Skip to content

/ codeql

New pull request New
171 Open 5,252 Closed
171 Open 5,252 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Add flow summaries
Python
#6455 opened Aug 9, 2021 by yoff • Draft
Java: Elaborate change note a little
documentation Java no-change-note-required
#6454 opened Aug 9, 2021 by smowton • Approved
Java: Add XXE sinks
documentation Java
#6453 opened Aug 9, 2021 by haby0 • Review required
JS: Migrate to new *Query.qll convention for files only to be imported by queries
JS
#6450 opened Aug 9, 2021 by asgerf • Draft
Python: Avoid bad join in AstExtended::AstNode::containsInScope
Python
#6449 opened Aug 9, 2021 by hvitved • Review required
JS: Update locations in Angular2 test
depends on internal PR JS
#6448 opened Aug 9, 2021 by asgerf • Review required
Java: An experimental query for ignored hostname verification
documentation Java
#6443 opened Aug 8, 2021 by artem-smotrakov • Review required
5
Java: Unsafe deserialization: add support for Jodd JSON library
documentation Java
#6434 opened Aug 5, 2021 by smowton • Review required
1
JS: Use TaintedUrlSuffix flow label to avoid FPs from $(location.hash)
documentation JS
#6433 opened Aug 5, 2021 by asgerf • Approved
1
C#: Adding Membership.GeneratePassword() as a bad source of random data
C# documentation
#6425 opened Aug 5, 2021 by raulgarciamsft • Review required
@tamasvajk
6
Java: Add mybatis mapper.xml sql tainted detection
Java
#6413 opened Aug 4, 2021 by Sharyie • Review required
4
cpp: Add query to detect unsigned integer to signed integer conversio…
C++
#6409 opened Aug 3, 2021 by JordyZomer • Changes requested
12
Track taint for CharSequence#subSequence
Java no-change-note-required
#6407 opened Aug 3, 2021 by bmuskalla • Review required
5
Data flow: Use pruning to reduce call contexts
C# C++ Java no-change-note-required Python
#6404 opened Aug 3, 2021 by hvitved • Review required
@aschackmull
7
JS: Add support for EJS and Mustache-style templating dialects
depends on internal PR documentation JS:changes-sources-or-sinks JS
#6403 opened Aug 3, 2021 by asgerf • Draft
Java: Create new Android Intent Redirection query
documentation Java
#6397 opened Aug 2, 2021 by atorralba • Review required
20
Java: CWE-079 Query to detect XSS with JavaServer Faces (JSF)
documentation Java
#6393 opened Aug 1, 2021 by luchua-bc • Review required
1
Java: Model guava cache package
documentation Java
#6387 opened Jul 29, 2021 by joefarebrother • Review required
4
Java: Introduce queries to capture information about 3rd party API usage
Java
#6376 opened Jul 28, 2021 by bmuskalla • Draft
15
Packaging: Refactor Python into separate library and query packs
documentation Python
#6375 opened Jul 27, 2021 by aeisenberg • Approved
2
Java: Model more of Apache Commons Collections
documentation Java
#6370 opened Jul 27, 2021 by owen-mc • Approved
47
Python: Add missing 'secure' flag in response cookies query
documentation Python
#6360 opened Jul 25, 2021 by jorgectf • Review required
Java: Static initialization vector
documentation Java
#6357 opened Jul 23, 2021 by artem-smotrakov • Review required
11
JS: Fixed description of isUncertain() predicate in CodeQL Language Guides: CodeQL Library for JavaScript
documentation
#6354 opened Jul 22, 2021 by Optixal • Review required
Python: Improve various library modeling
no-change-note-required Python
#6349 opened Jul 22, 2021 by RasmusWL • Review required
ProTip! Follow long discussions with comments:>50.