Chad Bentz ce9e61dbfd C#: Add Razor Page handler method parameters as remote flow sources ...

ASP.NET Core Razor Page handler method parameters (OnGet, OnPost, etc.)
were not modeled as remote flow sources, causing security queries like
SQL injection to miss vulnerabilities in PageModel subclasses.

This adds AspNetCorePageHandlerMethodParameter, analogous to the existing
AspNetCoreActionMethodParameter for MVC controllers, using the existing
PageModelClass.getAHandlerMethod() from Razor.qll.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-12 19:50:12 -04:00

..

campaigns/Solorigate

Post-release preparation for codeql-cli-2.25.6

2026-05-29 12:04:35 +00:00

consistency-queries

C#: Replace Ssa::ExplicitDefinition with SsaExplicitWrite.

2026-04-30 12:52:51 +02:00

examples

C#: Introduce Expr.getIntValue.

2026-04-13 14:52:38 +02:00

integration-tests

C#: Update integration test expected output.

2026-05-27 13:24:45 +02:00

lib

C#: Add Razor Page handler method parameters as remote flow sources

2026-06-12 19:50:12 -04:00

src

Post-release preparation for codeql-cli-2.25.6

2026-05-29 12:04:35 +00:00

test

C#: Add Razor Page handler method parameters as remote flow sources

2026-06-12 19:50:12 -04:00

Directory.Build.props

Add empty Directory.Build.props to ql subdirectory

2024-05-21 09:30:25 +02:00

paket.dependencies

Paket: Prevent recursion into ql/csharp/ql directory.

2024-05-15 14:17:04 +02:00