CodeQL 2.25.2 introduces support for defining custom sanitizers and validators declaratively using models-as-data (YAML data extensions), eliminating the need to write custom CodeQL code. Two new extensible predicates are available: `barrierModel` for stopping taint flow at sanitized outputs, and `barrierGuardModel` for stopping taint flow based on boolean conditional checks. This feature works across C/C++, C#, Go, Java/Kotlin, JavaScript/TypeScript, Python, Ruby, and Rust, and can be packaged into CodeQL model packs for use with GitHub code scanning.
Sort: