Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
456
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
lib
semmle
javascript
on
codeql-cli/v2.16.2
User selector
All users
Datepicker
All time
Commit history
Commits on Jan 22, 2024
delete outdated deprecations
erik-krogh
committed
8be7ead
View commit details
Copy full SHA for 8be7ead
View code at this point
Browse repository at this point
Commits on Jan 11, 2024
Merge pull request #15295 from asgerf/js/type-model-export
Show description for 59c9ac7
asgerf
authored
59c9ac7
View commit details
Copy full SHA for 59c9ac7
View code at this point
Browse repository at this point
Merge pull request #13624 from jorgectf/seclab/dotjs
Show description for d782bd9
erik-krogh
authored
d782bd9
View commit details
Copy full SHA for d782bd9
View code at this point
Browse repository at this point
JS: Include sink nodes as base-case when resolving types
asgerf
committed
82cee61
View commit details
Copy full SHA for 82cee61
View code at this point
Browse repository at this point
Commits on Jan 10, 2024
rename PropsTaintStep to PropsFlowStep
Show description for 3000b4b
erik-krogh
and
asgerf
authored
3000b4b
View commit details
Copy full SHA for 3000b4b
View code at this point
Browse repository at this point
Commits on Jan 4, 2024
promote `PropsTaintStep` to a `PreCallGraphStep`
erik-krogh
committed
a9f2b3f
View commit details
Copy full SHA for a9f2b3f
View code at this point
Browse repository at this point
Commits on Dec 19, 2023
Merge branch 'main' into seclab/dotjs
jorgectf
authored
f8cfd69
View commit details
Copy full SHA for f8cfd69
View code at this point
Browse repository at this point
Commits on Dec 14, 2023
Add support for XML attributes in the data flow graph
rvermeulen
committed
133a243
View commit details
Copy full SHA for 133a243
View code at this point
Browse repository at this point
Commits on Dec 12, 2023
Address review comments
hvitved
committed
a46964d
View commit details
Copy full SHA for a46964d
View code at this point
Browse repository at this point
Commits on Dec 10, 2023
JS: Adapt to changes in shared code
hvitved
committed
28373e0
View commit details
Copy full SHA for 28373e0
View code at this point
Browse repository at this point
Commits on Dec 8, 2023
remove redundant imports for JS
erik-krogh
committed
e8f9e36
View commit details
Copy full SHA for e8f9e36
View code at this point
Browse repository at this point
Commits on Nov 30, 2023
Merge branch 'main' into seclab/dotjs
jorgectf
authored
8abd1d9
View commit details
Copy full SHA for 8abd1d9
View code at this point
Browse repository at this point
Commits on Nov 23, 2023
Merge branch 'main' into amammad-js-SQLI
erik-krogh
committed
abb8d65
View commit details
Copy full SHA for abb8d65
View code at this point
Browse repository at this point
fix second round of code review. improve documents, fix better-sqlite3 method
am0o0
committed
60b422a
View commit details
Copy full SHA for 60b422a
View code at this point
Browse repository at this point
Commits on Nov 21, 2023
move TypeORM library file and tests to experimental
Show description for 0328a29
am0o0
committed
0328a29
View commit details
Copy full SHA for 0328a29
View code at this point
Browse repository at this point
fix Query class docstring
am0o0
committed
999ec70
View commit details
Copy full SHA for 999ec70
View code at this point
Browse repository at this point
Commits on Nov 8, 2023
Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link
Show description for 43d9d2c
RasmusWL
authored
43d9d2c
View commit details
Copy full SHA for 43d9d2c
View code at this point
Browse repository at this point
Commits on Nov 7, 2023
Update dead link.
geoffw0
committed
e8a466a
View commit details
Copy full SHA for e8a466a
View code at this point
Browse repository at this point
Commits on Nov 6, 2023
fix Sqlite and BetterSqlite3 issues according to Review
am0o0
committed
c858e49
View commit details
Copy full SHA for c858e49
View code at this point
Browse repository at this point
Commits on Oct 31, 2023
Express.js: add req.path as remote input source
aibaars
committed
5cc94e1
View commit details
Copy full SHA for 5cc94e1
View code at this point
Browse repository at this point
Commits on Oct 30, 2023
Shared: Add neutralModel extensible predicate
Show description for 083be30
hmac
committed
083be30
View commit details
Copy full SHA for 083be30
View code at this point
Browse repository at this point
Commits on Oct 26, 2023
Autoformat.
Max Schaefer
committed
08cc8b8
View commit details
Copy full SHA for 08cc8b8
View code at this point
Browse repository at this point
Merge pull request #14600 from github/max-schaefer/express-rate-limit
Show description for abef848
max-schaefer
authored
abef848
View commit details
Copy full SHA for abef848
View code at this point
Browse repository at this point
Port changes to JavaScript.
Max Schaefer
committed
741735c
View commit details
Copy full SHA for 741735c
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll
Show description for aff848b
max-schaefer
and
erik-krogh
authored
aff848b
View commit details
Copy full SHA for aff848b
View code at this point
Browse repository at this point
JavaScript: Add support for `rateLimit` export from `express-rate-limit` package.
Max Schaefer
committed
bb146a1
View commit details
Copy full SHA for bb146a1
View code at this point
Browse repository at this point
Commits on Oct 22, 2023
add custom query builder and active record querybuilder support
am0o0
committed
e3dbdc3
View commit details
Copy full SHA for e3dbdc3
View code at this point
Browse repository at this point
Commits on Oct 20, 2023
Update UnsafeHtmlConstructionQuery.qll
Show description for ee813c1
flyboss
authored
ee813c1
View commit details
Copy full SHA for ee813c1
View code at this point
Browse repository at this point
Commits on Oct 19, 2023
fix typo
flyboss
committed
8633656
View commit details
Copy full SHA for 8633656
View code at this point
Browse repository at this point
Commits on Oct 16, 2023
Merge pull request #14484 from aibaars/ts53-js
Show description for 0e3369f
aibaars
authored
0e3369f
View commit details
Copy full SHA for 0e3369f
View code at this point
Browse repository at this point
Commits on Oct 12, 2023
Rename DynamicImportExpr::getImport{Attributes => Options}
aibaars
committed
a9a21aa
View commit details
Copy full SHA for a9a21aa
View code at this point
Browse repository at this point
Rename 'getImportAssertion()' to 'getImportAttributes()' in QL library
aibaars
committed
c28004f
View commit details
Copy full SHA for c28004f
View code at this point
Browse repository at this point
Commits on Oct 11, 2023
Merge pull request #14405 from erik-krogh/tagCall
Show description for 85bb14f
erik-krogh
authored
85bb14f
View commit details
Copy full SHA for 85bb14f
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/dataflow/DataFlow.qll
Show description for 6377e92
erik-krogh
and
asgerf
authored
6377e92
View commit details
Copy full SHA for 6377e92
View code at this point
Browse repository at this point
Commits on Oct 10, 2023
update pg :)
am0o0
committed
242f7e1
View commit details
Copy full SHA for 242f7e1
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.