86439 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Geoffrey White	1635ef9ad9	Merge branch 'main' into convert	2025-09-26 14:11:04 +01:00
Florin Coada	5a0bae27ac	Update changelog for CodeQL CLI 2.23.1	2025-09-26 13:57:57 +01:00
Anders Schack-Mulligen	f4388c80d0	Merge pull request #20519 from aschackmull/controlflowreach/perf2 ... ControlFlow: Split only on relevant values.	2025-09-26 14:51:49 +02:00
Florin Coada	a4f5e9aaf5	Update changelog for CodeQL CLI 2.23.1 ... Added acknowledgment for the original contributor of the 'Permissive CORS configuration' query and clarified the detection of path injection in Go.	2025-09-26 13:46:12 +01:00
Florin Coada	f6fe469e02	Merge pull request #20531 from github/coadaflorin-formatingfix2 ... Fix formatting in codeql-cli-2.23.1.rst	2025-09-26 13:31:22 +01:00
Florin Coada	3e9332edfa	Fix formatting in codeql-cli-2.23.1.rst	2025-09-26 13:16:45 +01:00
Florin Coada	f8388c521e	Merge pull request #20530 from github/coadaflorin/attributer-query ... Attribute `js/cors-permissive-configuration` to original author	2025-09-26 13:11:08 +01:00
Anders Schack-Mulligen	2c29f21004	Shared: Address review comments.	2025-09-26 13:59:53 +02:00
Tom Hvitved	615b0a0310	Merge pull request #20502 from hvitved/rust/path-resolution-check-arity ... Rust: Check call arities in path resolution	2025-09-26 13:45:26 +02:00
Tom Hvitved	4c7b66c66a	Address review comments	2025-09-26 13:14:44 +02:00
Geoffrey White	77e7898f71	Rust: Use US spelling in comment.	2025-09-26 11:49:23 +01:00
Geoffrey White	f458149655	Rust: Remove a sentance from the qhelp.	2025-09-26 11:32:45 +01:00
Geoffrey White	57f84873b4	Rust: Split off cookieOptionalBarrier predicate (as suggested) and expand / clarify the QLDoc.	2025-09-26 11:29:17 +01:00
Geoffrey White	21fe142955	Update rust/ql/src/queries/security/CWE-614/InsecureCookie.qhelp ... Co-authored-by: Simon Friis Vindum <paldepind@github.com>	2025-09-26 10:39:49 +01:00
Florin Coada	ba520c60d2	Update 2.1.0.md	2025-09-26 10:11:03 +01:00
Florin Coada	09833e2541	Update CHANGELOG for query promotion and acknowledgment ... Promote 'Permissive CORS configuration' query to default suite and acknowledge contributor.	2025-09-26 10:09:30 +01:00
Florin Coada	2f96e32ec9	Update 2.1.0.md	2025-09-26 10:08:31 +01:00
Geoffrey White	3a03bb5a0b	Rust: Repair rust/hard-coded-cryptographic-value, which had an unintentional dependence on the taint flow.	2025-09-26 10:03:38 +01:00
Geoffrey White	74a350a432	Rust: Effect on tests.	2025-09-26 09:55:16 +01:00
Tom Hvitved	c52709a5f0	Merge pull request #20516 from hvitved/rust/type-inference-union-pointer-never ... Rust: Model union, never, and pointer types	2025-09-26 10:26:05 +02:00
Tom Hvitved	7a74efcc82	Update rust/ql/lib/codeql/rust/elements/internal/UnionImpl.qll ... Co-authored-by: Simon Friis Vindum <paldepind@github.com>	2025-09-26 09:57:13 +02:00
Geoffrey White	ff554055a6	Rust: Correct 'from' model to taint.	2025-09-26 08:43:35 +01:00
Simon Friis Vindum	6678e79239	Merge pull request #20526 from geoffw0/lock ... Rust: Add missing Cargo.lock files	2025-09-26 08:57:21 +02:00
