Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
998
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
src
experimental
Security
on
codeql-cli/v2.13.5
User selector
All users
All time
Commit history
Commits on May 15, 2023
Merge pull request #12748 from JarLob/yi
Show description for 20e8ee8
asgerf
authored
20e8ee8
View commit details
Copy full SHA for 20e8ee8
View code at this point
Browse repository at this point
Commits on Apr 19, 2023
Moved into experimental
natejohnson05
committed
78229bb
View commit details
Copy full SHA for 78229bb
View code at this point
Browse repository at this point
Commits on Apr 13, 2023
Simplify `exists` according to the warning
JarLob
committed
a8a6913
View commit details
Copy full SHA for a8a6913
View code at this point
Browse repository at this point
Commits on Apr 7, 2023
Fix comment.
JarLob
committed
72b66ff
View commit details
Copy full SHA for 72b66ff
View code at this point
Browse repository at this point
Commits on Apr 3, 2023
Remove label sanitizer because it is prone to race conditions
JarLob
committed
39ff3c7
View commit details
Copy full SHA for 39ff3c7
View code at this point
Browse repository at this point
Commits on Dec 14, 2022
Tag all security queries in supported languages' experimental directories with an experimental tag
turbo
committed
4ec401a
View commit details
Copy full SHA for 4ec401a
View code at this point
Browse repository at this point
Commits on Nov 23, 2022
JS: fix two typos
erik-krogh
committed
2eb6b1a
View commit details
Copy full SHA for 2eb6b1a
View code at this point
Browse repository at this point
Commits on Oct 27, 2022
Merge pull request #10727 from erik-krogh/js-last-msg
Show description for bbdda9e
erik-krogh
authored
bbdda9e
View commit details
Copy full SHA for bbdda9e
View code at this point
Browse repository at this point
Commits on Oct 26, 2022
removed unnecessary getACall and fixed formatting
bananabr
committed
64da2ce
View commit details
Copy full SHA for 64da2ce
View code at this point
Browse repository at this point
Commits on Oct 25, 2022
Update javascript/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql
Show description for f7ace6f
bananabr
and
erik-krogh
authored
f7ace6f
View commit details
Copy full SHA for f7ace6f
View code at this point
Browse repository at this point
TokenBuiltFromUuid formatting
bananabr
committed
5b08048
View commit details
Copy full SHA for 5b08048
View code at this point
Browse repository at this point
TokenAssignmentValueSink refactor
bananabr
committed
375edf7
View commit details
Copy full SHA for 375edf7
View code at this point
Browse repository at this point
Commits on Oct 24, 2022
Minor formatting fixes
bananabr
committed
a2ad924
View commit details
Copy full SHA for a2ad924
View code at this point
Browse repository at this point
Commits on Oct 22, 2022
Tokens built from predictable UUIDs
bananabr
committed
066ffb7
View commit details
Copy full SHA for 066ffb7
View code at this point
Browse repository at this point
Commits on Oct 7, 2022
fix some more style-guide violations in the alert-messages
erik-krogh
committed
368f847
View commit details
Copy full SHA for 368f847
View code at this point
Browse repository at this point
Commits on Aug 25, 2022
rename more acronyms
erik-krogh
committed
cc7a9ef
View commit details
Copy full SHA for cc7a9ef
View code at this point
Browse repository at this point
Commits on May 24, 2022
use more set literals instead of big disjunctions
erik-krogh
committed
a404a8c
View commit details
Copy full SHA for a404a8c
View code at this point
Browse repository at this point
Commits on May 12, 2022
Merge pull request #9021 from erik-krogh/actions
Show description for 4bef451
erik-krogh
authored
4bef451
View commit details
Copy full SHA for 4bef451
View code at this point
Browse repository at this point
Commits on May 9, 2022
Merge pull request #8724 from erik-krogh/postMessage
Show description for 53b26eb
erik-krogh
authored
53b26eb
View commit details
Copy full SHA for 53b26eb
View code at this point
Browse repository at this point
Commits on May 5, 2022
move YAMLMappingLikeNode to the standard library
erik-krogh
committed
1f00ba8
View commit details
Copy full SHA for 1f00ba8
View code at this point
Browse repository at this point
Commits on May 4, 2022
move js/actions/injection out of experimental
erik-krogh
committed
2a65d1d
View commit details
Copy full SHA for 2a65d1d
View code at this point
Browse repository at this point
move the Actions API out of experimental
erik-krogh
committed
9db67d4
View commit details
Copy full SHA for 9db67d4
View code at this point
Browse repository at this point
Commits on Apr 12, 2022
move `js/resource-exhaustion` out of experimental
erik-krogh
committed
8fb54c3
View commit details
Copy full SHA for 8fb54c3
View code at this point
Browse repository at this point
move js/missing-postmessageorigin-verification out of experimental
erik-krogh
committed
18532ba
View commit details
Copy full SHA for 18532ba
View code at this point
Browse repository at this point
Commits on Feb 11, 2022
fix most ql-for-ql warnings in JS
erik-krogh
committed
a1c5724
View commit details
Copy full SHA for a1c5724
View code at this point
Browse repository at this point
Commits on Jan 26, 2022
promote the js/jwt-missing-verification query out of exeprimental
erik-krogh
committed
de63394
View commit details
Copy full SHA for de63394
View code at this point
Browse repository at this point
Commits on Jan 21, 2022
Merge pull request #7679 from erik-krogh/ql-doc-style
Show description for b02f1c8
codeql-ci
authored
b02f1c8
View commit details
Copy full SHA for b02f1c8
View code at this point
Browse repository at this point
Commits on Jan 20, 2022
fix most issues found by ql/class-doc-style in JS
erik-krogh
committed
5780161
View commit details
Copy full SHA for 5780161
View code at this point
Browse repository at this point
simplify expressions that could be type-casts
erik-krogh
committed
4e8e3a7
View commit details
Copy full SHA for 4e8e3a7
View code at this point
Browse repository at this point
Commits on Dec 17, 2021
Fix non-US spelling of 'behavior'
nickrolfe
committed
28912c5
View commit details
Copy full SHA for 28912c5
View code at this point
Browse repository at this point
Commits on Nov 13, 2021
apply the explicit this patch to new code
erik-krogh
committed
f0c5a80
View commit details
Copy full SHA for f0c5a80
View code at this point
Browse repository at this point
Commits on Nov 4, 2021
Merge pull request #6714 from valeria-meli/javascript/ssrf
Show description for 2895428
codeql-ci
authored
2895428
View commit details
Copy full SHA for 2895428
View code at this point
Browse repository at this point
Commits on Nov 3, 2021
formatting qll file
luciaromeroML
committed
e509385
View commit details
Copy full SHA for e509385
View code at this point
Browse repository at this point
Commits on Nov 2, 2021
Merge branch 'main' into ldap
erik-krogh
committed
7a96b8e
View commit details
Copy full SHA for 7a96b8e
View code at this point
Browse repository at this point
Merge pull request #6934 from erik-krogh/more-instanceof
Show description for d5e2026
codeql-ci
authored
d5e2026
View commit details
Copy full SHA for d5e2026
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.