Michael B. Gale
|
8ba29a7821
|
Revert "Release preparation for version 2.23.4"
|
2025-11-10 17:13:28 +00:00 |
|
Joe Farebrother
|
eda23902ba
|
Merge pull request #20692 from joefarebrother/csharp-secure-cookie-promote
C#: Promote insecure cookie and httponly cookie queries
|
2025-11-10 15:02:45 +00:00 |
|
Paolo Tranquilli
|
02e696d9cc
|
Update .github/workflows/build-ripunzip.yml
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-11-10 15:58:43 +01:00 |
|
Michael Nebel
|
0541dccc78
|
C#: Add discarding for ASP elements.
|
2025-11-10 15:44:17 +01:00 |
|
Michael Nebel
|
3492811cda
|
C#: Add XML overlay tests.
|
2025-11-10 15:38:29 +01:00 |
|
Michael Nebel
|
d6b7424e2c
|
C#: Add the same strategy in as in Java for XML element discarding.
|
2025-11-10 15:38:26 +01:00 |
|
Joe Farebrother
|
c9a559a6d8
|
Restrict Append calls to string arguments
|
2025-11-10 14:14:06 +00:00 |
|
Joe Farebrother
|
b813c13462
|
Restrict sinks to fix performance
|
2025-11-10 14:14:01 +00:00 |
|
Joe Farebrother
|
7d5388fb68
|
Update integration tests
|
2025-11-10 14:13:56 +00:00 |
|
Joe Farebrother
|
544446bb81
|
Minor comment update
|
2025-11-10 14:13:51 +00:00 |
|
Joe Farebrother
|
0a085dccbe
|
Fix qhelp
|
2025-11-10 14:13:46 +00:00 |
|
Joe Farebrother
|
d29fc9d2d0
|
Add changenote
|
2025-11-10 14:13:41 +00:00 |
|
Joe Farebrother
|
d8eeae781b
|
Add additional test case for httponly cookies set to true
|
2025-11-10 14:13:36 +00:00 |
|
Paolo Tranquilli
|
a6fda6ba73
|
CI: make build-ripunzip.yml auto-create update PR
|
2025-11-10 15:13:35 +01:00 |
|
Joe Farebrother
|
c734e74c76
|
Update qhelp
|
2025-11-10 14:13:31 +00:00 |
|
Joe Farebrother
|
cdd1edd53b
|
Remove experimental versions
|
2025-11-10 14:13:26 +00:00 |
|
Joe Farebrother
|
6ba7ece2f0
|
Add httponly tests for aspnet core + fixes
|
2025-11-10 14:13:19 +00:00 |
|
Joe Farebrother
|
ae0b997c31
|
Add system.web tests for httponly cookie
|
2025-11-10 14:13:14 +00:00 |
|
Joe Farebrother
|
a9b97f7065
|
Add tests for insecure cookie using system.web
|
2025-11-10 14:13:09 +00:00 |
|
Joe Farebrother
|
bb010fee6b
|
Add tests for secure cookie using aspnetcore
|
2025-11-10 14:13:04 +00:00 |
|
Joe Farebrother
|
3cdfa8e0ac
|
Update comments and names
|
2025-11-10 14:12:57 +00:00 |
|
Joe Farebrother
|
a87a03cfa8
|
Move to main query pack
|
2025-11-10 14:12:48 +00:00 |
|
Joe Farebrother
|
71ad5a340f
|
Refactor httponly cookie query
|
2025-11-10 14:12:43 +00:00 |
|
Joe Farebrother
|
a1864edcb6
|
Presere behaviour for insecure cookie constructor
|
2025-11-10 14:12:36 +00:00 |
|
Joe Farebrother
|
d3ea6758c3
|
Simplify checks for assignments to false to creation case
|
2025-11-10 14:12:30 +00:00 |
|
Joe Farebrother
|
7bb65fef1b
|
Refactor secure cookie query
|
2025-11-10 14:12:24 +00:00 |
|
Mathias Vorreiter Pedersen
|
fd8bf990f6
|
Merge pull request #20783 from MathiasVP/fix-cp-in-external-flow
C++: Fix cartesian-like join in `ExternalFlow.qll`
|
2025-11-10 13:40:34 +00:00 |
|
Michael Nebel
|
c44b74740e
|
C#: Minor code quality improvements.
