github / codeql

Watch 50
Star 1k
Fork 274

Code
Issues 128
Pull requests 115
Actions
Projects 0
Security
Insights

Code Issues 128 Pull requests 115 Projects 0 Actions Security Pulse

Labels 23 Milestones 3

New pull request New

115 Open 3,180 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

JS: Add query to detect bad code sanitizers

#3680 opened Jun 10, 2020 by erik-krogh • Draft

JS: Restrict domValueRef to known DOM properties

#3679 opened Jun 10, 2020 by asgerf • Approved

Fix incorrect java.util.regex.Pattern name in specification

#3678 opened Jun 10, 2020 by Marcono1234 • Approved

AST class reference for go

#3675 opened Jun 10, 2020 by owen-mc • Review required

[java] Merged with 3665 （https://github.com/github/codeql/pull/3665）

Java

#3674 opened Jun 10, 2020 by haby0 • Review required

C++: Add tests for taint through swap

C++

#3673 opened Jun 10, 2020 by MathiasVP • Review required

JS: add initial version of ServerCrash.ql

#3672 opened Jun 10, 2020 by esbena 0 of 5

C++: Field flow through conflated ChiInstructions

C++

#3670 opened Jun 10, 2020 by MathiasVP • Draft

Update CONTRIBUTING.md to clarify that CLAs are no longer required

#3669 opened Jun 10, 2020 by sj • Review required

[java] CodeQL query, Increase fastjson detection. Improve RemoteFlowSource class, support SpringMvc.

Java

#3665 opened Jun 10, 2020 by haby0 • Review required

Create resolve-queries script

#3664 opened Jun 9, 2020 by jhutchings1 • Review required

JS: Introduce query to detect biased random number generators

#3663 opened Jun 9, 2020 by erik-krogh

JS: Minor fixes to package export detection

#3662 opened Jun 9, 2020 by asgerf

JS: Add query to detect sensitive information flowing into compiled artifact

#3661 opened Jun 9, 2020 by erik-krogh 0 of 5

JS: support rest-patterns inside property patterns

#3656 opened Jun 9, 2020 by erik-krogh

C++: Speed up IRGuardCondition::controlsBlock

C++

#3654 opened Jun 9, 2020 by jbj • Review required

Java: Improve modelling of Spring requests, flow steps and XSS sinks

#3653 opened Jun 9, 2020 by lcartey • Review required 0 of 3

C#: Refactor data-flow predicates defined by dispatch

#3652 opened Jun 9, 2020 by hvitved • Review required

JS: initial version of IncompleteMultiCharacterSanitization.ql

#3651 opened Jun 9, 2020 by esbena • Approved

C++: Fix data-flow dispatch perf with globals 1.24

C++

#3650 opened Jun 9, 2020 by jbj • Review required 1.24

[javascript] CodeQL query to detect missing origin validation in cross-origin communication via postMessage

#3646 opened Jun 8, 2020 by dellalibera • Review required

JS: Add PreCallGraphStep and use some array steps in type tracking

Awaiting evaluation JS

#3641 opened Jun 8, 2020 by asgerf • Draft 0 of 2

JS: Track functions through props and returns

Awaiting evaluation JS

#3639 opened Jun 8, 2020 by asgerf • Draft 0 of 2

JS: Adds basic support for `webpack-dev-server` and importing from neighbouring packages.

Awaiting evaluation JS

#3630 opened Jun 5, 2020 by erik-krogh • Draft 0 of 3

Python: Fix points-to for unrelated modules with the same name.

Awaiting evaluation Python WIP

#3628 opened Jun 5, 2020 by tausbn • Changes requested

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Follow long discussions with comments:>50.