Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2k
Star
9.9k
Code
Issues
996
Pull requests
442
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
CWE-079
on
codeql-cli/v2.15.5
User selector
All users
All time
Commit history
Commits on Aug 28, 2023
Python: Move `ReflectedXss` to new dataflow API
RasmusWL
committed
c360346
View commit details
Copy full SHA for c360346
View code at this point
Browse repository at this point
Commits on Oct 7, 2022
fix some more style-guide violations in the alert-messages
erik-krogh
committed
944ca4a
View commit details
Copy full SHA for 944ca4a
View code at this point
Browse repository at this point
Commits on Jun 21, 2022
Python: getAValueReachingRhs -> getAValueReachingSink
asgerf
committed
3a669a8
View commit details
Copy full SHA for 3a669a8
View code at this point
Browse repository at this point
Commits on May 17, 2022
Python: Use API-graph flow for boolean tracking
Show description for ea32299
tausbn
authored
ea32299
View commit details
Copy full SHA for ea32299
View code at this point
Browse repository at this point
Python: Use `API::CallNode`
tausbn
authored
ba8d73c
View commit details
Copy full SHA for ba8d73c
View code at this point
Browse repository at this point
Commits on May 12, 2022
Python: Modernise py/jinja2/autoescape-false
Show description for a0f8e2f
tausbn
authored
a0f8e2f
View commit details
Copy full SHA for a0f8e2f
View code at this point
Browse repository at this point
Commits on Mar 21, 2022
Python: ReflectedXSS -> ReflectedXss for new Query file
Show description for b8dee25
RasmusWL
committed
b8dee25
View commit details
Copy full SHA for b8dee25
View code at this point
Browse repository at this point
Python: Deprecate old non-Query.qll dataflow defs
RasmusWL
committed
695553b
View commit details
Copy full SHA for 695553b
View code at this point
Browse repository at this point
Commits on Mar 11, 2022
patch upper-case acronyms to be PascalCase
erik-krogh
committed
69353bb
View commit details
Copy full SHA for 69353bb
View code at this point
Browse repository at this point
Commits on Jul 12, 2021
Python: Port `py/reflective-xss` to use proper source/sink customization
RasmusWL
committed
b4c0b1b
View commit details
Copy full SHA for b4c0b1b
View code at this point
Browse repository at this point
Commits on Jun 15, 2021
Update security-severity scores
calumgrant
committed
771e686
View commit details
Copy full SHA for 771e686
View code at this point
Browse repository at this point
Commits on Jun 10, 2021
Add security-severity metadata
calumgrant
committed
a594afb
View commit details
Copy full SHA for a594afb
View code at this point
Browse repository at this point
Commits on Feb 17, 2021
Revert "Merge pull request #5171 from RasmusWL/restructure-queries"
Show description for 7afe397
RasmusWL
committed
7afe397
View commit details
Copy full SHA for 7afe397
View code at this point
Browse repository at this point
Commits on Feb 16, 2021
Python: Restructure query file location
Show description for 3a18881
RasmusWL
committed
3a18881
View commit details
Copy full SHA for 3a18881
View code at this point
Browse repository at this point
Commits on Nov 6, 2020
Python: Move ReflectedXSS configuration to own file
RasmusWL
committed
d38c48d
View commit details
Copy full SHA for d38c48d
View code at this point
Browse repository at this point
Commits on Nov 2, 2020
Python: More import fixups
tausbn
committed
fb6a02e
View commit details
Copy full SHA for fb6a02e
View code at this point
Browse repository at this point
Commits on Oct 30, 2020
Python: Promote experimental queries
Show description for f903e4f
tausbn
committed
f903e4f
View commit details
Copy full SHA for f903e4f
View code at this point
Browse repository at this point
Commits on Jul 7, 2020
Python: Autoformat everything using `qlformat`.
Show description for f07a7bf
tausbn
committed
f07a7bf
View commit details
Copy full SHA for f07a7bf
View code at this point
Browse repository at this point
Commits on May 26, 2020
Python: Model Django response sinks that are not vuln to XSS
Show description for 6cba2fe
RasmusWL
committed
6cba2fe
View commit details
Copy full SHA for 6cba2fe
View code at this point
Browse repository at this point
Commits on Mar 30, 2020
Python: Autoformat all `.ql` files.
tausbn
committed
87a9f51
View commit details
Copy full SHA for 87a9f51
View code at this point
Browse repository at this point
Commits on Feb 17, 2020
Python: Fix typos
RasmusWL
committed
6d5a8e4
View commit details
Copy full SHA for 6d5a8e4
View code at this point
Browse repository at this point
Commits on Feb 4, 2020
Python: Add Value.getABooleanValue and Value.getDefiniteBooleanValue
Show description for 6b5b28a
RasmusWL
committed
6b5b28a
View commit details
Copy full SHA for 6b5b28a
View code at this point
Browse repository at this point
Python: Modernise Security/ queries
RasmusWL
committed
e5abfd0
View commit details
Copy full SHA for e5abfd0
View code at this point
Browse repository at this point
Commits on Feb 3, 2020
Python: Consistenly use "a user-provided value"
Show description for 5bc5925
RasmusWL
committed
5bc5925
View commit details
Copy full SHA for 5bc5925
View code at this point
Browse repository at this point
Commits on Jan 31, 2020
Python: Autoformat security
RasmusWL
committed
2648e34
View commit details
Copy full SHA for 2648e34
View code at this point
Browse repository at this point
Commits on Nov 7, 2019
Update links to OWASP cheat sheet
Sauyon Lee
committed
0040c9f
View commit details
Copy full SHA for 0040c9f
View code at this point
Browse repository at this point
Commits on Apr 8, 2019
Fix typo.
markshannon
committed
52b3f77
View commit details
Copy full SHA for 52b3f77
View code at this point
Browse repository at this point
Commits on Apr 4, 2019
Python change 'SimpleHttpResponseTaintSink' to 'HttpResponseTaintSink'.
markshannon
committed
3bcd445
View commit details
Copy full SHA for 3bcd445
View code at this point
Browse repository at this point
Python: make sure all django and flask request sources conform to interface.
markshannon
committed
f8c43ca
View commit details
Copy full SHA for f8c43ca
View code at this point
Browse repository at this point
Python: Use new taint-tracking query in reflected-xss query.
markshannon
committed
64e8be6
View commit details
Copy full SHA for 64e8be6
View code at this point
Browse repository at this point
Commits on Feb 20, 2019
Python: Add 'attr' predicate as a synomnym for 'getAttribute' to help readability.
markshannon
committed
98be27a
View commit details
Copy full SHA for 98be27a
View code at this point
Browse repository at this point
Commits on Nov 28, 2018
Python: clean up change notes and query help.
markshannon
committed
21246dc
View commit details
Copy full SHA for 21246dc
View code at this point
Browse repository at this point
Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.
markshannon
committed
eefb45c
View commit details
Copy full SHA for eefb45c
View code at this point
Browse repository at this point
Python: New query to check for use of jinja2 templates without auto-escaping.
Mark Shannon
authored and
markshannon
committed
243280d
View commit details
Copy full SHA for 243280d
View code at this point
Browse repository at this point
Commits on Nov 23, 2018
Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.
markshannon
committed
61bd868
View commit details
Copy full SHA for 61bd868
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.