Skip to content

/ codeql

New pull request New
131 Open 4,058 Closed
131 Open 4,058 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
C++: Support longer access paths in IR field flow
C++
#4784 opened Dec 5, 2020 by MathiasVP • Draft
1
C++: More use of set literals.
C++
#4783 opened Dec 4, 2020 by geoffw0 • Review required
2
C#: Add tests for `PersistentCookie.ql`
C#
#4781 opened Dec 4, 2020 by hvitved • Review required
C#: Add missing CFG edges for nested `finally` blocks
C#
#4780 opened Dec 4, 2020 by hvitved • Draft
Python: Add modeling of django class based view handlers
Python documentation
#4779 opened Dec 4, 2020 by RasmusWL • Review required
JS: add new prototype pollution query and reorganize
Awaiting evaluation JS documentation
#4778 opened Dec 4, 2020 by asgerf • Review required
C#: Improve join-order in `DefaultToString.qll`
C#
#4777 opened Dec 4, 2020 by hvitved • Draft
C#: Improve CIL attribute decoding
C#
#4775 opened Dec 3, 2020 by tamasvajk • Draft
JS: better support for forms in js/xss-through-dom
JS
#4774 opened Dec 3, 2020 by erik-krogh • Draft 0 of 2
Python: Path injection improvements
Python documentation
#4773 opened Dec 3, 2020 by RasmusWL • Review required
JS: Make SourceNode::Range non-recursive and make strings SourceNodes
JS
#4772 opened Dec 3, 2020 by asgerf • Review required
3
[Java] Triplicate UnsafeCert query so it can be split.
Java documentation
#4771 opened Dec 2, 2020 by intrigus-lgtm • Review required
8
Update query and library links for new locations
Python documentation
#4768 opened Dec 2, 2020 by jf205 • Approved
10
Data flow: Cache `ParamUpdateReturnKind::getAnOutNode()`
C# C++ Java Python
#4765 opened Dec 2, 2020 by hvitved • Draft
3
JS: Merge SSTI query into js/code-injection
JS documentation
#4762 opened Dec 1, 2020 by asgerf • Review required
9
C#: Extract enum underlying type from IL
C#
#4761 opened Dec 1, 2020 by tamasvajk • Review required
2
C#: Improve array argument CIL extraction for attributes
C#
#4759 opened Dec 1, 2020 by tamasvajk • Review required
Python: Enclosing callable for synthetic arguments
Python
#4757 opened Dec 1, 2020 by yoff • Review required
2
Python: Dataflow, unpacking assignment
Python
#4752 opened Nov 30, 2020 by yoff • Changes requested
2
JS: Move `js/log-injection` into non-experimental.
JS documentation
#4751 opened Nov 30, 2020 by erik-krogh • Review required
1
C++: Model classes in StdString.qll.
C++
#4750 opened Nov 30, 2020 by geoffw0 • Review required
1
Python: Add some command injection tests
Python
#4749 opened Nov 30, 2020 by RasmusWL • Draft
JavaScript: Factor out HTML extractor
JS depends on internal PR
#4744 opened Nov 27, 2020 by sauyon • Review required
6
Java: Add flow steps through methods of `java.nio.Buffer` and its subclasses
Java
#4743 opened Nov 27, 2020 by joefarebrother • Review required
2
C#: WIP: extract underlying enum type from CIL
C#
#4742 opened Nov 27, 2020 by tamasvajk • Draft
1
ProTip! Updated in the last three days: updated:>2020-12-03.
You can’t perform that action at this time.