Owen Mansel-Chan 74a249597a Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer ...

Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values

2025-02-24 23:39:18 +00:00

..

.settings

…

.vs

…

Advisory

Java: Deprecate Field.getSourceDeclaration() and Field.isSourceDeclaration()

2024-09-24 14:06:54 +01:00

Architecture

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

change-notes

Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer

2025-02-24 23:39:18 +00:00

codeql-suites

Updata Java CCR suite

2025-02-18 20:25:22 +00:00

Compatibility/JDK9

Kotlin: exclude Kotlin files from java/underscore-identifier

2022-10-24 09:05:28 +02:00

Complexity

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

DeadCode

Kotlin: Add FP test case for dead code queries

2022-11-16 16:18:37 +01:00

Diagnostics

Java: report any extracted file as successfully extracted

2023-12-01 22:35:00 +00:00

experimental

Java: resolve merge conflict

2025-01-30 10:19:21 -05:00

external

rename all occurrences of XML to Xml

2022-08-22 14:08:31 +02:00

filters

…

Frameworks

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

Language Abuse

Restrict getCheckedType to unrestricted records, introduce getSyntacticCheckedType and use that where appropriate

2023-11-30 11:24:05 +00:00

Likely Bugs

all: use my script to delete outdated deprecations

2025-01-27 22:16:48 +01:00

meta

Mass rename L/RValue -> VarWrite/Read

2023-10-24 10:58:29 +01:00

Metrics

Java: Consider all summarized callable with generated verification as generated when counting generated vs manual.

2024-10-02 15:24:01 +02:00

Performance

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

Security/CWE

Merge pull request #18692 from jcogs33/jcogs33/spring-csrf-qhelp-update

2025-02-19 11:39:11 -05:00

semmle/code/xml

Java: Deprecate MyBatisMapperXML as it is only used by experimental queries.

2025-01-27 10:22:22 +01:00

Telemetry

Rust: Implement database quality telemetry query

2025-02-06 10:46:48 +01:00

utils

Java, C#: Ensure variable is used in all disjuncts

2025-01-29 10:30:26 +01:00

Violations of Best Practice

Java: Adopt shared SSA library

2025-02-11 10:06:43 +01:00

.project

…

.qlpath

…

AlertSuppression.ql

AlertSuppression: move library into util folder

2022-12-21 10:39:57 +01:00

AlertSuppressionAnnotations.ql

AlertSuppression: add support for //codeql comments

2022-12-19 16:10:28 +01:00

CHANGELOG.md

Release preparation for version 2.20.5

2025-02-17 16:55:54 +00:00

codeql-pack.release.yml

Release preparation for version 2.20.5

2025-02-17 16:55:54 +00:00

definitions.ql

…

qlpack.lock.yml

Packaging: Java refactoring

2021-08-19 14:09:35 -07:00

qlpack.yml

Post-release preparation for codeql-cli-2.20.5

2025-02-17 17:58:24 +00:00