ewillonermsft	c89ce067a3	Merge branch 'main' into systemwebhttprequest-test-stubs	2025-09-25 12:58:34 -07:00
ewillonermsft	b267bd11e0	Update properties to getters which is inline with the actual implementation.	2025-09-25 10:37:56 -07:00
ewillonermsft	b49b84e072	Remove this[] logic from the commit. ... Stub should not include code logic.	2025-09-25 10:10:48 -07:00
Geoffrey White	39ceadaa26	Merge pull request #20520 from geoffw0/gitignore ... Add .orig files to the .gitignore.	2025-09-25 18:10:24 +01:00
Geoffrey White	656a7bc378	Rust: Add missing Cargo.lock files to query tests.	2025-09-25 17:40:59 +01:00
Chris Smowton	9e7a5214f3	Change note	2025-09-25 15:40:26 +01:00
Chris Smowton	e9cccb46c0	Go: mistyped-exponentiation: notice constants with likely-bitmask values	2025-09-25 15:19:40 +01:00
Tom Hvitved	1a4cfba93a	Merge pull request #20427 from felickz/ruby-framework-grape ... Ruby: Add support for Grape Framework	2025-09-25 16:12:34 +02:00
Taus	e592fd60ff	Merge pull request #20495 from github/tausbn/python-fix-unmatchable-dollar-in-lookahead ... Python: Fix false positive for unmatchable dollar/caret	2025-09-25 15:27:32 +02:00
Geoffrey White	dba4b5e5a9	Rust: Add images.	2025-09-25 14:21:54 +01:00
Geoffrey White	db3d177300	Rust: Port the code examples to Rust / CodeQL for Rust.	2025-09-25 14:21:53 +01:00
Geoffrey White	1211dc8f3c	Rust: Replace 'swift' with 'rust'.	2025-09-25 14:21:52 +01:00
Geoffrey White	f4758fe3e5	Rust: Add a basic-query-for-rust-code.rst (copied from Swift).	2025-09-25 14:21:51 +01:00
Geoffrey White	b22227d0f4	Add .orig files to .gitignore.	2025-09-25 14:03:39 +01:00
Anders Schack-Mulligen	109b6a1d79	ControlFlow: Split only on relevant values.	2025-09-25 15:03:35 +02:00
Mathias Vorreiter Pedersen	c1c1f60241	C++: Delete incorrect comment and add a bunch of barrier guard tests.	2025-09-25 12:56:46 +01:00
Mathias Vorreiter Pedersen	04ce4057e1	C++: Add more comments to describe the constant expression hack.	2025-09-25 12:43:57 +01:00
Mathias Vorreiter Pedersen	5b5c1de05b	C++: Fix fan-out.	2025-09-25 12:33:44 +01:00
Tom Hvitved	2a814dd37c	Rust: Model union, never, and pointer types	2025-09-25 12:33:51 +02:00
Geoffrey White	a72eb87c93	Rust: Remove one that is essentially a duplicate.	2025-09-25 10:35:47 +01:00
Geoffrey White	a45a3e427c	Rust: Update supported frameworks.	2025-09-25 10:28:10 +01:00
Joe Farebrother	cb7b1efe81	Update alert message	2025-09-25 09:52:27 +01:00
Jeroen Ketema	e41b5f2bc0	C++: Update tests after extractor changes	2025-09-25 09:52:22 +02:00
Mathias Vorreiter Pedersen	b169ccf29a	C++: Fully delete TRange.	2025-09-25 08:30:42 +01:00
ewillonermsft	b2fc68ff81	Add additional SystemWeb HttpRequset properties to C# test stubs	2025-09-24 18:24:36 -07:00
Mathias Vorreiter Pedersen	a07d03f49b	C++: Use the 'StoreInstruction' instead of the 'ReturnValueInstruction' when detecting return expressions.	2025-09-24 20:09:35 +01:00
Mathias Vorreiter Pedersen	26a8a4b3d2	C++: Add failing test demonstrating broken wrapper barrier guards.	2025-09-24 19:54:05 +01:00