Skip to content

/ codeql

New pull request New
129 Open 4,295 Closed
129 Open 4,295 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Python: Port Flask models to use API graphs
Python
#5103 opened Feb 5, 2021 by tausbn • Draft
Java: CWE-489 Query to detect main() method in servlets
Java documentation
#5102 opened Feb 5, 2021 by luchua-bc • Review required
Java : Add Log Injection Vulnerability
Java documentation
#5099 opened Feb 4, 2021 by porcupineyhairs • Changes requested
@owen-mc
24
JS: Add more models for XML parsers
Awaiting evaluation JS
#5098 opened Feb 4, 2021 by erik-krogh • Draft
Javascript: Improve performance of ExplicitInvokeNode::getArgument
JS
#5095 opened Feb 4, 2021 by alexet • Approved
1
Add GoKit to Go supported library list
documentation
#5092 opened Feb 4, 2021 by sauyon • Review required
C++: Remove flow from pointer indirection to pointer from DefaultTaintTracking
C++ WIP
#5089 opened Feb 4, 2021 by MathiasVP • Review required
2
JS: Add flowsteps for Immutable collections
Awaiting evaluation JS
#5087 opened Feb 4, 2021 by erik-krogh • Review required
C++: Fix FormattingFunction regression.
C++
#5085 opened Feb 4, 2021 by geoffw0 • Review required
2
Adding queries related to the Solorigate campaign
C# documentation
#5083 opened Feb 3, 2021 by raulgarciamsft • Changes requested
66
Update CodeQL Style guide to mention acronyms
documentation
#5080 opened Feb 3, 2021 by RasmusWL • Draft
6
Python: Add modeling of Flask blueprints
Python documentation
#5078 opened Feb 3, 2021 by RasmusWL • Review required
Python: Port py/weak-crypto-key to use type-tracking
Python documentation
#5075 opened Feb 2, 2021 by RasmusWL • Draft
JS: add query for Express-HBS LFR
JS
#5066 opened Feb 1, 2021 by CaptainFreak • Approved
22
Python: Better path explanations
Python
#5057 opened Jan 29, 2021 by yoff • Draft
Python: Remove dubious local source nodes
Python
#5055 opened Jan 29, 2021 by tausbn • Review required
3
JS: Detect more route-handlers by adding more type-tracking steps
Awaiting evaluation JS WIP
#5045 opened Jan 28, 2021 by erik-krogh • Review required
JS: Add RemoteFlowSource.isFromClientSideUrl
JS
#5033 opened Jan 27, 2021 by asgerf • Draft
Dataflow: Add subpaths query predicate.
Java
#5032 opened Jan 27, 2021 by aschackmull • Draft
JS: Drive-by changes from Redux modelling
JS
#5019 opened Jan 26, 2021 by asgerf • Draft
Java: Queries to detect remote source flow origins to CORS header.
Java documentation
#5008 opened Jan 24, 2021 by torque59 • Review required
23
Java: Fix NashornScriptEngine detection in ScriptEngine query
Java documentation
#5006 opened Jan 23, 2021 by p0wn4j • Review required
6
C#: Use shared SSA implementation for `{Pre,Base}Ssa`
C#
#4998 opened Jan 21, 2021 by hvitved • Draft
Docs: Add outline for CWE coverage page
depends on internal PR documentation
#4997 opened Jan 21, 2021 by shati-patel • Draft
Java: CWE-652: Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')
Java documentation
#4994 opened Jan 21, 2021 by haby0 • Review required
21
ProTip! Follow long discussions with comments:>50.