|
2025-11-10 14:23:59 +01:00 |
|
Michael Nebel
|
0a16cf68de
|
C#: Do not require that comments and type locations are in source in test.
|
2025-11-10 13:53:41 +01:00 |
|
Geoffrey White
|
4b212239e1
|
Rust: Remove unnecessary .(BlockExpr).
|
2025-11-10 12:35:39 +00:00 |
|
Michael Nebel
|
43118ecccc
|
C#: The extraction of the TypeMentions for return type and explicit interface return type for methods have changed order.
|
2025-11-10 13:26:07 +01:00 |
|
Michael Nebel
|
ded1328103
|
C#: Do not extract comments when scaffolding.
|
2025-11-10 13:26:05 +01:00 |
|
Tom Hvitved
|
de367eaad6
|
Update rust/ql/lib/codeql/rust/elements/internal/ElementImpl.qll
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-11-10 12:42:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
7b052e2404
|
Merge branch 'main' into fix-cp-in-external-flow
|
2025-11-10 10:44:31 +00:00 |
|
Mathias Vorreiter Pedersen
|
29a294f8d0
|
C++: Bind the columns inside the predicate instead of relying on 'bindingset's. The repeated inlining caused by 'bindiingset's created some #shared predicates with repeated regex matching.
|
2025-11-10 10:21:12 +00:00 |
|
Mathias Vorreiter Pedersen
|
267a7f5229
|
Merge pull request #20779 from MathiasVP/fix-bad-magic
C++: Fix bad magic in `IRGuards`
|
2025-11-10 10:05:18 +00:00 |
|
Jeroen Ketema
|
eb3e86480f
|
Merge pull request #20784 from jketema/qual-fail
C++: Fix named qualifier dataset check error with decltypes
|
2025-11-10 10:36:47 +01:00 |
|
Paolo Tranquilli
|
3de598ef79
|
Merge pull request #20800 from github/redsun82/remove-macos-13
CI: update images in `build-ripunzip.yml`
|
2025-11-10 10:16:14 +01:00 |
|
Jeroen Ketema
|
0bf415acdf
|
C++: Add upgrade and downgrade scripts
|
2025-11-10 10:11:05 +01:00 |
|
Jeroen Ketema
|
b660625429
|
C++: Update dbscheme to address dataset check error
|
2025-11-10 10:11:04 +01:00 |
|
Jeroen Ketema
|
a3f26fd6bb
|
C++: Update expected test results after QL changes
|
2025-11-10 10:11:03 +01:00 |
|
Jeroen Ketema
|
f9554e1542
|
C++: Give proper getNames to more types and fix QLdoc
|
2025-11-10 10:11:01 +01:00 |
|
Paolo Tranquilli
|
7fb0e212b2
|
Make default refs valid on PR checks
Set default versions for ripunzip and openssl in the workflow.
|
2025-11-10 10:09:16 +01:00 |
|
Paolo Tranquilli
|
2ff4af9ede
|
Update default versions in build-ripunzip.yml
|
2025-11-10 09:56:52 +01:00 |
|
Paolo Tranquilli
|
cd3b29f249
|
Update OS versions in ripunzip workflow
|
2025-11-10 09:54:10 +01:00 |
|
Paolo Tranquilli
|
63a2088ae0
|
Add pull_request trigger for ripunzip workflow
|
2025-11-10 09:53:19 +01:00 |
|
Paolo Tranquilli
|
fe690c90d5
|
Fix typo in workflow name
|
2025-11-10 09:52:14 +01:00 |
|
Paolo Tranquilli
|
da966fc799
|
CI: remove deprecated macos-13 image
|
2025-11-10 09:50:43 +01:00 |
|
Tom Hvitved
|
c81f5f5190
|
Rust: Remove elements superseded by attribute macro expansions
|
2025-11-10 09:18:58 +01:00 |
|
Tom Hvitved
|
74dd515c67
|
Merge pull request #20790 from hvitved/codegen/raw-child
Codegen: Add `Raw::getImmediateChild` and `Synth::getSynthParent`
|
2025-11-10 09:14:16 +01:00 |
|