Jon Janego
425d62cfd6
Update PathCombine metadata for clarity
2025-12-17 09:50:11 -06:00
Jon Janego
e36b602743
Enhance PathCombine.ql metadata details
2025-12-17 09:16:56 -06:00
Jon Janego
7423f6f99b
Fix typo in warning message for Path.Combine
2025-12-17 09:16:05 -06:00
Jon Janego
576f270753
Update PathCombine.ql
2025-12-16 16:39:06 -06:00
Jon Janego
30673a2fc8
Enhance PathCombine metadata with detailed description
...
Updated the `name` and `description` of PathCombine.ql to provide more details about the issue.
2025-12-16 10:37:53 -06:00
Jon Janego
84a501d360
Update csharp/ql/src/Bad Practices/PathCombine.ql
...
Co-authored-by: Tom Hvitved <hvitved@github.com >
2025-12-16 09:10:39 -06:00
Jon Janego
bd9b657e91
Update csharp/ql/src/Bad Practices/PathCombine.ql
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-15 15:20:52 -06:00
Jon Janego
f6e3e192ca
Clarify Path.Combine call behavior in documentation
...
Updated the name and description to clarify the issue with Path.Combine.
2025-12-15 15:18:34 -06:00
Óscar San José
d972af9ef8
Merge branch 'main' of https://github.com/github/codeql into oscarsj/mergeback-rc-3-20-into-main
2025-12-12 13:22:08 +01:00
Tom Hvitved
a060218109
Add change note
2025-12-11 13:43:52 +01:00
Anders Schack-Mulligen
139dc0acaf
Merge pull request #20922 from aschackmull/csharp/object-initializer
...
C#: Replace initializer splitting with an ObjectInitMethod.
2025-12-09 10:35:02 +01:00
github-actions[bot]
2854330759
Post-release preparation for codeql-cli-2.23.8
2025-12-08 15:49:10 +00:00
github-actions[bot]
66c51e979e
Release preparation for version 2.23.8
2025-12-08 14:38:23 +00:00
Chris Smowton
79718b6dcb
Change note
2025-12-08 11:54:02 +00:00
Chris Smowton
5bb31afc83
C# CSRF query: add support for ASP.NET Core
2025-12-08 11:51:01 +00:00
Óscar San José
bc6133de5c
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
2025-12-05 19:31:47 +01:00
Anders Schack-Mulligen
607ad1f886
Merge pull request #20961 from aschackmull/dataflow/flowfrom
...
Dataflow: Add flowFrom predicates to mirror flowTo.
2025-12-04 10:09:29 +01:00
Tom Hvitved
3ba256a72a
C#/Java: Go back to access path limit 2
2025-12-03 15:05:02 +01:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Anders Schack-Mulligen
dc6d3fe7ba
Use flowFrom.
2025-12-03 14:04:18 +01:00
github-actions[bot]
085faa2bdb
Post-release preparation for codeql-cli-2.23.7
2025-12-02 16:39:43 +00:00
github-actions[bot]
a045b317ac
Release preparation for version 2.23.7
2025-12-02 15:31:27 +00:00
Anders Schack-Mulligen
24a575a7a5
C#: Replace initializer splitting with ObjectInitMethod.
2025-12-02 13:49:14 +01:00
github-actions[bot]
19a13467e0
Release preparation for version 2.23.7
2025-12-01 16:07:37 +00:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
github-actions[bot]
5ee45af3aa
Post-release preparation for codeql-cli-2.23.6
2025-11-18 09:53:12 +00:00
Paolo Tranquilli
4c1f2b840e
C#: change capitalization
2025-11-18 10:06:19 +01:00
Paolo Tranquilli
1c81c4d4c9
C#: make some tweaks to change logs
2025-11-18 10:01:36 +01:00
github-actions[bot]
18fa6799ce
Release preparation for version 2.23.6
2025-11-17 16:38:07 +00:00
Paolo Tranquilli
12f1bd8ffd
C#: add missing * to change note
2025-11-17 15:00:30 +01:00
Anders Schack-Mulligen
4867306b5e
C#: Add change note.
2025-11-14 11:44:27 +01:00
Joe Farebrother
c9a559a6d8
Restrict Append calls to string arguments
2025-11-10 14:14:06 +00:00
Joe Farebrother
0a085dccbe
Fix qhelp
2025-11-10 14:13:46 +00:00
Joe Farebrother
d29fc9d2d0
Add changenote
2025-11-10 14:13:41 +00:00
Joe Farebrother
c734e74c76
Update qhelp
2025-11-10 14:13:31 +00:00
Joe Farebrother
cdd1edd53b
Remove experimental versions
2025-11-10 14:13:26 +00:00
Joe Farebrother
6ba7ece2f0
Add httponly tests for aspnet core + fixes
2025-11-10 14:13:19 +00:00
Joe Farebrother
bb010fee6b
Add tests for secure cookie using aspnetcore
2025-11-10 14:13:04 +00:00
Joe Farebrother
3cdfa8e0ac
Update comments and names
2025-11-10 14:12:57 +00:00
Joe Farebrother
a87a03cfa8
Move to main query pack
2025-11-10 14:12:48 +00:00
Joe Farebrother
71ad5a340f
Refactor httponly cookie query
2025-11-10 14:12:43 +00:00
Joe Farebrother
a1864edcb6
Presere behaviour for insecure cookie constructor
2025-11-10 14:12:36 +00:00
Joe Farebrother
d3ea6758c3
Simplify checks for assignments to false to creation case
2025-11-10 14:12:30 +00:00
Joe Farebrother
7bb65fef1b
Refactor secure cookie query
2025-11-10 14:12:24 +00:00
github-actions[bot]
4014df9a6e
Post-release preparation for codeql-cli-2.23.4
2025-11-04 17:57:52 +00:00
Michael B. Gale
e825a3acf7
C#: Minor changelog improvements
2025-11-03 15:03:46 +00:00
github-actions[bot]
64fcdd1f2f
Release preparation for version 2.23.4
2025-11-03 14:52:23 +00:00
Anders Schack-Mulligen
4f6528a9fb
C#: Deprecate AbstractValue.
2025-10-31 14:23:23 +01:00
Nora Dimitrijević
ba22f0d7d2
C#/DontInstallRootCert
2025-10-28 09:39:21 +01:00
Paolo Tranquilli
105f810654
Merge pull request #20658 from github/redsun82/csharp-fix-xframe-options-in-location
...
Csharp: fix `cs/web/missing-x-frame-options` to also consider `location` elements
2025-10-27 13:49:09 +01:00
