2.17.4 deleted all these java local queries - is there any point in having this suite?
Java/Kotlin
Removed local query variants. The results pertaining to local sources can be found using the non-local counterpart query. As an example, the results previously found by java/unvalidated-url-redirection-local can be found by java/unvalidated-url-redirection, if the local threat model is enabled. The removed queries are java/path-injection-local, java/command-line-injection-local, java/xss-local, java/sql-injection-local, java/http-response-splitting-local, java/improper-validation-of-array-construction-local, java/improper-validation-of-array-index-local, java/tainted-format-string-local, java/tainted-arithmetic-local, java/unvalidated-url-redirection-local, java/xxe-local and java/tainted-numeric-cast-local.
Now that python threat-model support is added, these packs/suites/libs/queries are likely supported via threat-models: local with the default queries.
- githubsecuritylab/codeql-java-queries:suites/java-local.qls
- githubsecuritylab/codeql-python-queries:suites/python-local.qls
Also used in synthetics.yml if they are being removed.
2.17.4 deleted all these java local queries - is there any point in having this suite?
Now that python threat-model support is added, these packs/suites/libs/queries are likely supported via
threat-models: localwith the default queries.Also used in synthetics.yml if they are being removed.