Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
michael1981
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
on
main
User selector
All users
All time
Commit history
Commits on Dec 17, 2021
Merge pull request #7420 from RasmusWL/ssrf-new
Show description for 5054d5b
codeql-ci
authored
5054d5b
View commit details
Copy full SHA for 5054d5b
View code at this point
Browse repository at this point
Python: Adjust .expected based on new comment
Show description for 83f87f0
RasmusWL
committed
83f87f0
View commit details
Copy full SHA for 83f87f0
View code at this point
Browse repository at this point
Python: Fix typo
RasmusWL
committed
626009e
View commit details
Copy full SHA for 626009e
View code at this point
Browse repository at this point
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/full_partial_test.py
yoff
authored
9866214
View commit details
Copy full SHA for 9866214
View code at this point
Browse repository at this point
Python: Add SSRF qhelp
Show description for 83f1b2c
RasmusWL
committed
83f1b2c
View commit details
Copy full SHA for 83f1b2c
View code at this point
Browse repository at this point
Python: Remove debug predicate
Show description for e309d82
RasmusWL
committed
e309d82
View commit details
Copy full SHA for e309d82
View code at this point
Browse repository at this point
Commits on Dec 16, 2021
Python: Allow `http[s]://` prefix for SSRF
RasmusWL
committed
1d00730
View commit details
Copy full SHA for 1d00730
View code at this point
Browse repository at this point
Python: Add tricky .format SSRF tests
RasmusWL
committed
8d9a797
View commit details
Copy full SHA for 8d9a797
View code at this point
Browse repository at this point
Python: Fix SSRF sanitizer tests
Show description for 6f297f4
RasmusWL
committed
6f297f4
View commit details
Copy full SHA for 6f297f4
View code at this point
Browse repository at this point
Python: Improve full/partial SSRF split
Show description for 4b5599f
RasmusWL
committed
4b5599f
View commit details
Copy full SHA for 4b5599f
View code at this point
Browse repository at this point
Python: Adjust SSRF location to request call
Show description for cb934e1
RasmusWL
committed
cb934e1
View commit details
Copy full SHA for cb934e1
View code at this point
Browse repository at this point
Python: Add interesting test-case
RasmusWL
committed
b1bca85
View commit details
Copy full SHA for b1bca85
View code at this point
Browse repository at this point
Python: Minor adjustments to QLDoc of `HTTP::Client::Request`
RasmusWL
committed
5a7efd0
View commit details
Copy full SHA for 5a7efd0
View code at this point
Browse repository at this point
Python: Apply suggestions from code review
Show description for 6ce1524
RasmusWL
and
yoff
authored
6ce1524
View commit details
Copy full SHA for 6ce1524
View code at this point
Browse repository at this point
Python: Add SSRF queries
Show description for 1cc5e54
RasmusWL
committed
1cc5e54
View commit details
Copy full SHA for 1cc5e54
View code at this point
Browse repository at this point
Commits on Dec 15, 2021
Python: Remove `getResponse` and do manual taint steps
RasmusWL
committed
579de0c
View commit details
Copy full SHA for 579de0c
View code at this point
Browse repository at this point
Python: client request: getUrl => getAUrlPart
Show description for f8fc583
RasmusWL
committed
f8fc583
View commit details
Copy full SHA for f8fc583
View code at this point
Browse repository at this point
Python: Add modeling of `http.client.HTTPResponse`
RasmusWL
committed
6f81685
View commit details
Copy full SHA for 6f81685
View code at this point
Browse repository at this point
Python: Add tests of `http.client.HTTPResponse`
RasmusWL
committed
a5bae30
View commit details
Copy full SHA for a5bae30
View code at this point
Browse repository at this point
Commits on Dec 13, 2021
Fix semver for upgrades references
Show description for 0669ef5
aeisenberg
committed
0669ef5
View commit details
Copy full SHA for 0669ef5
View code at this point
Browse repository at this point
Python: Model `requests` Responses
RasmusWL
committed
cf2ee06
View commit details
Copy full SHA for cf2ee06
View code at this point
Browse repository at this point
Python: Consider taint of client http requests
RasmusWL
committed
35cba17
View commit details
Copy full SHA for 35cba17
View code at this point
Browse repository at this point
Python: Add modeling of `requests`
RasmusWL
committed
b68d280
View commit details
Copy full SHA for b68d280
View code at this point
Browse repository at this point
Python: Add tests of `requests`
Show description for 1ff56d5
RasmusWL
committed
1ff56d5
View commit details
Copy full SHA for 1ff56d5
View code at this point
Browse repository at this point
Python: Alter `disablesCertificateValidation` to fit our needs
Show description for 7bf285a
RasmusWL
committed
7bf285a
View commit details
Copy full SHA for 7bf285a
View code at this point
Browse repository at this point
Python: Clearer sourceType for client response body
RasmusWL
committed
08f6d1a
View commit details
Copy full SHA for 08f6d1a
View code at this point
Browse repository at this point
Python: Add HTTP::Client::Request concept
Show description for 5de79b4
RasmusWL
committed
5de79b4
View commit details
Copy full SHA for 5de79b4
View code at this point
Browse repository at this point
Commits on Dec 10, 2021
Merge pull request #7285 from github/post-release-prep-2.7.3-ddd4ccbb
Show description for 66c1629
aeisenberg
authored
66c1629
View commit details
Copy full SHA for 66c1629
View code at this point
Browse repository at this point
Merge pull request #7246 from tausbn/python/import-star-flow
Show description for d8857c7
yoff
authored
d8857c7
View commit details
Copy full SHA for d8857c7
View code at this point
Browse repository at this point
Merge pull request #7331 from tausbn/python-fix-bad-callsite-points-to-join
Show description for bd9b96e
RasmusWL
authored
bd9b96e
View commit details
Copy full SHA for bd9b96e
View code at this point
Browse repository at this point
Merge pull request #7332 from tausbn/python-fix-bad-scope-entry-points-to-join
Show description for 8ee020f
RasmusWL
authored
8ee020f
View commit details
Copy full SHA for 8ee020f
View code at this point
Browse repository at this point
Commits on Dec 9, 2021
Merge pull request #7330 from tausbn/python-fix-bad-adjacentuseuse-join
Show description for 6d247bf
tausbn
authored
6d247bf
View commit details
Copy full SHA for 6d247bf
View code at this point
Browse repository at this point
Merge pull request #7259 from RasmusWL/even-more-path-injection-sinks
Show description for 8e11c2c
yoff
authored
8e11c2c
View commit details
Copy full SHA for 8e11c2c
View code at this point
Browse repository at this point
Python: A small further performance improvement
Show description for b871342
tausbn
authored
b871342
View commit details
Copy full SHA for b871342
View code at this point
Browse repository at this point
Commits on Dec 8, 2021
Python: Fix bad performance
Show description for 8517eff
tausbn
authored
8517eff
View commit details
Copy full SHA for 8517eff
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.