Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
448
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
on
codeql-cli/v2.19.3
User selector
All users
All time
Commit history
Commits on Oct 30, 2024
Update InsecureCookie.qhelp
Show description for 5f31adc
smowton
authored
5f31adc
View commit details
Copy full SHA for 5f31adc
View code at this point
Browse repository at this point
Fix typo and grammar in InsecureCookie.qhelp
charmander
authored
a979988
View commit details
Copy full SHA for a979988
View code at this point
Browse repository at this point
Commits on Aug 15, 2024
Update CookieInjection.ql to remove period
felicitymay
authored
fcb2b57
View commit details
Copy full SHA for fcb2b57
View code at this point
Browse repository at this point
Commits on Jul 29, 2024
Merge branch 'main' into python-cookie-concept-promote
joefarebrother
committed
1127b08
View commit details
Copy full SHA for 1127b08
View code at this point
Browse repository at this point
Commits on Jul 24, 2024
Code reveiw suggestions. correction in changenote + style in example
Show description for 8f714c6
joefarebrother
and
yoff
authored
8f714c6
View commit details
Copy full SHA for 8f714c6
View code at this point
Browse repository at this point
Commits on Jul 23, 2024
Add unit tests
joefarebrother
committed
93f70b3
View commit details
Copy full SHA for 93f70b3
View code at this point
Browse repository at this point
Use a 3-valued newtype for hasSameSiteAttribute
joefarebrother
committed
226e4eb
View commit details
Copy full SHA for 226e4eb
View code at this point
Browse repository at this point
Add documentation
joefarebrother
committed
df5569f
View commit details
Copy full SHA for df5569f
View code at this point
Browse repository at this point
Promote insecure cookie query
joefarebrother
committed
033dd9f
View commit details
Copy full SHA for 033dd9f
View code at this point
Browse repository at this point
Commits on Jul 19, 2024
Update documentation
joefarebrother
committed
baf5133
View commit details
Copy full SHA for baf5133
View code at this point
Browse repository at this point
Commits on Jul 16, 2024
Move to cwe-20
joefarebrother
committed
8d93c3a
View commit details
Copy full SHA for 8d93c3a
View code at this point
Browse repository at this point
Add documentation
joefarebrother
committed
e885f1f
View commit details
Copy full SHA for e885f1f
View code at this point
Browse repository at this point
Add test cases + remove redundant import
joefarebrother
committed
983bdb9
View commit details
Copy full SHA for 983bdb9
View code at this point
Browse repository at this point
Promoto cookie injection query
joefarebrother
committed
123214c
View commit details
Copy full SHA for 123214c
View code at this point
Browse repository at this point
Commits on Jul 1, 2024
Update python/ql/src/Security/CWE-798/HardcodedCredentials.ql
Show description for 96048f9
GeekMasher
and
RasmusWL
authored
96048f9
View commit details
Copy full SHA for 96048f9
View code at this point
Browse repository at this point
Commits on Jun 28, 2024
feat(python): Add Hardcoded Credentials MaD support
GeekMasher
committed
1cf9714
View commit details
Copy full SHA for 1cf9714
View code at this point
Browse repository at this point
Commits on Jun 3, 2024
Update qhelp with `https:/example.com` handling
RasmusWL
committed
121ca12
View commit details
Copy full SHA for 121ca12
View code at this point
Browse repository at this point
Commits on May 8, 2024
Merge branch 'main' into python-promote-header-injection
joefarebrother
committed
ab23d0a
View commit details
Copy full SHA for ab23d0a
View code at this point
Browse repository at this point
Commits on Apr 25, 2024
delete outdated deprecations
erik-krogh
committed
baa31e1
View commit details
Copy full SHA for baa31e1
View code at this point
Browse repository at this point
Commits on Apr 24, 2024
Rename to response splitting
joefarebrother
committed
1dce2eb
View commit details
Copy full SHA for 1dce2eb
View code at this point
Browse repository at this point
Fix qldoc formatting
joefarebrother
committed
9d56f3e
View commit details
Copy full SHA for 9d56f3e
View code at this point
Browse repository at this point
Add documentation
joefarebrother
committed
daa31b5
View commit details
Copy full SHA for daa31b5
View code at this point
Browse repository at this point
Move headers injection query and concept from experimental to main
joefarebrother
committed
6021d92
View commit details
Copy full SHA for 6021d92
View code at this point
Browse repository at this point
Commits on Apr 22, 2024
Python: Change all remaining occurrences of `StrConst`
Show description for 1c68c98
tausbn
committed
1c68c98
View commit details
Copy full SHA for 1c68c98
View code at this point
Browse repository at this point
Commits on Apr 12, 2024
Python: Add alert provenance plumbing.
aschackmull
committed
a8fc100
View commit details
Copy full SHA for a8fc100
View code at this point
Browse repository at this point
Commits on Mar 18, 2024
Merge pull request #15729 from yoff/python/hardcoded-credentials-without-pointsto
Show description for 44ab36f
yoff
authored
44ab36f
View commit details
Copy full SHA for 44ab36f
View code at this point
Browse repository at this point
Commits on Feb 26, 2024
python: rewrite `HardcodedCredentials` away from `PointsTo`
Show description for 3eb9491
yoff
committed
3eb9491
View commit details
Copy full SHA for 3eb9491
View code at this point
Browse repository at this point
Python: Add precision to NoSQL query
Show description for 1cfac50
RasmusWL
committed
1cfac50
View commit details
Copy full SHA for 1cfac50
View code at this point
Browse repository at this point
Commits on Jan 22, 2024
Update qhelp to mention solution using urlparse.
Max Schaefer
committed
a4639c7
View commit details
Copy full SHA for a4639c7
View code at this point
Browse repository at this point
Commits on Dec 20, 2023
Python: Mention more sanitisation options in py/url-redirection qhelp.
Max Schaefer
committed
66fe32a
View commit details
Copy full SHA for 66fe32a
View code at this point
Browse repository at this point
Commits on Nov 8, 2023
Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link
Show description for 43d9d2c
RasmusWL
authored
43d9d2c
View commit details
Copy full SHA for 43d9d2c
View code at this point
Browse repository at this point
Commits on Nov 7, 2023
Update dead link.
geoffw0
committed
e8a466a
View commit details
Copy full SHA for e8a466a
View code at this point
Browse repository at this point
Commits on Oct 27, 2023
Address review comment.
Max Schaefer
committed
104700f
View commit details
Copy full SHA for 104700f
View code at this point
Browse repository at this point
Commits on Oct 26, 2023
Autoformat.
Max Schaefer
committed
08cc8b8
View commit details
Copy full SHA for 08cc8b8
View code at this point
Browse repository at this point
Include more details in the message for `py/weak-cryptographic-algorithm`.
Show description for 3939167
Max Schaefer
committed
3939167
View commit details
Copy full SHA for 3939167
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
Max Schaefer