Tom Hvitved
8b89e15dfa
Merge pull request #20863 from hvitved/rust/call-refactor
...
Rust: Restructure classes representing calls
2025-12-04 17:02:17 +01:00
Tom Hvitved
bc6d38ebb4
Address review comments
2025-12-04 10:38:47 +01:00
Anders Schack-Mulligen
607ad1f886
Merge pull request #20961 from aschackmull/dataflow/flowfrom
...
Dataflow: Add flowFrom predicates to mirror flowTo.
2025-12-04 10:09:29 +01:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Tom Hvitved
7378fbc567
Rust: Restructure classes representing calls
2025-12-02 10:08:04 +01:00
Geoffrey White
c64f19f6eb
Rust: Change note.
2025-12-01 12:39:19 +00:00
Geoffrey White
faf69b821b
Rust: Add sinks as barriers to prevent duplicate results.
2025-12-01 12:39:13 +00:00
Simon Friis Vindum
86eb949673
Merge pull request #20902 from paldepind/rust/xss-query
...
Rust: Add new query for XSS vulnerabilities
2025-11-28 09:09:14 +01:00
Simon Friis Vindum
97dad2db17
Rust: Apply suggestions from docs review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-11-27 11:43:41 +01:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
Simon Friis Vindum
7c7663629e
Rust: Fix typo in change note for XSS query
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-11-25 16:13:11 +01:00
Simon Friis Vindum
9ae4c14ffb
Rust: Address PR feedback
2025-11-25 14:20:17 +01:00
Geoffrey White
1c2d8bb70e
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
...
Rust: Improve rust/access-invalid-pointer
2025-11-25 09:49:07 +00:00
Simon Friis Vindum
411d1fa861
Rust: Fix grammar and typos
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-25 09:31:00 +01:00
Simon Friis Vindum
597c81d659
Rust: Add change note for XSS query
2025-11-24 15:46:27 +01:00
Simon Friis Vindum
9c2858d69b
Rust: Add qhelp for XSS query
2025-11-24 15:46:26 +01:00
Simon Friis Vindum
ae9c753371
Rust: Add XSS query
2025-11-24 15:46:24 +01:00
Geoffrey White
ff8032a4ec
Rust: Fix after merge.
2025-11-21 18:53:57 +00:00
Geoffrey White
80615056c0
Merge remote-tracking branch 'upstream/main' into cert-checks
2025-11-21 18:40:40 +00:00
Geoffrey White
03fc4cb0aa
Merge remote-tracking branch 'upstream/main' into access-invalid-pointer-fp
2025-11-21 17:39:56 +00:00
Geoffrey White
785754ec65
Rust: Switch the query to taint flow, since some taint summaries are relevant now.
2025-11-21 15:02:29 +00:00
Geoffrey White
8145264b77
Rust: Add threat model sources as additional sources for the query.
2025-11-21 14:40:11 +00:00
Tom Hvitved
489fff9572
Rust: Base DataFlow::Node on AST instead of CFG
2025-11-19 19:37:39 +01:00
Paolo Tranquilli
48ee9dd149
Merge branch 'main' into post-release-prep/codeql-cli-2.23.6
2025-11-18 12:18:09 +01:00
github-actions[bot]
5ee45af3aa
Post-release preparation for codeql-cli-2.23.6
2025-11-18 09:53:12 +00:00
Geoffrey White
9ab7f87603
Merge pull request #20776 from geoffw0/rustexamples
...
Rust: Add example queries
2025-11-18 09:34:48 +00:00
github-actions[bot]
18fa6799ce
Release preparation for version 2.23.6
2025-11-17 16:38:07 +00:00
Geoffrey White
7c8e44db8e
Rust: Change note.
2025-11-17 15:09:57 +00:00
Geoffrey White
725899389b
Rust: Clean up the query slightly.
2025-11-17 15:08:53 +00:00
Tom Hvitved
8455663255
Rust: Speedup AccessAfterLifetime.ql
2025-11-15 15:21:03 +01:00
Geoffrey White
15fa99a288
Rust: Clarify some confusing text in the .qhelp.
2025-11-13 09:00:46 +00:00
Geoffrey White
42aca4a171
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-11-13 08:51:41 +00:00
Geoffrey White
0675a29ae6
Rust: Minor corrections.
2025-11-12 19:26:45 +00:00
Tom Hvitved
467bd541d2
Merge pull request #20770 from hvitved/rust/attribute-macro-expansion-filter
...
Rust: Remove elements superseded by attribute macro expansions
2025-11-12 19:52:09 +01:00
Geoffrey White
7a62642ed7
Rust: Change note.
2025-11-12 18:17:12 +00:00
Geoffrey White
49063ac8a9
Rust: Cut down the example for readability.
2025-11-12 18:13:02 +00:00
Geoffrey White
dcae0ef975
Rust: I prefer the original certificates reference from the Go .qhelp.
2025-11-12 18:10:44 +00:00
Geoffrey White
87d66c69a3
Rust: Clean up the .qhelp a little.
2025-11-12 18:10:02 +00:00
Geoffrey White
bb78fdf150
Rust: Add qhelp and examples (translated from Go, by Copilot).
2025-11-12 16:50:50 +00:00
Geoffrey White
c77eef39e2
Rust: Convert the query to a path-problem with global data flow.
2025-11-12 16:21:46 +00:00
Geoffrey White
209f394b5e
Rust: Fix the alert message.
2025-11-12 15:51:03 +00:00
Geoffrey White
f6b7aeaaca
Rust: Add prototype query.
2025-11-11 16:01:10 +00:00
Tom Hvitved
c81f5f5190
Rust: Remove elements superseded by attribute macro expansions
2025-11-10 09:18:58 +01:00
Geoffrey White
61481b51e7
Rust: Change note.
2025-11-07 16:55:35 +00:00
Geoffrey White
1e7acc5e1a
Merge branch 'main' into copilot/add-secure-cookie-test-cases
2025-11-05 17:53:02 +00:00
Michael B. Gale
046db0419f
Merge pull request #20758 from github/post-release-prep/codeql-cli-2.23.4
...
Post-release preparation for codeql-cli-2.23.4
2025-11-05 10:45:51 +00:00
Geoffrey White
ff06181e4b
Rust: We actually want barriers on set_secure(false) as well as set_secure(true), to prevent excessive flow paths.
2025-11-04 19:30:35 +00:00
github-actions[bot]
4014df9a6e
Post-release preparation for codeql-cli-2.23.4
2025-11-04 17:57:52 +00:00
Geoffrey White
077bcf6b92
Merge pull request #20740 from geoffw0/rustbarriers
...
Rust: Add numeric type barriers for three queries
2025-11-04 10:08:46 +00:00
github-actions[bot]
64fcdd1f2f
Release preparation for version 2.23.4
2025-11-03 14:52:23 +00:00
