Compare commits

...

4 Commits

Author SHA1 Message Date
Paolo Tranquilli
d06c695822 Merge pull request #16596 from github/redsun82/csharp
C#: Pin dotnet SDK version in integration test relying on razor source generator
2024-05-27 12:06:22 +02:00
Tamas Vajk
8cf200b1ef C#: Pin dotnet SDK version in integration test relying on razor source generator
(cherry picked from commit 62faab320b)
2024-05-27 08:42:44 +02:00
Florin Coada
7b453fd506 Merge pull request #16072 from github/changedocs/2.16.6
Add codeql-cli-2.16.6 updates to CodeQL changelog
2024-03-27 15:29:13 +00:00
Florin Coada
81c5147015 Add codeql-cli-2.16.6 updates to codeql-changelog 2024-03-27 12:47:11 +00:00
4 changed files with 32 additions and 1 deletions

View File

@@ -1 +1 @@
| Views/Test/Test.cshtml:7:27:7:36 | access to property Name | Controllers/TestController.cs:13:40:13:47 | tainted1 : UserData | Views/Test/Test.cshtml:7:27:7:36 | access to property Name | $@ flows to here and is written to HTML or JavaScript: Microsoft.AspNetCore.Mvc.ViewFeatures.HtmlHelper.Raw() method. | Controllers/TestController.cs:13:40:13:47 | tainted1 : UserData | User-provided value |
| Views/Test/Test.cshtml:7:26:7:35 | access to property Name | Controllers/TestController.cs:13:40:13:47 | tainted1 : UserData | Views/Test/Test.cshtml:7:26:7:35 | access to property Name | $@ flows to here and is written to HTML or JavaScript: Microsoft.AspNetCore.Mvc.ViewFeatures.HtmlHelper.Raw() method. | Controllers/TestController.cs:13:40:13:47 | tainted1 : UserData | User-provided value |

View File

@@ -0,0 +1,5 @@
{
"sdk": {
"version": "8.0.300"
}
}

View File

@@ -0,0 +1,25 @@
.. _codeql-cli-2.16.6:
==========================
CodeQL 2.16.6 (2024-03-26)
==========================
.. contents:: Contents
:depth: 2
:local:
:backlinks: none
This is an overview of changes in the CodeQL CLI and relevant CodeQL query and library packs. For additional updates on changes to the CodeQL code scanning experience, check out the `code scanning section on the GitHub blog <https://github.blog/tag/code-scanning/>`__, `relevant GitHub Changelog updates <https://github.blog/changelog/label/code-scanning/>`__, `changes in the CodeQL extension for Visual Studio Code <https://marketplace.visualstudio.com/items/GitHub.vscode-codeql/changelog>`__, and the `CodeQL Action changelog <https://github.com/github/codeql-action/blob/main/CHANGELOG.md>`__.
Security Coverage
-----------------
CodeQL 2.16.6 runs a total of 409 security queries when configured with the Default suite (covering 160 CWE). The Extended suite enables an additional 132 queries (covering 34 more CWE).
CodeQL CLI
----------
Bug Fixes
~~~~~~~~~
* Fixes a bug where extractor logs would be output at a lower than expected verbosity level when using the :code:`codeql database create` command.

View File

@@ -11,6 +11,7 @@ A list of queries for each suite and language `is available here <https://docs.g
.. toctree::
:maxdepth: 1
codeql-cli-2.16.6
codeql-cli-2.16.5
codeql-cli-2.16.4
codeql-cli-2.16.3