Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10.1k
Code
Issues
1k
Pull requests
470
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Rust: New query rust/insecure-cookie
- #20503
#20503
Merged
geoffw0
merged 22 commits into
github:main
github/codeql:main
from
geoffw0:cookie
geoffw0/ql:cookie
Copy head branch name to clipboard
Sep 30, 2025
Conversation
Commits
22
(22)
Checks
Findings
Files changed
Merged
Rust: New query rust/insecure-cookie
#20503
geoffw0
merged 22 commits into
github:main
github/codeql:main
from
geoffw0:cookie
geoffw0/ql:cookie
Copy head branch name to clipboard
Commits
Commits on Sep 22, 2025
Rust: Add tests for insecure cookies.
geoffw0
committed
513ae2a
View commit details
Copy full SHA for 513ae2a
Browse repository at this point
Rust: Add very basic query prototype.
geoffw0
committed
7e75c1d
View commit details
Copy full SHA for 7e75c1d
Browse repository at this point
Rust: Add security-severity tag.
geoffw0
committed
d52b668
View commit details
Copy full SHA for d52b668
Browse repository at this point
Rust: Use models-as-data, add source/sink/flow models.
geoffw0
committed
eadf922
View commit details
Copy full SHA for eadf922
Browse repository at this point
Rust: Refactor sources, sinks into an extensions source file.
geoffw0
committed
257a1b0
View commit details
Copy full SHA for 257a1b0
Browse repository at this point
Rust: Account for the 'secure' and 'partitioned' attributes.
geoffw0
committed
2654aff
View commit details
Copy full SHA for 2654aff
Browse repository at this point
Rust: Make state transition / barrier nodes more reliable.
geoffw0
committed
a3ed83b
View commit details
Copy full SHA for a3ed83b
Browse repository at this point
Rust: Fix an issue with the local flow.
geoffw0
committed
94afc82
View commit details
Copy full SHA for 94afc82
Browse repository at this point
Rust: Add qhelp and examples.
geoffw0
committed
bd07350
View commit details
Copy full SHA for bd07350
Browse repository at this point
Rust: Add examples as tests (and fix them).
geoffw0
committed
4662e42
View commit details
Copy full SHA for 4662e42
Browse repository at this point
Rust: Add the new query to suite lists.
geoffw0
committed
ae90253
View commit details
Copy full SHA for ae90253
Browse repository at this point
Rust: Change note.
geoffw0
committed
3de1911
View commit details
Copy full SHA for 3de1911
Browse repository at this point
Apply suggestions from code review
geoffw0
authored
cc9c414
View commit details
Copy full SHA for cc9c414
Browse repository at this point
Apply suggestions from code review
Show description for 5b4632b
geoffw0
and
Copilot
authored
5b4632b
View commit details
Copy full SHA for 5b4632b
Browse repository at this point
Rust: Address another tiny suggestion from review.
geoffw0
committed
43ac75e
View commit details
Copy full SHA for 43ac75e
Browse repository at this point
Rust: Autoformat.
geoffw0
committed
6362884
View commit details
Copy full SHA for 6362884
Browse repository at this point
Rust: Fix warning by making the query a path-problem.
geoffw0
committed
86c8c3c
View commit details
Copy full SHA for 86c8c3c
Browse repository at this point
Rust: The test needs to have Source tags now.
geoffw0
committed
266624d
View commit details
Copy full SHA for 266624d
Browse repository at this point
Commits on Sep 26, 2025
Update rust/ql/src/queries/security/CWE-614/InsecureCookie.qhelp
Show description for 21fe142
geoffw0
and
paldepind
authored
21fe142
View commit details
Copy full SHA for 21fe142
Browse repository at this point
Rust: Split off cookieOptionalBarrier predicate (as suggested) and expand / clarify the QLDoc.
geoffw0
committed
57f8487
View commit details
Copy full SHA for 57f8487
Browse repository at this point
Rust: Remove a sentance from the qhelp.
geoffw0
committed
f458149
View commit details
Copy full SHA for f458149
Browse repository at this point
Rust: Use US spelling in comment.
geoffw0
committed
77e7898
View commit details
Copy full SHA for 77e7898
Browse repository at this point
You can’t perform that action at this time.