fe1476f875
This fixes a bug where if there are special characters in a database path, it is not possible to navigate to that file from the results view. Note that the results from our BQRS returned properly encoded URIs, but our paths coming from sarif were unencoded. Our path parsing handled the latter correctly (even though these are not correct URIs) and the former incorrectly. The fix here is to first ensure all uris are properly encoded. We do this by running `encodeURI` in sarif-utils (can't run encodeURIComponent or else the path separators `/` will also be encoded). Then, we ensure that when we resolve locations, we decode all file paths. This works in all cases I have tried. I still have an issue with running View AST on some of these databases, but that I believe is a separate issue.
CodeQL for Visual Studio Code
This project is an extension for Visual Studio Code that adds rich language support for CodeQL. It's used to find problems in code bases using CodeQL. It's written primarily in TypeScript.
The extension is released. You can download it from the Visual Studio Marketplace.
To see what has changed in the last few versions of the extension, see the Changelog.
Features
- Enables you to use CodeQL to query databases and discover problems in codebases.
- Shows the flow of data through the results of path queries, which is essential for triaging security results.
- Provides an easy way to run queries from the large, open source repository of CodeQL security queries.
- Adds IntelliSense to support you writing and editing your own CodeQL query and library files.
Project goals and scope
This project will track new feature development in CodeQL and, whenever appropriate, bring that functionality to the Visual Studio Code experience.
Contributing
This project welcomes contributions. See CONTRIBUTING.md for details on how to build, install, and contribute.
License
The CodeQL extension for Visual Studio Code is licensed under the MIT License. The version of CodeQL used by the CodeQL extension is subject to the CodeQL Research Terms & Conditions.
When using the GitHub logos, be sure to follow the GitHub logo guidelines.