4
2025-11-05 10:45:51 +00:00
Anders Schack-Mulligen
02fd1dcccd Merge pull request #20738 from aschackmull/csharp/guards-misc
C#: Misc Guards-related cleanup.
2025-11-05 10:22:07 +01:00
github-actions[bot]
4014df9a6e Post-release preparation for codeql-cli-2.23.4 2025-11-04 17:57:52 +00:00
Anders Schack-Mulligen
7ab25b593d C#: Change note. 2025-11-04 15:43:49 +01:00
Michael Nebel
d95ebc77ae C#: Add using directives and type mentions as star entities. 2025-11-04 13:28:29 +01:00
Michael Nebel
504bb9c4a1 C#: Only scaffold assemblies in overlay mode, only extract expressions when not scaffolding and only extract attributes when they are in source code in overlay mode. 2025-11-04 13:28:28 +01:00
Michael Nebel
1d2f1545d6 C#: Add change-note. 2025-11-04 13:28:26 +01:00
Michael Nebel
04d33cbad7 C#: Add discarding for diagnostics and extractor messages. 2025-11-04 13:28:24 +01:00
Michael Nebel
8927b0a350 C#: Simplify the discarding and also discard type mentions and comments. 2025-11-04 13:28:21 +01:00
Michael Nebel
40035d2e82 C#: Add a locatable type to the dbscheme. 2025-11-04 13:28:19 +01:00
Michael Nebel
8a344215b9 C#: Add QL overlay tests. 2025-11-04 13:28:17 +01:00
Michael Nebel
121c1500ca C#: Define discarding predicates for expressions, statements, locations and some named TRAP entities. 2025-11-04 13:28:14 +01:00
Michael Nebel
76ac2dff26 C#: Write overlay metadata at end of extraction. 2025-11-04 13:28:12 +01:00
Michael Nebel
61f6512c74 C#: Sprinkle uses of OnlyScaffold to extract less when in overlay mode. 2025-11-04 13:28:10 +01:00
Michael Nebel
cab9d81376 C#: Add unit test. 2025-11-04 13:28:07 +01:00
Michael Nebel
aa805580e3 C#: Add functionality to detect overlay mode and integrate in extraction context. 2025-11-04 13:28:05 +01:00
Michael Nebel
9026a5a82a C#: Turn on overlay support in codeql-extractor.yml. 2025-11-04 13:28:03 +01:00
Michael Nebel
cfb68436f2 C#: Add upgrade- and downgrade scripts. 2025-11-04 13:28:00 +01:00
Michael Nebel
b48ce8dec2 C#: Add overlay builtins to the dbscheme. 2025-11-04 13:27:58 +01:00
Michael Nebel
bcc6234a60 C#: Fix bad join due to overlay compilation. 2025-11-04 13:27:56 +01:00
Michael Nebel
b600255835 C#: Enable overlay compilation in lib/qlpack.yml. 2025-11-04 13:27:53 +01:00
Michael B. Gale
e825a3acf7 C#: Minor changelog improvements 2025-11-03 15:03:46 +00:00
github-actions[bot]
64fcdd1f2f Release preparation for version 2.23.4 2025-11-03 14:52:23 +00:00
Michael Nebel
c1ede51fe8 C#: Add change note. 2025-11-03 12:52:27 +01:00
Anders Schack-Mulligen
bda6513fc1 Merge pull request #20737 from aschackmull/csharp/deprecate-abstractvalue
C#: Deprecate AbstractValue.
2025-10-31 15:20:24 +01:00
Anders Schack-Mulligen
fa20075a4d C#: Review fix and simplification. 2025-10-31 14:41:32 +01:00
Anders Schack-Mulligen
4f6528a9fb C#: Deprecate AbstractValue. 2025-10-31 14:23:23 +01:00
Anders Schack-Mulligen
eb93e8ed41 C#: Deprecate controlsBlock. 2025-10-31 14:22:11 +01:00
Anders Schack-Mulligen
4de564eb4e C#: Replace reference to controlsBlock and simplify. 2025-10-31 14:17:35 +01:00
Anders Schack-Mulligen
f6dfcf1ca4 C#: Delete splitting-aware controls implementation. 2025-10-31 14:17:35 +01:00
Anders Schack-Mulligen
ab2c2ef6ae C#: Update isUnreachableInCall in dataflow to use Guards library. 2025-10-31 14:17:34 +01:00
Anders Schack-Mulligen
e558c0219c Merge pull request #20734 from aschackmull/csharp/tweak-nullness
C#: Allow nullness sources with SSA at entry.
2025-10-31 14:14:43 +01:00