Commits

History for

oncodeql-cli/latest

Commits on Jul 9, 2026

Merge pull request #22149 from jketema/jketema/cwe-114-tag
jketema
authored
161c8c4
C#: Add CWE-73 tag to `cs/assembly-path-injection`
jketema
committed
66fea69

Commits on Jul 7, 2026

Update query example (synced file)
owen-mc
committed
f67b729
Convert qlref tests to inline expectations
owen-mc
committed
366d70b

Commits on May 8, 2026

Note that common standard library types can be vulnerable to gadget-chain attacks
owen-mc
committed
a5ef036
C#: Clarify that deserialization following a schema is safe
owen-mc
committed
4e47f77

Commits on Apr 21, 2026

Merge pull request #21565 from aschackmull/csharp/cfg2
aschackmull
authored
f912731

Commits on Apr 13, 2026

C#: Introduce Expr.getIntValue.
aschackmull
committed
d3e580f

Commits on Apr 10, 2026

C#: Update some references in preparation for CFG swap.
aschackmull
committed
03f6bdb
C#: Rename ControlFlow::Node to ControlFlowNode.
aschackmull
committed
61976e3

Commits on Apr 1, 2026

C#: Deprecate get[L|R]Value predicates.
michaelnebel
committed
9c095bc

Commits on Mar 24, 2026

C#: Upgrade libraries and queries to use the new Operation classes.
michaelnebel
committed
5167331

Commits on Mar 13, 2026

Commits on Feb 4, 2026

C#: Fix CSRF query to check antiforgery attributes on base classes
redsun82
committed
4973523

Commits on Dec 8, 2025

C# CSRF query: add support for ASP.NET Core
smowton
committed
5bb31af

Commits on Dec 3, 2025

Use more flowTo.
aschackmull
committed
78e1879
Use flowFrom.
aschackmull
committed
dc6d3fe

Commits on Nov 26, 2025

Remove trailing periods from @name metadata in query files
felicitymay
committed
caf6b95

Commits on Nov 10, 2025

Restrict Append calls to string arguments
joefarebrother
committed
c9a559a
Fix qhelp
joefarebrother
committed
0a085dc
Update qhelp
joefarebrother
committed
c734e74
Add httponly tests for aspnet core + fixes
joefarebrother
committed
6ba7ece
Add tests for secure cookie using aspnetcore
joefarebrother
committed
bb010fe
Update comments and names
joefarebrother
committed
3cdfa8e
Move to main query pack
joefarebrother
committed
a87a03c

Commits on Oct 28, 2025

C#/DontInstallRootCert
d10c
committed
ba22f0d

Commits on Oct 21, 2025

Csharp: rename predicate
redsun82
committed
316225b
Csharp: address review
redsun82
committed
6f8b1f6

Commits on Oct 17, 2025

Csharp: fix `cs/web/missing-x-frame-options` to also consider `location` elements
redsun82
committed
c3fd06c

Commits on Sep 1, 2025

C#: Use shared SuccessorType.
aschackmull
committed
8b50ac2

Commits on Aug 21, 2025

Merge pull request #20254 from Napalys/cs/ldap-injection-qhelp
Napalys
authored
3369e16

Commits on Aug 20, 2025

Commits on Jul 21, 2025

[DIFF-INFORMED] C#: HardcodedConnectionString
d10c
committed
218fcbb