Skip to content

Java/Ruby: Replace recursive algorithm string builders - #22837

Open
jketema wants to merge 1 commit into
github:mainfrom
jketema:refactor-non-cpp-recursive-string-concats
Open

jketema wants to merge 1 commit into
github:mainfrom
jketema:refactor-non-cpp-recursive-string-concats

Conversation

@jketema

@jketema jketema commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

No description provided.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jketema
jketema marked this pull request as ready for review October 16, 2026 19:22
Copilot AI max review requested due to automatic review settings October 16, 2026 19:22
@jketema
jketema requested review from a team as code owners October 16, 2026 19:22
@jketema jketema added the no-change-note-required This PR does not need a change note label Oct 16, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The refactor preserves existing regex construction, with only optional cleanup remaining.

0 open findings

What changed in this PR

Replaces recursive algorithm-string builders in Java and Ruby CodeQL security analysis with ordered concatenation aggregates.

Changes:

  • Preserves descending algorithm order and | separators.
  • Updates regex helpers to use parameterless builders.
File Description
ruby/​ql/​lib/​codeql/​ruby/​security/​OpenSSL.qll Replaces secure and insecure algorithm builders with aggregates.
java/​ql/​src/​experimental/​quantum/​Examples/​BrokenCrypto.ql Replaces the insecure algorithm builder with an aggregate.
java/​ql/​lib/​semmle/​code/​java/​security/​Encryption.qll Replaces the secure algorithm builder with an aggregate.

🧠 Review effort: Max


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@owen-mc owen-mc left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems like a simple refactor.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Java no-change-note-required This PR does not need a change note Ruby

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants