Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
weiling103
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
src
on
master
User selector
All users
All time
Commit history
Commits on Jul 9, 2020
Merge pull request #3932 from max-schaefer/portals-additions
Show description for e167b87
semmle-qlci
authored
e167b87
View commit details
Copy full SHA for e167b87
View code at this point
Browse repository at this point
JavaScript: Add support for global variables to portals.
Max Schaefer
committed
1c47260
View commit details
Copy full SHA for 1c47260
View code at this point
Browse repository at this point
JavaScript: Broaden scope of imports considered relevant to portals.
Show description for c40ef05
Max Schaefer
committed
c40ef05
View commit details
Copy full SHA for c40ef05
View code at this point
Browse repository at this point
JavaScript: Add utility predicate `getBasePortal(i)`.
Show description for 8b4b578
Max Schaefer
committed
8b4b578
View commit details
Copy full SHA for 8b4b578
View code at this point
Browse repository at this point
Commits on Jul 7, 2020
C++/C#/JavaScript/Python: Port Location qldoc update.
aschackmull
committed
67db1df
View commit details
Copy full SHA for 67db1df
View code at this point
Browse repository at this point
Commits on Jul 6, 2020
Merge pull request #3892 from asger-semmle/js/redirect-starts-with-sanitizer
Show description for fe0c5a9
semmle-qlci
authored
fe0c5a9
View commit details
Copy full SHA for fe0c5a9
View code at this point
Browse repository at this point
Merge pull request #3851 from erik-krogh/queryStuff
Show description for 6d80445
semmle-qlci
authored
6d80445
View commit details
Copy full SHA for 6d80445
View code at this point
Browse repository at this point
autoformat
erik-krogh
authored
9a94462
View commit details
Copy full SHA for 9a94462
View code at this point
Browse repository at this point
Merge pull request #3905 from erik-krogh/unsafeShellTypo
Show description for 13c3513
semmle-qlci
authored
13c3513
View commit details
Copy full SHA for 13c3513
View code at this point
Browse repository at this point
Merge pull request #3844 from github/esbena-patch-3
Show description for 73d606d
semmle-qlci
authored
73d606d
View commit details
Copy full SHA for 73d606d
View code at this point
Browse repository at this point
fix typo in js/shell-command-constructed-from-input
erik-krogh
committed
8585312
View commit details
Copy full SHA for 8585312
View code at this point
Browse repository at this point
Commits on Jul 3, 2020
JS: Add StartsWith sanitizer
asgerf
committed
b5104ae
View commit details
Copy full SHA for b5104ae
View code at this point
Browse repository at this point
Commits on Jul 2, 2020
autoformat
erik-krogh
committed
078b6a8
View commit details
Copy full SHA for 078b6a8
View code at this point
Browse repository at this point
Merge remote-tracking branch 'upstream/master' into queryStuff
erik-krogh
committed
261821b
View commit details
Copy full SHA for 261821b
View code at this point
Browse repository at this point
Merge pull request #3805 from esbena/js/seal-freeze-flow
Show description for b5c8f22
semmle-qlci
authored
b5c8f22
View commit details
Copy full SHA for b5c8f22
View code at this point
Browse repository at this point
split out type-tracking into two predicates, to avoid catastrophic join-order
erik-krogh
committed
2b0a091
View commit details
Copy full SHA for 2b0a091
View code at this point
Browse repository at this point
Merge pull request #3829 from asger-semmle/js/xss-substr
Show description for 97128b1
semmle-qlci
authored
97128b1
View commit details
Copy full SHA for 97128b1
View code at this point
Browse repository at this point
Merge pull request #3832 from asger-semmle/js/typescript-in-html-files3
Show description for bfb734e
semmle-qlci
authored
bfb734e
View commit details
Copy full SHA for bfb734e
View code at this point
Browse repository at this point
Commits on Jul 1, 2020
Merge pull request #3619 from erik-krogh/CWE022-Correctness
Show description for 45ef3ec
semmle-qlci
authored
45ef3ec
View commit details
Copy full SHA for 45ef3ec
View code at this point
Browse repository at this point
Merge pull request #3853 from max-schaefer/js/canonical-names
Show description for 66a6fe7
semmle-qlci
authored
66a6fe7
View commit details
Copy full SHA for 66a6fe7
View code at this point
Browse repository at this point
JavaScript: Make `getADefinition` and `getAnAccess` available on all `CanonicalName`s.
Max Schaefer
committed
a6d8073
View commit details
Copy full SHA for a6d8073
View code at this point
Browse repository at this point
JS: rename predicate
esbena
committed
3ca6031
View commit details
Copy full SHA for 3ca6031
View code at this point
Browse repository at this point
JS: teach the dataflow library identity functions Object.freeze/seal
esbena
committed
75451e3
View commit details
Copy full SHA for 75451e3
View code at this point
Browse repository at this point
also use new type-tracking in isUserControlledObject
erik-krogh
committed
8227010
View commit details
Copy full SHA for 8227010
View code at this point
Browse repository at this point
Commits on Jun 30, 2020
recognize access to a query object through function calls
erik-krogh
committed
ed48efe
View commit details
Copy full SHA for ed48efe
View code at this point
Browse repository at this point
Merge pull request #3845 from max-schaefer/js/walk-sync
Show description for 224289c
semmle-qlci
authored
224289c
View commit details
Copy full SHA for 224289c
View code at this point
Browse repository at this point
Merge pull request #3824 from asger-semmle/js/static-regexp-capture-group-step
Show description for 42bca1a
semmle-qlci
authored
42bca1a
View commit details
Copy full SHA for 42bca1a
View code at this point
Browse repository at this point
Merge pull request #3833 from asger-semmle/js/vue-class-component
Show description for c850938
semmle-qlci
authored
c850938
View commit details
Copy full SHA for c850938
View code at this point
Browse repository at this point
Merge pull request #3834 from asger-semmle/js/vue-classification
Show description for 15a0297
semmle-qlci
authored
15a0297
View commit details
Copy full SHA for 15a0297
View code at this point
Browse repository at this point
JavaScript: Fix module name for `walk-sync` package.
Max Schaefer
committed
62d56a3
View commit details
Copy full SHA for 62d56a3
View code at this point
Browse repository at this point
Update UnsafeHtmlExpansion-transformed.html
esbena
authored
80981ec
View commit details
Copy full SHA for 80981ec
View code at this point
Browse repository at this point
JS: support additional promisification of the fs-module members
esbena
committed
c7f67fa
View commit details
Copy full SHA for c7f67fa
View code at this point
Browse repository at this point
Commits on Jun 29, 2020
JS: Fix incorrect classification of Vue files
asgerf
committed
326c7af
View commit details
Copy full SHA for 326c7af
View code at this point
Browse repository at this point
Merge pull request #3823 from dellalibera/js/fancy-log
Show description for da8725a
semmle-qlci
authored
da8725a
View commit details
Copy full SHA for da8725a
View code at this point
Browse repository at this point
Merge pull request #3806 from erik-krogh/moreDownloads
Show description for b3e68ef
semmle-qlci
authored
b3e68ef
View commit details
Copy full SHA for b3e68ef
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.