codeql

codeql copied to clipboard

csharp update MaD for HttpRequestMessage

1

There is an autogenerated MaD for System.Net.Http.HttpRequestMessage constructor where `Uri` class is one of the parameters. However, it's missing the overloaded constructor where the parameter is a string URL. -...

LWSimpkins

C++: Add a new query for detecting type confusion vulnerabilities

3

This PR adds a new medium precision query `cpp/type-confusion` to detect issues such as: ```cpp struct Animal { virtual ~Animal(); }; struct Cat : public Animal { Cat(); ~Cat(); };...

MathiasVP

Including All Query Results in .sarif File

1

Currently we can only use `@kind problem` and `@kind path-problem` queries with query suites. Other queries need to be run manually and they end up in a separate format (`.bqrs`...

marktefftech

This PR fixes a subtle problem in the C++ SSA. Consider an example such as: ```cpp void test() { int x; sink(&x); } ``` a basic requirement for SSA is...

MathiasVP

michaelnebel

igfoo

michaelnebel

C#: Add more `environment` and `commandargs` sources for the C# Standard Library

3

Adds more models for the `environment` and `commandargs` local source kinds. This primarily focuses on the .NET standard library and the `Microsoft.Extensions.Configuration` library.

egregius313

JS: Add Permissive CORS query (CWE-942)

19

This pull request adds a query for Permissive CORS to prevent CSRF attacks for Apollo Server. I plan to add a couple more libraries, so I'll leave it in draft...

maikypedia

hvitved