codeql/csharp/ql/lib/change-notes/released/7.0.0.md

7.0.0

Breaking Changes

• Renamed types related to operation expressions. The QL classes BinaryArithmeticOperation, BinaryBitwiseOperation, and BinaryLogicalOperation now include compound assignments; for example, BinaryArithmeticOperation now includes a += b.

Major Analysis Improvements

• Added Razor Page handler method parameters (e.g., OnGet, OnPost, OnPostAsync) as remote flow sources, enabling security queries such as cs/sql-injection to detect vulnerabilities in PageModel subclasses.

Minor Analysis Improvements

• Improved property and indexer call target resolution for partially overridden properties and indexers.
• Improved extraction of range-access expressions on spans and strings (for example, a[0..3]). These expressions are now extracted as Slice (span) or Substring (string) calls.
• Improved call target resolution for ref-return properties and indexers.