codeql
codeql copied to clipboard
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Dummy commit for running tests after merging main
### TLDR In this PR we re-generate the .NET 8 runtime models based on the mixed model generation. - A minor update for the `cs/information-exposure-through-exception` query is needed. - To...
### TLDR In this PR we re-generate the Java SDK 17 models using the *mixed* model generator. That is, we use the content based (field aware) model generation where applicable,...
This PR adds `javax.servlet.http.Part` and `org.apache.commons.fileupload.FileItem/Stream` support to RemoteFlow Sources.
This caused a dataset check error on the `python/cpython` database, as we had a `DictUnpacking` node whose parent was not a `dict_item_list`, but rather an `expr_list`. Investigating a bit further...
Fixes a dataset check failure for the `py_cobjectnames` relation seen on `python/cpython`. ### Pull Request checklist #### All query authors - [ ] A change note is added if necessary....
This PR makes two small improvements to the SSA: * Mutable variables that are captured are now supported. Immutable variables where already supported. I don't think allowing mutable variables as...
This adds support for speculative taint flow in the shared taint tracking library. ### What is this? This is a magic button (dial, really) that you can turn to calculate...