Skip to content

Fix miscellaneous errors highlighted by QL-for-QL#12246

Merged
owen-mc merged 12 commits into
github:mainfrom
owen-mc:go/fix/misc
Apr 4, 2023
Merged

Fix miscellaneous errors highlighted by QL-for-QL#12246
owen-mc merged 12 commits into
github:mainfrom
owen-mc:go/fix/misc

Conversation

@owen-mc

@owen-mc owen-mc commented Feb 17, 2023

Copy link
Copy Markdown
Contributor

Fix many of the errors highlighted by QL-for-QL. None of them are particularly important, though one typo which led to over-modelling was found in passing.

@owen-mc owen-mc requested a review from a team as a code owner February 17, 2023 17:05
@github-actions github-actions Bot added the Go label Feb 17, 2023
Comment thread go/ql/src/Security/CWE-601/OpenUrlRedirect.ql Fixed

@smowton smowton left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor comments, + the ql-for-ql alert looks real

Comment thread go/ql/lib/semmle/go/StringOps.qll Outdated
Comment thread go/ql/lib/semmle/go/security/InsecureFeatureFlag.qll Outdated
Comment thread go/ql/src/Security/CWE-327/InsecureTLS.ql Outdated
Comment thread go/ql/src/Security/CWE-327/InsecureTLS.ql Outdated
Comment thread go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql Outdated
Comment thread go/ql/test/library-tests/semmle/go/Packages/package.ql Outdated
Comment thread go/ql/test/library-tests/semmle/go/frameworks/SQL/QueryString.ql Outdated
@owen-mc owen-mc added the no-change-note-required This PR does not need a change note label Feb 17, 2023
@owen-mc owen-mc force-pushed the go/fix/misc branch 2 times, most recently from 1d4ebef to 90e9a8a Compare February 17, 2023 21:29

Check warning

Code scanning / CodeQL

Alert message style violation

Use "flows to" instead of "depends on" in data flow queries.
Comment on lines 19 to 28

Check warning

Code scanning / CodeQL

Consistent alert message

The go/unvalidated-url-redirection query does not have the same alert message as java.
@owen-mc owen-mc merged commit 9612bb9 into github:main Apr 4, 2023
@owen-mc owen-mc deleted the go/fix/misc branch April 4, 2023 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Go no-change-note-required This PR does not need a change note

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants