github / codeql

Watch 50
Star 1k
Fork 273

Code
Issues 127
Pull requests 109
Actions
Projects 0
Security
Insights

Code Issues 127 Pull requests 109 Projects 0 Actions Security Pulse

Labels 23 Milestones 3

New pull request New

109 Open 3,170 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

JS: Minor fixes to package export detection

#3662 opened Jun 9, 2020 by asgerf • Draft

JS: Add query to detect sensitive information flowing into compiled artifact

#3661 opened Jun 9, 2020 by erik-krogh 0 of 5

Python: Fix ClassValue.isSequence() and isMapping()

Python

#3658 opened Jun 9, 2020 by RasmusWL • Review required

Data flow: Allow nodes to be hidden from path explanations

C# C++ Java

#3657 opened Jun 9, 2020 by hvitved • Review required

JS: support rest-patterns inside property patterns

#3656 opened Jun 9, 2020 by erik-krogh • Draft

JS: Fix 'match' call in StringOps::RegExpTest

#3655 opened Jun 9, 2020 by asgerf • Approved

C++: Speed up IRGuardCondition::controlsBlock

C++

#3654 opened Jun 9, 2020 by jbj • Review required

Java: Improve modelling of Spring requests, flow steps and XSS sinks

#3653 opened Jun 9, 2020 by lcartey • Review required 0 of 3

C#: Refactor data-flow predicates defined by dispatch

#3652 opened Jun 9, 2020 by hvitved • Review required

JS: initial version of IncompleteMultiCharacterSanitization.ql

#3651 opened Jun 9, 2020 by esbena • Approved

C++: Fix data-flow dispatch perf with globals 1.24

C++

#3650 opened Jun 9, 2020 by jbj • Review required 1.24

[javascript] CodeQL query to detect missing origin validation in cross-origin communication via postMessage

#3646 opened Jun 8, 2020 by dellalibera • Review required

JS: Add PreCallGraphStep and use some array steps in type tracking

Awaiting evaluation JS

#3641 opened Jun 8, 2020 by asgerf • Draft 0 of 2

Python: Handle Python 3.8 `Enum._convert`

Python

#3640 opened Jun 8, 2020 by RasmusWL • Review required

JS: Track functions through props and returns

Awaiting evaluation JS

#3639 opened Jun 8, 2020 by asgerf • Draft 0 of 2

JS: Adds basic support for `webpack-dev-server` and importing from neighbouring packages.

Awaiting evaluation JS

#3630 opened Jun 5, 2020 by erik-krogh • Draft 0 of 3

Python: Fix points-to for unrelated modules with the same name.

Awaiting evaluation Python WIP

#3628 opened Jun 5, 2020 by tausbn • Changes requested

JS: Ignore returned exprs in defensive programming query

Awaiting evaluation JS

#3627 opened Jun 5, 2020 by asgerf • Review required

2 1

JS: Fix inconsistencies in js/path-injection

#3619 opened Jun 4, 2020 by erik-krogh • Review required 3 of 3

JS: Don't treat a property of a tainted object as tainted when there exists a dominating write

Awaiting evaluation JS

#3613 opened Jun 3, 2020 by erik-krogh • Draft 0 of 2

C++: Share `TInstruction` across IR stages

C# C++

#3612 opened Jun 3, 2020 by dbartol • Draft

C#: Add call-sensitivity to data-flow call resolution

#3610 opened Jun 3, 2020 by hvitved • Review required

Java: Backport missing CFG edge fix for switch expressions

Java

#3608 opened Jun 3, 2020 by aschackmull • Review required 1.24

JS: Introduce SharedTaintStep

#3603 opened Jun 2, 2020 by asgerf • Draft

Add Log4J 2 and a new search string secret

Java

#3600 opened Jun 2, 2020 by luchua-bc • Review required

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Add no:assignee to see everything that’s not assigned.