The Wayback Machine - https://web.archive.org/web/20210807144512/https://github.com/github/codeql/pulls
Skip to content

/ codeql

New pull request New
170 Open 5,246 Closed
170 Open 5,246 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Java: Unsafe deserialization: add support for Jodd JSON library
documentation Java
#6434 opened Aug 5, 2021 by smowton • Review required
1
JS: Use TaintedUrlSuffix flow label to avoid FPs from $(location.hash)
documentation JS
#6433 opened Aug 5, 2021 by asgerf • Review required
C#: Silence XML extraction commands
C#
#6431 opened Aug 5, 2021 by hvitved • Review required
1
C#: Adding Membership.GeneratePassword() as a bad source of random data
C# documentation
#6425 opened Aug 5, 2021 by raulgarciamsft • Review required
6
Python: Avoid bad magic in containsInScope
Python
#6417 opened Aug 4, 2021 by hvitved • Draft
Java: Add mybatis mapper.xml sql tainted detection
Java
#6413 opened Aug 4, 2021 by Sharyie • Review required
3
cpp: Add query to detect unsigned integer to signed integer conversio…
C++
#6409 opened Aug 3, 2021 by JordyZomer • Changes requested
12
Track taint for CharSequence#subSequence
Java no-change-note-required
#6407 opened Aug 3, 2021 by bmuskalla • Review required
5
JS: Refactor CFGExtractor.java
JS no-change-note-required
#6406 opened Aug 3, 2021 by erik-krogh • Approved
7
Data flow: Use pruning to reduce call contexts
C# C++ Java no-change-note-required Python
#6404 opened Aug 3, 2021 by hvitved • Review required
@aschackmull
7
JS: Add support for EJS and Mustache-style templating dialects
depends on internal PR documentation JS:changes-sources-or-sinks JS
#6403 opened Aug 3, 2021 by asgerf • Draft
Java: Create new Android Intent Redirection query
documentation Java
#6397 opened Aug 2, 2021 by atorralba • Review required
17
Java: CWE-079 Query to detect XSS with JavaServer Faces (JSF)
documentation Java
#6393 opened Aug 1, 2021 by luchua-bc • Review required
1
Java: Model guava cache package
documentation Java
#6387 opened Jul 29, 2021 by joefarebrother • Review required
1
Java: Introduce queries to capture information about 3rd party API usage
Java
#6376 opened Jul 28, 2021 by bmuskalla • Draft
15
Packaging: Refactor Python into separate library and query packs
documentation Python
#6375 opened Jul 27, 2021 by aeisenberg • Approved
2
Java: Model more of Apache Commons Collections
documentation Java
#6370 opened Jul 27, 2021 by owen-mc • Review required
36
Python: Add missing 'secure' flag in response cookies query
documentation Python
#6360 opened Jul 25, 2021 by jorgectf • Review required
Java: Static initialization vector
documentation Java
#6357 opened Jul 23, 2021 by artem-smotrakov • Review required
8
JS: Fixed description of isUncertain() predicate in CodeQL Language Guides: CodeQL Library for JavaScript
documentation
#6354 opened Jul 22, 2021 by Optixal • Review required
Python: Improve various library modeling
no-change-note-required Python
#6349 opened Jul 22, 2021 by RasmusWL • Review required
Python: Remove flow between globals...
no-change-note-required Python
#6345 opened Jul 21, 2021 by tausbn • Approved
2
Python: Soft revert TypeTrackingNode
no-change-note-required Python
#6344 opened Jul 21, 2021 by tausbn • Approved
1
Python: Two fixes regarding annotated assignments
no-change-note-required Python
#6336 opened Jul 20, 2021 by tausbn • Review required
1
3
Python : Improve Xpath Injection Query
Python
#6331 opened Jul 19, 2021 by porcupineyhairs • Review required
ProTip! Filter pull requests by the default branch with base:main.