Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2k
Star
9.9k
Code
Issues
996
Pull requests
443
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
config
suites
javascript
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Jan 21, 2021
add js/server-crash to the security suite
esbena
committed
5a6e692
View commit details
Copy full SHA for 5a6e692
View code at this point
Browse repository at this point
Commits on Dec 7, 2020
JS: Update security suite after move to CWE-915
asgerf
committed
e42ca88
View commit details
Copy full SHA for e42ca88
View code at this point
Browse repository at this point
JS: Add PrototypePollutingAssignment
asgerf
committed
972c4d6
View commit details
Copy full SHA for 972c4d6
View code at this point
Browse repository at this point
Commits on Aug 27, 2020
JS: Lower precision of ambiguous HTML ID attribute
asgerf
committed
e7a0bc6
View commit details
Copy full SHA for e7a0bc6
View code at this point
Browse repository at this point
Commits on Jun 23, 2020
Merge pull request #3765 from asger-semmle/js-team-sprint-merge2
Show description for 552b7ad
asgerf
authored
552b7ad
View commit details
Copy full SHA for 552b7ad
View code at this point
Browse repository at this point
Commits on Jun 22, 2020
JS: Sort security suite
asgerf
committed
1efd71a
View commit details
Copy full SHA for 1efd71a
View code at this point
Browse repository at this point
JS: Add new queries to security suite
asgerf
committed
8cc41a0
View commit details
Copy full SHA for 8cc41a0
View code at this point
Browse repository at this point
Merge branch 'js-team-sprint' into js/delay-slow-query-merge
asgerf
authored
7d54b02
View commit details
Copy full SHA for 7d54b02
View code at this point
Browse repository at this point
JS: Reduce precision of js/unused-npm-dependency
asgerf
committed
5cd2c7c
View commit details
Copy full SHA for 5cd2c7c
View code at this point
Browse repository at this point
Revert "Merge pull request #3702 from esbena/js/memory-exhaustion"
Show description for 9a0bbb3
esbena
committed
9a0bbb3
View commit details
Copy full SHA for 9a0bbb3
View code at this point
Browse repository at this point
JS: polish js/incomplete-html-attribute-sanitization
esbena
committed
3be094e
View commit details
Copy full SHA for 3be094e
View code at this point
Browse repository at this point
Commits on Jun 18, 2020
JS: rename query, support timeouts, add documentation, add to suite
esbena
committed
3f67e90
View commit details
Copy full SHA for 3f67e90
View code at this point
Browse repository at this point
Commits on Apr 24, 2020
JS: add query to query suite
esbena
committed
708fd3d
View commit details
Copy full SHA for 708fd3d
View code at this point
Browse repository at this point
Commits on Mar 9, 2020
JavaScript: Move flow summaries to `experimental`.
Show description for 3c785ec
Max Schaefer
committed
3c785ec
View commit details
Copy full SHA for 3c785ec
View code at this point
Browse repository at this point
Commits on Jan 31, 2020
JS: add query "Unsafe jQuery plugin"
esbena
committed
fef918a
View commit details
Copy full SHA for fef918a
View code at this point
Browse repository at this point
Commits on Jan 14, 2020
JS: Add PrototypePollutionUtility query
asger-semmle
authored and
asgerf
committed
654f145
View commit details
Copy full SHA for 654f145
View code at this point
Browse repository at this point
Commits on Jan 8, 2020
Merge pull request #2525 from asger-semmle/promise-missing-await
Show description for 308da07
max-schaefer
authored
308da07
View commit details
Copy full SHA for 308da07
View code at this point
Browse repository at this point
Commits on Jan 6, 2020
JS: Add RegExpAlwaysMatches query
asger-semmle
authored and
asgerf
committed
9928762
View commit details
Copy full SHA for 9928762
View code at this point
Browse repository at this point
Commits on Dec 12, 2019
JS: Add to correctness-core suite
asger-semmle
committed
45524d8
View commit details
Copy full SHA for 45524d8
View code at this point
Browse repository at this point
Commits on Nov 13, 2019
JavaScript: Add query `IncompleteUrlSchemeCheck.ql`.
Max Schaefer
committed
ab583b7
View commit details
Copy full SHA for ab583b7
View code at this point
Browse repository at this point
Commits on Nov 6, 2019
Merge pull request #2203 from erik-krogh/ignorePureFunction
Show description for 04f0c22
semmle-qlci
authored
04f0c22
View commit details
Copy full SHA for 04f0c22
View code at this point
Browse repository at this point
Commits on Nov 5, 2019
add js/ignore-array-result to correctness-core suite
erik-krogh
committed
df3c70e
View commit details
Copy full SHA for df3c70e
View code at this point
Browse repository at this point
Commits on Oct 23, 2019
add missing .ql extension to suite file name
esbena
authored
207692a
View commit details
Copy full SHA for 207692a
View code at this point
Browse repository at this point
Commits on Oct 22, 2019
Merge pull request #2092 from esben-semmle/js/brittle-system-reflection-command
Show description for 1c79ec5
semmle-qlci
authored
1c79ec5
View commit details
Copy full SHA for 1c79ec5
View code at this point
Browse repository at this point
Merge pull request #2162 from xiemaisi/js/remove-deprecated-queries
Show description for 0dcb189
semmle-qlci
authored
0dcb189
View commit details
Copy full SHA for 0dcb189
View code at this point
Browse repository at this point
Commits on Oct 21, 2019
JS: add query js/shell-command-injection-from-environment
Esben Sparre Andreasen
committed
5a983cb
View commit details
Copy full SHA for 5a983cb
View code at this point
Browse repository at this point
JavaScript: Remove deprecated queries.
Show description for 55fb86d
Max Schaefer
committed
55fb86d
View commit details
Copy full SHA for 55fb86d
View code at this point
Browse repository at this point
implement a new query to detect unreachable overloaded methods in TypeScript
erik-krogh
committed
9eda120
View commit details
Copy full SHA for 9eda120
View code at this point
Browse repository at this point
Commits on Oct 15, 2019
JS: add query js/useless-regexp-character-escape
Esben Sparre Andreasen
committed
e1d7434
View commit details
Copy full SHA for e1d7434
View code at this point
Browse repository at this point
Commits on Sep 13, 2019
rename TaintedLength to LoopBoundInjection
erik-krogh
committed
c4f27ed
View commit details
Copy full SHA for c4f27ed
View code at this point
Browse repository at this point
Commits on Sep 12, 2019
added js/loop-bound-injection to javascript security suite
erik-krogh
committed
dc891dc
View commit details
Copy full SHA for dc891dc
View code at this point
Browse repository at this point
Commits on Sep 11, 2019
JavaScript: Add new query `UnusedIndexVariable`.
Max Schaefer
committed
500cde6
View commit details
Copy full SHA for 500cde6
View code at this point
Browse repository at this point
Commits on Jul 31, 2019
JS: add query js/indirect-command-line-injection
Esben Sparre Andreasen
committed
bf4a324
View commit details
Copy full SHA for bf4a324
View code at this point
Browse repository at this point
Commits on Jun 3, 2019
JS: add query js/regex/missing-regexp-anchor
Esben Sparre Andreasen
committed
0fa73b8
View commit details
Copy full SHA for 0fa73b8
View code at this point
Browse repository at this point
Commits on May 31, 2019
Merge pull request #1341 from esben-semmle/js/sync-suites
Show description for 74688bb
Max Schaefer
authored
74688bb
View commit details
Copy full SHA for 74688bb
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.