Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
449
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
on
cs/netcore-3.0b
User selector
All users
All time
Commit history
Commits on Nov 13, 2019
Merge pull request #2270 from erik-krogh/reflectiveExpr
Show description for b11a742
semmle-qlci
authored
b11a742
View commit details
Copy full SHA for b11a742
View code at this point
Browse repository at this point
Commits on Nov 12, 2019
Revert "JavaScript: Improve double-escaping query"
max-schaefer
authored
155cea7
View commit details
Copy full SHA for 155cea7
View code at this point
Browse repository at this point
Merge pull request #2285 from asger-semmle/dataflow-syntax-examples
Show description for 6c9f926
semmle-qlci
authored
6c9f926
View commit details
Copy full SHA for 6c9f926
View code at this point
Browse repository at this point
fix tests after change from tabs to spaces
erik-krogh
committed
6f6c4c4
View commit details
Copy full SHA for 6f6c4c4
View code at this point
Browse repository at this point
Commits on Nov 11, 2019
correctly weed out benign calls inside attributes
erik-krogh
committed
67b38ed
View commit details
Copy full SHA for 67b38ed
View code at this point
Browse repository at this point
Merge pull request #2263 from sauyon/master
Show description for c4f958d
Felicity Chapman
authored
c4f958d
View commit details
Copy full SHA for c4f958d
View code at this point
Browse repository at this point
Commits on Nov 8, 2019
JS: member -> property
asger-semmle
committed
a2ff4e9
View commit details
Copy full SHA for a2ff4e9
View code at this point
Browse repository at this point
Update javascript/ql/src/semmle/javascript/dataflow/Nodes.qll
Show description for 2a473fb
asger-semmle
and
max-schaefer
authored
2a473fb
View commit details
Copy full SHA for 2a473fb
View code at this point
Browse repository at this point
Update javascript/ql/src/semmle/javascript/dataflow/DataFlow.qll
Show description for 4ad03a9
asger-semmle
and
max-schaefer
authored
4ad03a9
View commit details
Copy full SHA for 4ad03a9
View code at this point
Browse repository at this point
JS: Add syntax examples to DataFlow classes
asger-semmle
committed
53d470d
View commit details
Copy full SHA for 53d470d
View code at this point
Browse repository at this point
Merge pull request #2260 from max-schaefer/js/_min
Show description for 9b346b1
esbena
authored
9b346b1
View commit details
Copy full SHA for 9b346b1
View code at this point
Browse repository at this point
Merge pull request #2276 from asger-semmle/inclusion-test
Show description for 867ed16
semmle-qlci
authored
867ed16
View commit details
Copy full SHA for 867ed16
View code at this point
Browse repository at this point
Commits on Nov 7, 2019
Merge pull request #2251 from asger-semmle/barrier-guard-improvements
Show description for e65271d
semmle-qlci
authored
e65271d
View commit details
Copy full SHA for e65271d
View code at this point
Browse repository at this point
Merge pull request #2224 from asger-semmle/access-paths-with-source-node-root
Show description for f79c2a7
semmle-qlci
authored
f79c2a7
View commit details
Copy full SHA for f79c2a7
View code at this point
Browse repository at this point
JS: Generalize StringOps::Includes to ::InclusionTest
asger-semmle
committed
8544850
View commit details
Copy full SHA for 8544850
View code at this point
Browse repository at this point
fix expected output
erik-krogh
committed
0c080a8
View commit details
Copy full SHA for 0c080a8
View code at this point
Browse repository at this point
add test for getEnclosingExpr
erik-krogh
committed
232e875
View commit details
Copy full SHA for 232e875
View code at this point
Browse repository at this point
add DataFlow::getEnclosingExpr to get the an Expr from a potentially reflective call
erik-krogh
committed
e4f6f41
View commit details
Copy full SHA for e4f6f41
View code at this point
Browse repository at this point
Merge pull request #2267 from max-schaefer/js/qltest-extractor-options
Show description for 3a7f9a5
semmle-qlci
authored
3a7f9a5
View commit details
Copy full SHA for 3a7f9a5
View code at this point
Browse repository at this point
JavaScript: Classify files with names ending in `_min` as minified.
Show description for e314869
Max Schaefer
committed
e314869
View commit details
Copy full SHA for e314869
View code at this point
Browse repository at this point
Update links to OWASP cheat sheet
Sauyon Lee
committed
0040c9f
View commit details
Copy full SHA for 0040c9f
View code at this point
Browse repository at this point
Commits on Nov 6, 2019
JavaScript: Move `--html all` extractor options into `options` file.
Max Schaefer
committed
54e40a8
View commit details
Copy full SHA for 54e40a8
View code at this point
Browse repository at this point
Merge pull request #2102 from erik-krogh/deferredModel
Show description for d9beb54
asger-semmle
authored
d9beb54
View commit details
Copy full SHA for d9beb54
View code at this point
Browse repository at this point
Merge pull request #2254 from asger-semmle/for-of-propread
Show description for f73caac
semmle-qlci
authored
f73caac
View commit details
Copy full SHA for f73caac
View code at this point
Browse repository at this point
JavaScript: Remove `--source-type module` extractor options.
Max Schaefer
committed
725059d
View commit details
Copy full SHA for 725059d
View code at this point
Browse repository at this point
JavaScript: Move `--extract-program-text` extractor options into `options` files.
Max Schaefer
committed
3ad5af7
View commit details
Copy full SHA for 3ad5af7
View code at this point
Browse repository at this point
JavaScript: Move `--tolerate-parse-errors` extractor options into `options` file.
Max Schaefer
committed
6b81720
View commit details
Copy full SHA for 6b81720
View code at this point
Browse repository at this point
JavaScript: Move `--html elements` extractor options into `options` file.
Max Schaefer
committed
5681565
View commit details
Copy full SHA for 5681565
View code at this point
Browse repository at this point
JavaScript: Remove `--platform node` extractor options.
Max Schaefer
committed
8fdf629
View commit details
Copy full SHA for 8fdf629
View code at this point
Browse repository at this point
JavaScript: Replace `--externs` extractor flag with `/** @externs */` comment.
Max Schaefer
committed
4848372
View commit details
Copy full SHA for 4848372
View code at this point
Browse repository at this point
JavaScript: Remove a redundant extractor option.
Max Schaefer
committed
1fa8c43
View commit details
Copy full SHA for 1fa8c43
View code at this point
Browse repository at this point
JavaScript: Add `options` files with `--experimental` extractor options.
Max Schaefer
committed
79f1079
View commit details
Copy full SHA for 79f1079
View code at this point
Browse repository at this point
JavaScript: Remove remaining `--experimental` extractor options.
Max Schaefer
committed
a4bf361
View commit details
Copy full SHA for a4bf361
View code at this point
Browse repository at this point
change "e.g." to "for example" in qldoc
erik-krogh
committed
19554ff
View commit details
Copy full SHA for 19554ff
View code at this point
Browse repository at this point
JS: Update GlobalAccessPaths test
asger-semmle
committed
81723ab
View commit details
Copy full SHA for 81723ab
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.