Skip to content
New pull request New
197 Open 6,414 Closed
197 Open 6,414 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
QL: add query detecting block comments in a position where a QLDoc should be
QL-for-QL
#8374 opened Mar 8, 2022 by erik-krogh • Draft
Ruby: Fix incorrect parsing of ranges
Ruby
#8373 opened Mar 8, 2022 by hvitved • Draft
Bump ATM pack version numbers to 0.1.0
JS
#8372 opened Mar 8, 2022 by henrymercer • Approved
C++: Factor must-flow predicates out of two queries
C++ no-change-note-required
#8368 opened Mar 8, 2022 by MathiasVP • Approved
18
Qldoc test test
Ruby
#8367 opened Mar 8, 2022 by aibaars • Draft
CI: add QLdoc test
Ruby
#8365 opened Mar 8, 2022 by aibaars • Review required
[Java] Add CompileTimeConstantExpr.getStringified method
documentation Java
#8360 opened Mar 8, 2022 by JLLeitschuh • Review required
7
C++: Upgrade cpp/system-data-exposure to high precision
C++ documentation
#8358 opened Mar 7, 2022 by geoffw0 • Approved
1
2
Java: Add JDBC connection SSRF sinks
Java
#8357 opened Mar 7, 2022 by p0wn4j • Review required
1
Incomplete url string sanitization
documentation JS Ruby
#8354 opened Mar 7, 2022 by aibaars • Review required
1
QL: add query detecting inconsistent deprecations
QL-for-QL
#8351 opened Mar 7, 2022 by erik-krogh • Draft
Ruby: Cache TRegExpParent
Ruby
#8349 opened Mar 7, 2022 by hvitved • Draft
1
C#: ExternalAPI implementation for Telemetry.
C# Java
#8348 opened Mar 7, 2022 by michaelnebel • Draft
1
remove all deprecations that are over a year old
C# C++ documentation Java JS Python
#8347 opened Mar 7, 2022 by erik-krogh • Review required
22
Java: Add MyBatis's AbstractSQL sinks
Java
#8345 opened Mar 6, 2022 by jorgectf • Review required
9
python: minimal CSRF implementation
documentation Python
#8340 opened Mar 4, 2022 by yoff • Draft
Python: Fix a bunch of QL warnings
C# C++ Java no-change-note-required Python Ruby
#8336 opened Mar 4, 2022 by tausbn • Approved
27
JS: Use TypeTracker::continue when doing taint steps
JS
#8333 opened Mar 4, 2022 by hvitved • Draft
1
Ruby: Use taint tracking instead of type tracking to define regExpSource
no-change-note-required Ruby
#8332 opened Mar 4, 2022 by hvitved • Review required
1
C#: Capture Summary models.
C# Java no-change-note-required
#8329 opened Mar 4, 2022 by michaelnebel • Changes requested
12
Enforcing consistent casing of acronyms
C# C++ documentation Java JS Python QL-for-QL Ruby
#8323 opened Mar 3, 2022 by erik-krogh • Review required
1
7
C#: Remove legacy odasa support
C# depends on internal PR documentation
#8322 opened Mar 3, 2022 by hvitved • Approved
1
3
C++: Handle initialization of structured bindings via bitwise copy in extractor
C++ depends on internal PR
#8320 opened Mar 3, 2022 by jketema • Review required
C++: New query cpp/potential-system-data-exposure
C++ depends on internal PR documentation
#8318 opened Mar 3, 2022 by geoffw0 • Review required
13
Java: Add query to detect clickjacking
documentation Java
#8308 opened Mar 2, 2022 by ahmed532009 • Review required
2
ProTip! Exclude everything labeled bug with -label:bug.