Skip to content

/ codeql

New pull request New
128 Open 4,087 Closed
128 Open 4,087 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
C++: share `TOperand` across IR stages
C# C++
#4825 opened Dec 15, 2020 by rdmarsh2 • Draft
@dbartol
C++: Add cases in the Allocation model.
C++
#4824 opened Dec 14, 2020 by geoffw0 • Review required
3
JS: Flag more results in js/redos
Awaiting evaluation JS
#4823 opened Dec 14, 2020 by erik-krogh • Review required
C#: Extract init only accessors from CIL
C#
#4821 opened Dec 14, 2020 by tamasvajk • Draft
JavaScript: Add experimental Electron queries
JS documentation
#4818 opened Dec 14, 2020 by tosmolka • Review required
Java: Password in Java EE configuration files
Java documentation
#4814 opened Dec 12, 2020 by luchua-bc • Review required
25
C++: Query for multiplications used in allocations.
C++
#4810 opened Dec 10, 2020 by geoffw0 • Draft 0 of 7
5
JavaScript: Allow specifying additional remote flow sources through JSON.
JS documentation
#4802 opened Dec 9, 2020 by max-schaefer • Review required
1
10
Python: Model sources from stdlib HTTP servers
Python documentation
#4797 opened Dec 8, 2020 by RasmusWL • Changes requested
16
Docs: add an example .qls with a tag regex
documentation
#4793 opened Dec 7, 2020 by rdmarsh2 • Review required
1
C#: Relational patterns
C# documentation
#4789 opened Dec 7, 2020 by tamasvajk • Draft
2
C++: Support longer access paths in IR field flow
C++
#4784 opened Dec 5, 2020 by MathiasVP • Draft
3
Python: Add modeling of django class based view handlers
Python documentation
#4779 opened Dec 4, 2020 by RasmusWL • Review required
C#: Improve CIL attribute decoding
C#
#4775 opened Dec 3, 2020 by tamasvajk • Review required
JS: better support for forms in js/xss-through-dom
JS
#4774 opened Dec 3, 2020 by erik-krogh • Review required
JS: Make SourceNode::Range non-recursive and make strings SourceNodes
JS
#4772 opened Dec 3, 2020 by asgerf • Review required
3
Java: Add unsafe hostname verification query and remove existing overlapping query
Java documentation
#4771 opened Dec 2, 2020 by intrigus-lgtm • Review required 0 of 1
27
Data flow: Cache `ParamUpdateReturnKind::getAnOutNode()`
C# C++ Java Python
#4765 opened Dec 2, 2020 by hvitved • Draft
3
Python: Enclosing callable for synthetic arguments
Python
#4757 opened Dec 1, 2020 by yoff • Review required
2
Python: Dataflow, unpacking assignment
Python
#4752 opened Nov 30, 2020 by yoff • Changes requested
2
JS: Move `js/log-injection` into non-experimental.
JS documentation
#4751 opened Nov 30, 2020 by erik-krogh • Review required
2
C++: Model classes in StdString.qll.
C++
#4750 opened Nov 30, 2020 by geoffw0 • Review required
1
Python: Add some command injection tests
Python
#4749 opened Nov 30, 2020 by RasmusWL • Review required
2
Java: Add flow steps through methods of `java.nio.Buffer` and its subclasses
Java
#4743 opened Nov 27, 2020 by joefarebrother • Review required
3
Python: Force read- and store steps to add nodes.
Python
#4737 opened Nov 27, 2020 by yoff • Review required
8
ProTip! no:milestone will show everything without a milestone.
You can’t perform that action at this time.