github / codeql

Watch 54
Star 1.1k
Fork 296

Code
Issues 145
Pull requests 111
Actions
Projects
Security
Insights

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Labels 24 Milestones 3

New pull request New

111 Open 3,330 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Reviews

Filter by reviews

No reviews Review required Approved review Changes requested

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

C++: Private Data File/Buffer Writes

#3861 opened Jul 1, 2020 by dilanbhalla • Review required

C++: QLDoc cleanup

C++

#3860 opened Jun 30, 2020 by dbartol • Review required

Python: Module not intended for production

#3859 opened Jun 30, 2020 by dilanbhalla • Review required

C++: Remove big-step relation in flow-through code

C# C++ Java

#3857 opened Jun 30, 2020 by jbj • Draft

Add jOOQ methods as SQL Injection Sinks

#3855 opened Jun 30, 2020 by JLLeitschuh • Review required

Data flow: Replace `getErasedRepr()` and `Node::getTypeBound()` with `getNodeType()`

C# C++ Java

#3854 opened Jun 30, 2020 by hvitved • Review required

JavaScript: Make `getADefinition` and `getAnAccess` available on all `CanonicalName`s.

#3853 opened Jun 30, 2020 by max-schaefer • Review required

JS: recognize access to a req.query object through function calls

Awaiting evaluation JS

#3851 opened Jun 30, 2020 by erik-krogh • Draft

Dataflow: Add documentation for language maintainers.

C# C++ Java Python documentation

#3850 opened Jun 30, 2020 by aschackmull • Changes requested

JS: support simple callbacks for setting up Express route handlers

Awaiting evaluation JS

#3848 opened Jun 30, 2020 by erik-krogh • Draft

C#: Factor C++ parts out of autobuilder

C# C++ depends on internal PR

#3846 opened Jun 30, 2020 by hvitved • Review required

Update UnsafeHtmlExpansion-transformed.html

#3844 opened Jun 30, 2020 by esbena • Approved

Java: Uncaught servlet exception

Java

#3839 opened Jun 29, 2020 by luchua-bc • Review required

Data flow: Use precise call contexts in `flowFwd()`

C# C++ Java

#3838 opened Jun 29, 2020 by hvitved • Draft

[js/xss] add interpretsValueAsJavaScript predicate

#3835 opened Jun 29, 2020 by Raz0r • Review required

JS: Support TypeScript in HTML/Vue files

#3832 opened Jun 29, 2020 by asgerf • Review required

1 3

Shared dataflow: Field flow

#3830 opened Jun 29, 2020 by yoff • Draft

JS: Fix handling of .hash in XSS query

Awaiting evaluation JS

#3829 opened Jun 28, 2020 by asgerf • Approved

1 2

Add missing java.nio.file.Files methods to FileReadWrite.qll

Java

#3820 opened Jun 26, 2020 by Marcono1234 • Review required

Fix outdated query console link

#3817 opened Jun 26, 2020 by Marcono1234 • Review required

Java: Add remote source of Android intent extra

Java

#3812 opened Jun 25, 2020 by luchua-bc • Review required

Python: Function/Class Naming Convention (Syntax)

Python

#3810 opened Jun 25, 2020 by dilanbhalla • Changes requested

JS: teach the dataflow library identity functions Object.freeze/seal

Awaiting evaluation JS

#3805 opened Jun 25, 2020 by esbena • Review required 0 of 1

Arbitrary user-controlled read/write on user-controlled path

Java

#3794 opened Jun 24, 2020 by intrigus-lgtm • Draft

Python: Add annotated call-graph tests

Python

#3790 opened Jun 24, 2020 by RasmusWL • Review required

Previous 1 2 3 4 5 Next

Previous Next

ProTip! Filter pull requests by the default branch with base:master.