github / codeql

Watch 81
Star 1.8k
Fork 434

Code
Issues 197
Pull requests 127
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 27 Milestones 6

New pull request New

127 Open 4,120 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Python: Add Tornado source modeling

Python documentation

#4869 opened Dec 22, 2020 by RasmusWL • Review required

Java: Fix taint-step handling for untrusted-data-external-api

Java

#4867 opened Dec 22, 2020 by RasmusWL • Review required

Python: Model Django request handler without route

Python documentation

#4864 opened Dec 21, 2020 by RasmusWL • Review required

JS: add typeof sanitizer to js/shell-command-constructed-from-input

Awaiting evaluation JS

#4862 opened Dec 21, 2020 by erik-krogh • Changes requested

Data flow: Add `LocalCallContext` to `localFlowEntry`

C# C++ Java Python

#4861 opened Dec 21, 2020 by hvitved • Review required

C#: Merge queries `FormatInvalid.ql`, `FormatMissingArgument.ql`, and `FormatUnusedArgument.ql`

C# documentation

#4858 opened Dec 21, 2020 by hvitved • Review required

C#: Move `Expr::hasValue()` to `DotNet::Expr`

#4857 opened Dec 21, 2020 by hvitved • Review required

Java: Insecure LDAP authentication

Java documentation

#4854 opened Dec 21, 2020 by luchua-bc • Review required

JS: Better detection of superliniear regular expressions

#4847 opened Dec 18, 2020 by erik-krogh • Review required

C#: More data-flow caching

C# C++ Java Python documentation

#4837 opened Dec 16, 2020 by hvitved • Draft

C#: Extract function pointer types from CIL

#4835 opened Dec 16, 2020 by tamasvajk • Draft 0 of 4

Data flow: Add `Ap` column to `localStep`

C# C++ Java Python

#4829 opened Dec 15, 2020 by hvitved • Draft

Python: add source nodes

Python

#4828 opened Dec 15, 2020 by yoff • Draft

C++: share `TOperand` across IR stages

C# C++

#4825 opened Dec 15, 2020 by rdmarsh2 • Draft

JS: Flag more results in js/redos

#4823 opened Dec 14, 2020 by erik-krogh • Review required

C#: Extract init only accessors from CIL

C# documentation

#4821 opened Dec 14, 2020 by tamasvajk • Review required 5 of 5

JavaScript: Add experimental Electron queries

JS documentation

#4818 opened Dec 14, 2020 by tosmolka • Review required

Java: Password in Java EE configuration files

Java documentation

#4814 opened Dec 12, 2020 by luchua-bc • Review required

C++: Query for multiplications used in allocations.

C++ documentation

#4810 opened Dec 10, 2020 by geoffw0 • Approved 4 of 7

Docs: add an example .qls with a tag regex

documentation

#4793 opened Dec 7, 2020 by rdmarsh2 • Review required

C#: Relational patterns

C# documentation

#4789 opened Dec 7, 2020 by tamasvajk • Draft

C++: Support longer access paths in IR field flow

C++

#4784 opened Dec 5, 2020 by MathiasVP • Review required

JS: better support for forms in js/xss-through-dom

#4774 opened Dec 3, 2020 by erik-krogh • Review required

JS: Make SourceNode::Range non-recursive and make strings SourceNodes

#4772 opened Dec 3, 2020 by asgerf • Review required

Java: Add unsafe hostname verification query and remove existing overlapping query

Java documentation

#4771 opened Dec 2, 2020 by intrigus-lgtm • Review required 0 of 1

Previous 1 2 3 4 5 6 Next

Previous Next

ProTip! Exclude everything labeled bug with -label:bug.