Michael Nebel
51673312c5
C#: Upgrade libraries and queries to use the new Operation classes.
2026-03-24 15:32:08 +01:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
Joe Farebrother
cdd1edd53b
Remove experimental versions
2025-11-10 14:13:26 +00:00
Joe Farebrother
71ad5a340f
Refactor httponly cookie query
2025-11-10 14:12:43 +00:00
Joe Farebrother
a1864edcb6
Presere behaviour for insecure cookie constructor
2025-11-10 14:12:36 +00:00
Joe Farebrother
d3ea6758c3
Simplify checks for assignments to false to creation case
2025-11-10 14:12:30 +00:00
Joe Farebrother
7bb65fef1b
Refactor secure cookie query
2025-11-10 14:12:24 +00:00
Anders Schack-Mulligen
4f6528a9fb
C#: Deprecate AbstractValue.
2025-10-31 14:23:23 +01:00
Michael Nebel
7431ee8df9
C#: Update the barrier in HashWithoutSalt to avoid an FP. It worked by accident before as we didn't allow implicit element reads at sinks.
2025-08-18 12:56:13 +02:00
Michael Nebel
00de19ce13
C#: Deprecate experimental queries and libraries.
2025-01-21 13:14:24 +01:00
Anders Schack-Mulligen
dbb260dfd2
C#: Remove reference to the deleted api.
2024-12-03 20:08:44 +01:00
Rasmus Wriedt Larsen
8c10155eb7
mass rename to ActiveThreatModelSource
2024-09-12 10:16:55 +02:00
erik-krogh
0fdd06fff5
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Tom Hvitved
39019b3b62
C#: Simplify logic in JsonWebTokenHandlerLib.qll
2024-05-22 14:24:32 +02:00
Michael Nebel
5b48bc4a3e
C#: Delete the experimental IR queries.
2024-03-07 19:22:47 +01:00
Michael Nebel
73040bd30f
C#: Use fully qualified name with types instead of label in IR queries.
2024-03-07 09:40:34 +01:00
Ed Minnix
3563c7ef03
Modify deprecated RemoteSource classes to extend DataFlow::Node directly.
...
Since `ThreatModelFlowSource` contains `RemoteFlowSource` by default, we
can safely remove the `RemoteSource` from the default of the queries.
2024-02-29 12:03:16 -05:00
Ed Minnix
b4dabee770
Remove unnecessary flowsources.Remote imports
...
Since `FlowSources` now re-exports `Remote`, these can be safely removed.
2024-02-29 12:03:07 -05:00
Ed Minnix
f388a0f10c
Deprecate direct uses of RemoteFlowSource and replace with ThreatModelFlowSource
2024-02-29 12:02:57 -05:00
Anders Schack-Mulligen
b7d4a6926f
Dataflow: Add empty provenance column to PathGraph.
2024-02-09 11:27:30 +01:00
Mathias Vorreiter Pedersen
b68824a337
C#: Sync identical files.
2024-02-06 17:41:11 +00:00
erik-krogh
8be7eadace
delete outdated deprecations
2024-01-22 09:11:35 +01:00
Anders Schack-Mulligen
64eb4ff753
Merge pull request #14983 from aschackmull/dataflow/deprecate-old-api
...
Data Flow: Deprecate old data flow api.
2023-12-08 14:27:25 +01:00
Shati Patel
6284781a9b
Update inconsistent CWE tags
...
Most tags use the "external/cwe/cwe-xxx" format, except for these few queries. Updating them for consistency.
2023-12-04 11:52:31 +00:00
Tom Hvitved
46531e653d
C#: Deprecate OnAppendCookieTrackingConfig
2023-12-04 12:36:57 +01:00
Tom Hvitved
b72f34591d
C#: Use {get,has}FullyQualifiedName throughout
2023-11-10 08:46:15 +01:00
Alex Eyers-Taylor
c79ec8c37a
CPP: Improve performance of IR debugging
2023-10-05 17:35:52 +01:00
Alex Eyers-Taylor
24b679d5a0
CPP: Fix IR formatting.
2023-08-29 11:17:44 +01:00
Alex Eyers-Taylor
3b344c3578
CPP: Handle cases where the deallocator function is determined dynamically.
2023-08-29 11:17:44 +01:00
Jeroen Ketema
2a63116fc2
C++: Rename shouldPrintFunction to shouldPrintDeclaration
2023-07-19 16:55:43 +02:00
Chuan-kai Lin
ce464a7d69
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
erik-krogh
3dfe2b30b1
C#: delete override where the parent predicate no longer existed
2023-06-02 11:58:08 +02:00
erik-krogh
44b6366586
delete old deprecations
2023-06-02 11:58:08 +02:00
Mathias Vorreiter Pedersen
52eb7aee5e
Revert "Merge pull request #13207 from MathiasVP/use-equiv-class-in-getInstruction"
...
This reverts commit 5bc844c4c6b2fb2aa0d1
2023-05-31 11:26:09 -07:00
Robert Marsh
5bc844c4c6
Merge pull request #13207 from MathiasVP/use-equiv-class-in-getInstruction
...
C++: Reduce memory pressure from `getInstruction`
2023-05-26 13:13:57 -04:00
Mathias Vorreiter Pedersen
0519ceeeaa
C++/C#: Sync identical files.
2023-05-23 10:00:26 -07:00
Mathias Vorreiter Pedersen
9e05569121
C++/C#: Sync identical files.
2023-05-17 15:42:44 +01:00
Mathias Vorreiter Pedersen
771abf4f97
C++/C#: Sync identical files.
2023-05-17 13:47:01 +01:00
Kasper Svendsen
2f0c36a3b8
Merge pull request #13079 from kaspersv/kaspersv/csharp-explicit-this-receivers3
...
C#: Make implicit this receivers explicit
2023-05-10 11:07:58 +02:00
Kasper Svendsen
c3191e989b
Merge pull request #13078 from kaspersv/kaspersv/explicit-this-receivers-shared3
...
C#, C++: Make implicit this receivers explicit
2023-05-10 11:07:41 +02:00
Kasper Svendsen
3041fdebba
C#: Make implicit this receivers explicit
2023-05-09 15:34:59 +02:00
Kasper Svendsen
a129513b80
C#, C++: Make implicit this receivers explicit
2023-05-09 15:33:51 +02:00
Michael Nebel
b1659bee66
Merge pull request #12909 from michaelnebel/csharp/dataflowrefactor7
...
C#: Re-factor the experimental PotentialTimeBomb to use new API.
2023-05-09 11:44:44 +02:00
Michael Nebel
9e990e752f
C#: Refer to the Node class via DataFlow instead of DataFlow2.
2023-05-08 15:07:24 +02:00
Michael Nebel
e2529b8f93
C#: Re-factor the PotentialTimeBomb query to use the new API.
2023-05-08 12:48:00 +02:00
Robert Marsh
e44073718f
C#: Add hasUnreachedInstruction to raw IR
2023-05-01 22:25:18 -04:00
Robert Marsh
7f12f6dc3e
C++/C#: format and sync identical files
2023-05-01 22:25:18 -04:00
Mathias Vorreiter Pedersen
d14ee931e1
C++: IR translation for non-runtime-initialized static local variables.
2023-04-25 17:51:04 +01:00
Michael Nebel
e94b492404
C#: Delete inaccessible/dead data flow configuration in JsonWebTokenHandlerLib.
2023-04-19 13:36:30 +02:00
Michael Nebel
f976eeb909
C#: Re-factor on AppendCookieTracking to use the new API.
2023-04-19 13:36:30 +02:00
