Skip to content

Java/Ruby: Replace recursive algorithm string builders - #22837

Merged
jketema merged 1 commit into
github:mainfrom
jketema:refactor-non-cpp-recursive-string-concats
Oct 17, 2026
Merged

jketema merged 1 commit into
github:mainfrom
jketema:refactor-non-cpp-recursive-string-concats

Conversation

@jketema

@jketema jketema commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

No description provided.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jketema
jketema marked this pull request as ready for review October 16, 2026 19:22
Copilot AI max review requested due to automatic review settings October 16, 2026 19:22
@jketema
jketema requested review from a team as code owners October 16, 2026 19:22
@jketema jketema added the no-change-note-required This PR does not need a change note label Oct 16, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The refactor preserves existing regex construction, with only optional cleanup remaining.

0 open findings

What changed in this PR

Replaces recursive algorithm-string builders in Java and Ruby CodeQL security analysis with ordered concatenation aggregates.

Changes:

  • Preserves descending algorithm order and | separators.
  • Updates regex helpers to use parameterless builders.
File Description
ruby/​ql/​lib/​codeql/​ruby/​security/​OpenSSL.qll Replaces secure and insecure algorithm builders with aggregates.
java/​ql/​src/​experimental/​quantum/​Examples/​BrokenCrypto.ql Replaces the insecure algorithm builder with an aggregate.
java/​ql/​lib/​semmle/​code/​java/​security/​Encryption.qll Replaces the secure algorithm builder with an aggregate.

🧠 Review effort: Max


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@owen-mc owen-mc left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems like a simple refactor.

@jketema
jketema merged commit ff3231c into github:main Oct 17, 2026
29 of 30 checks passed
@jketema
jketema deleted the refactor-non-cpp-recursive-string-concats branch October 17, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Java no-change-note-required This PR does not need a change note Ruby

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants