Nora Dimitrijević comments

Results 6 comments of


                                            Nora Dimitrijević

C++: New Query `cpp/comma-before-misleading-indentation`

Thanks for the Doc review @felicitymay! I've made changes based on your suggestions. This PR is now ready for a final review/approval.

Bump gulp-esbuild from 0.14.0 to 0.14.1 in /extensions/ql-vscode

@dependabot rebase

Bump gulp-esbuild from 0.14.0 to 0.14.1 in /extensions/ql-vscode

@dependabot rebase

C path matching issue

Hi @foxbyte9 👋🏻 `DataFlow::Global` is used for value-preserving dataflow, in the sense that the same value should be passed unaltered from source to sink. But since you do an arithmetic...

CFG for shell script in CodeQL

Hi, thanks for reaching out. Just to be clear, which language are you trying to analyze with CodeQL? If you're trying to run CodeQL against standalone shell scripts, then it...

General issue: XSS vulnerabilities (CWE-79/CWE-116) not detected in React/Next.js .tsx components

Thanks for the report. I was able to locally reproduce the `CWE-079/ReflectedXss` alert on your [PR](https://github.com/aniakowalewska1/migration-playground/pull/39). It's not immediately clear to me why the XSS in that file is getting...