Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
998
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
lib
semmle
on
codeql-cli/v2.13.5
User selector
All users
All time
Commit history
Commits on Jun 8, 2023
Merge pull request #13283 from asgerf/js/restrict-regex-search-function
Show description for 76a8e98
asgerf
authored
76a8e98
View commit details
Copy full SHA for 76a8e98
View code at this point
Browse repository at this point
Commits on Jun 2, 2023
JS: fix compilation
erik-krogh
committed
9000243
View commit details
Copy full SHA for 9000243
View code at this point
Browse repository at this point
delete old deprecations
erik-krogh
committed
44b6366
View commit details
Copy full SHA for 44b6366
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/Regexp.qll
Show description for 77d2799
asgerf
and
erik-krogh
authored
77d2799
View commit details
Copy full SHA for 77d2799
View code at this point
Browse repository at this point
Commits on Jun 1, 2023
stop recursive fromRhs related to getLaterBaseAccess
erik-krogh
committed
8eed1a9
View commit details
Copy full SHA for 8eed1a9
View code at this point
Browse repository at this point
Merge branch 'main' into jcogs33/update-javascript-sink-kinds
jcogs33
authored
3886ebf
View commit details
Copy full SHA for 3886ebf
View code at this point
Browse repository at this point
Commits on May 26, 2023
JS: Be more conservative about flagging "search" call arguments as regex
asgerf
committed
2629ec1
View commit details
Copy full SHA for 2629ec1
View code at this point
Browse repository at this point
Commits on May 23, 2023
Merge pull request #12975 from tyage/support-sub-modules
Show description for e658177
erik-krogh
authored
e658177
View commit details
Copy full SHA for e658177
View code at this point
Browse repository at this point
Commits on May 22, 2023
update qldoc
erik-krogh
authored
653cd86
View commit details
Copy full SHA for 653cd86
View code at this point
Browse repository at this point
Commits on May 17, 2023
implement `isShellInterpreted` on `ExecActionsCall`
erik-krogh
committed
cbd7601
View commit details
Copy full SHA for cbd7601
View code at this point
Browse repository at this point
require arguments to be shell interpreted to be flagged by indirect-command-injection
erik-krogh
committed
3293a55
View commit details
Copy full SHA for 3293a55
View code at this point
Browse repository at this point
Commits on May 16, 2023
JS: update 'credentials[%]' sink kind to 'credentials-%'
Jami Cogswell
authored and
Jami Cogswell
committed
359f6ff
View commit details
Copy full SHA for 359f6ff
View code at this point
Browse repository at this point
JS: update 'command-line-injection' sink kind to 'command-injection'
Jami Cogswell
authored and
Jami Cogswell
committed
7880e9e
View commit details
Copy full SHA for 7880e9e
View code at this point
Browse repository at this point
Commits on May 15, 2023
Merge pull request #12748 from JarLob/yi
Show description for 20e8ee8
asgerf
authored
20e8ee8
View commit details
Copy full SHA for 20e8ee8
View code at this point
Browse repository at this point
Commits on May 13, 2023
formatting
tyage
committed
93af0d0
View commit details
Copy full SHA for 93af0d0
View code at this point
Browse repository at this point
JS: ignoresub pkgs in node_modules directory
tyage
committed
6f66c04
View commit details
Copy full SHA for 6f66c04
View code at this point
Browse repository at this point
Commits on May 12, 2023
JS: Make implicit this receivers explicit
kaspersv
committed
189f851
View commit details
Copy full SHA for 189f851
View code at this point
Browse repository at this point
Commits on May 11, 2023
JS: Make implicit this receivers explicit
kaspersv
committed
489a73c
View commit details
Copy full SHA for 489a73c
View code at this point
Browse repository at this point
Commits on May 10, 2023
Update javascript/ql/lib/semmle/javascript/NPM.qll
Show description for f6a8cd2
tyage
and
erik-krogh
authored
f6a8cd2
View commit details
Copy full SHA for f6a8cd2
View code at this point
Browse repository at this point
Merge pull request #13044 from cklin/javascript-locatable-tostring-join-ordering
Show description for f4b5f39
asgerf
authored
f4b5f39
View commit details
Copy full SHA for f4b5f39
View code at this point
Browse repository at this point
Merge pull request #12978 from asgerf/js/github-actions-sources
Show description for c376eeb
asgerf
authored
c376eeb
View commit details
Copy full SHA for c376eeb
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/security/dataflow/IndirectCommandInjectionCustomizations.qll
Show description for b282543
asgerf
and
erik-krogh
authored
b282543
View commit details
Copy full SHA for b282543
View code at this point
Browse repository at this point
Commits on May 9, 2023
JS: Prevent join order regression
kaspersv
committed
c7d72e0
View commit details
Copy full SHA for c7d72e0
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for 891a94c
JarLob
and
asgerf
authored
891a94c
View commit details
Copy full SHA for 891a94c
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for 1ad23c5
JarLob
and
asgerf
authored
1ad23c5
View commit details
Copy full SHA for 1ad23c5
View code at this point
Browse repository at this point
Commits on May 4, 2023
JS: Add pragma[only_bind_out] to Locatable::toString() calls
cklin
committed
0984fc7
View commit details
Copy full SHA for 0984fc7
View code at this point
Browse repository at this point
Merge pull request #13016 from kaspersv/kaspersv/js-explicit-this-receivers3
Show description for 65deb9d
kaspersv
authored
65deb9d
View commit details
Copy full SHA for 65deb9d
View code at this point
Browse repository at this point
Commits on May 3, 2023
JS: Restrict getInput to indirect command injection query
asgerf
committed
1a99563
View commit details
Copy full SHA for 1a99563
View code at this point
Browse repository at this point
JS: Make implicit this receivers explicit
kaspersv
committed
67950c8
View commit details
Copy full SHA for 67950c8
View code at this point
Browse repository at this point
JS, Python, Ruby: Make implicit this receivers explicit
kaspersv
committed
aca2ace
View commit details
Copy full SHA for aca2ace
View code at this point
Browse repository at this point
JS: Make implicit this receivers explicit
kaspersv
committed
efdaffe
View commit details
Copy full SHA for efdaffe
View code at this point
Browse repository at this point
JS: List safe environment variables in IndirectCommandInjection
asgerf
committed
b9ad417
View commit details
Copy full SHA for b9ad417
View code at this point
Browse repository at this point
JS: Clarify the difference between context and input sources
asgerf
committed
4c6711d
View commit details
Copy full SHA for 4c6711d
View code at this point
Browse repository at this point
JS: check scoped package and normal package
tyage
committed
22f5b7a
View commit details
Copy full SHA for 22f5b7a
View code at this point
Browse repository at this point
Commits on May 2, 2023
Merge pull request #12825 from smiddy007/JS-Allow-Truncated-Hash-Forge-NonKeyCipher
Show description for 67afbee
asgerf
authored
67afbee
View commit details
Copy full SHA for 67afbee
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
