github / codeql

Watch 54
Star 1.1k
Fork 296

Code
Issues 146
Pull requests 107
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 24 Milestones 3

New pull request New

107 Open 3,340 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

C++: use IR TaintTracking::Configuration in UncontrolledFormatString

#3867 opened Jul 1, 2020 by rdmarsh2 • Review required

C++: Move queries into `cpp/ql/queries` directory

#3866 opened Jul 1, 2020 by dbartol • Draft

JS: only calculate getStringValue for concatenation roots

#3864 opened Jul 1, 2020 by erik-krogh • Draft

C++: Private Data File/Buffer Writes

#3861 opened Jul 1, 2020 by dilanbhalla • Review required

Python: Module not intended for production

Python

#3859 opened Jun 30, 2020 by dilanbhalla • Review required

Add jOOQ methods as SQL Injection Sinks

Java

#3855 opened Jun 30, 2020 by JLLeitschuh • Review required

JS: recognize access to a req.query object through function calls

Awaiting evaluation JS

#3851 opened Jun 30, 2020 by erik-krogh • Review required 2 of 3

Dataflow: Add documentation for language maintainers.

C# C++ Java Python documentation

#3850 opened Jun 30, 2020 by aschackmull • Changes requested

JS: support simple callbacks for setting up Express route handlers

Awaiting evaluation JS

#3848 opened Jun 30, 2020 by erik-krogh • Draft 1 of 2

C#: Factor C++ parts out of autobuilder

C# C++ depends on internal PR

#3846 opened Jun 30, 2020 by hvitved • Approved

Update UnsafeHtmlExpansion-transformed.html

#3844 opened Jun 30, 2020 by esbena • Approved

Java: Uncaught servlet exception

Java

#3839 opened Jun 29, 2020 by luchua-bc • Review required

Data flow: Use precise call contexts in `flowFwd()`

C# C++ Java

#3838 opened Jun 29, 2020 by hvitved • Draft

[js/xss] add interpretsValueAsJavaScript predicate

#3835 opened Jun 29, 2020 by Raz0r • Review required

JS: Support TypeScript in HTML/Vue files

#3832 opened Jun 29, 2020 by asgerf • Approved

1 4

Shared dataflow: Field flow

#3830 opened Jun 29, 2020 by yoff • Draft

JS: Fix handling of .hash in XSS query

Awaiting evaluation JS

#3829 opened Jun 28, 2020 by asgerf • Approved

1 2

Add missing java.nio.file.Files methods to FileReadWrite.qll

Java

#3820 opened Jun 26, 2020 by Marcono1234 • Review required

Fix outdated query console link

#3817 opened Jun 26, 2020 by Marcono1234 • Review required

Java: Add remote source of Android intent extra

Java

#3812 opened Jun 25, 2020 by luchua-bc • Review required

Python: Function/Class Naming Convention (Syntax)

Python

#3810 opened Jun 25, 2020 by dilanbhalla • Changes requested

JS: teach the dataflow library identity functions Object.freeze/seal

#3805 opened Jun 25, 2020 by esbena • Review required 1 of 1

Arbitrary user-controlled read/write on user-controlled path

Java

#3794 opened Jun 24, 2020 by intrigus-lgtm • Draft

Python: Add annotated call-graph tests

Python

#3790 opened Jun 24, 2020 by RasmusWL • Review required

C++ Memory Unsafe Functions

C++

#3789 opened Jun 24, 2020 by dilanbhalla • Changes requested

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Filter pull requests by the default branch with base:master.