Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
454
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
lib
semmle
on
codeql-cli/v2.25.3
User selector
All users
Datepicker
All time
Commit history
Commits on Apr 14, 2026
Merge pull request #21584 from owen-mc/shared/update-mad-comments
Show description for 7458674
owen-mc
authored
7458674
View commit details
Copy full SHA for 7458674
View code at this point
Browse repository at this point
Commits on Apr 13, 2026
JS: Recognize Fastify per-route rate limiting
hvitved
committed
7a48409
View commit details
Copy full SHA for 7a48409
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
Replace `branch` with `acceptingValue`
owen-mc
committed
37aac05
View commit details
Copy full SHA for 37aac05
View code at this point
Browse repository at this point
Add barriers and barrier guards to MaD format explanations
owen-mc
committed
10fddc7
View commit details
Copy full SHA for 10fddc7
View code at this point
Browse repository at this point
Commits on Mar 13, 2026
JS: Address PR review comments
Show description for 821cc0e
asgerf
and
Copilot
committed
821cc0e
View commit details
Copy full SHA for 821cc0e
View code at this point
Browse repository at this point
Commits on Mar 11, 2026
JS: Add browser source kinds
asgerf
committed
1253553
View commit details
Copy full SHA for 1253553
View code at this point
Browse repository at this point
Commits on Feb 25, 2026
Merge pull request #21349 from asgerf/mobx-wrapper
Show description for f0e665d
asgerf
authored
f0e665d
View commit details
Copy full SHA for f0e665d
View code at this point
Browse repository at this point
Commits on Feb 19, 2026
JS: Model mobx-react{-lite} as higher-order component builders
asgerf
committed
a684943
View commit details
Copy full SHA for a684943
View code at this point
Browse repository at this point
Commits on Feb 17, 2026
Revert "javascript: remove sanitizer to be replaced by model"
Show description for 05f9b41
owen-mc
committed
05f9b41
View commit details
Copy full SHA for 05f9b41
View code at this point
Browse repository at this point
Revert "javascript: add MaD model"
Show description for b8f9dd9
owen-mc
committed
b8f9dd9
View commit details
Copy full SHA for b8f9dd9
View code at this point
Browse repository at this point
Accept MaD sanitizers for queries with MaD sinks
owen-mc
committed
61e8f91
View commit details
Copy full SHA for 61e8f91
View code at this point
Browse repository at this point
Commits on Jan 26, 2026
Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering
Show description for b974a84
hvitved
authored
b974a84
View commit details
Copy full SHA for b974a84
View code at this point
Browse repository at this point
JS: Adapt to changes in `FlowSummaryImpl`
hvitved
committed
93dad86
View commit details
Copy full SHA for 93dad86
View code at this point
Browse repository at this point
Commits on Jan 22, 2026
python/javascript/ruby: mark internal predicates
yoff
committed
d05901a
View commit details
Copy full SHA for d05901a
View code at this point
Browse repository at this point
javascript: add MaD model
Show description for 75bd4a7
yoff
committed
75bd4a7
View commit details
Copy full SHA for 75bd4a7
View code at this point
Browse repository at this point
javascript: remove sanitizer to be replaced by model
yoff
committed
da2f77d
View commit details
Copy full SHA for da2f77d
View code at this point
Browse repository at this point
python: add machinery for MaD barriers
Show description for 3dbfb9f
yoff
committed
3dbfb9f
View commit details
Copy full SHA for 3dbfb9f
View code at this point
Browse repository at this point
Commits on Jan 19, 2026
Merge pull request #21159 from asgerf/js/vue-prop-function
Show description for 077bbb2
asgerf
authored
077bbb2
View commit details
Copy full SHA for 077bbb2
View code at this point
Browse repository at this point
Commits on Jan 14, 2026
Merge pull request #20733 from asgerf/js/incremental-api-graphs
Show description for ff58041
asgerf
authored
ff58041
View commit details
Copy full SHA for ff58041
View code at this point
Browse repository at this point
Merge pull request #20916 from asgerf/js/next-folders2
Show description for e430aa9
asgerf
authored
e430aa9
View commit details
Copy full SHA for e430aa9
View code at this point
Browse repository at this point
Commits on Jan 13, 2026
JS: Add support for props callbacks in router configs
asgerf
committed
7cd820e
View commit details
Copy full SHA for 7cd820e
View code at this point
Browse repository at this point
JS: Also track additional use-steps crossing the overlay boundary
asgerf
committed
da9aafc
View commit details
Copy full SHA for da9aafc
View code at this point
Browse repository at this point
Merge pull request #20918 from asgerf/js/response-default-content-type
Show description for ca52fe5
asgerf
authored
ca52fe5
View commit details
Copy full SHA for ca52fe5
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll
Show description for d2e6ae5
asgerf
and
Napalys
authored
d2e6ae5
View commit details
Copy full SHA for d2e6ae5
View code at this point
Browse repository at this point
Commits on Jan 7, 2026
JS: Workaround forceLocal not supporting 'result' column
Show description for cf0b770
asgerf
committed
cf0b770
View commit details
Copy full SHA for cf0b770
View code at this point
Browse repository at this point
JS: Rename "in scope" to "in active file"
asgerf
committed
e16cacd
View commit details
Copy full SHA for e16cacd
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/ApiGraphs.qll
Show description for 87049bd
asgerf
and
tausbn
committed
87049bd
View commit details
Copy full SHA for 87049bd
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/ApiGraphs.qll
Show description for 56a6fe4
asgerf
and
Copilot
committed
56a6fe4
View commit details
Copy full SHA for 56a6fe4
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/ApiGraphs.qll
Show description for d0dbc91
asgerf
and
Copilot
committed
d0dbc91
View commit details
Copy full SHA for d0dbc91
View code at this point
Browse repository at this point
JS: Fix bad join in export logic
asgerf
committed
9721b4e
View commit details
Copy full SHA for 9721b4e
View code at this point
Browse repository at this point
JS: Add a missing needsDefNode restriction
Show description for cae27c4
asgerf
committed
cae27c4
View commit details
Copy full SHA for cae27c4
View code at this point
Browse repository at this point
JS: Fix some QL4QL alerts
asgerf
committed
369848a
View commit details
Copy full SHA for 369848a
View code at this point
Browse repository at this point
JS: Make API::Node overlay[local?]
Show description for 97d369c
asgerf
committed
97d369c
View commit details
Copy full SHA for 97d369c
View code at this point
Browse repository at this point
JS: Add back promisify-all support
Show description for 27e8bcb
asgerf
committed
27e8bcb
View commit details
Copy full SHA for 27e8bcb
View code at this point
Browse repository at this point
JS: Work around an issue with overlay-invariance
asgerf
committed
8731eee
View commit details
Copy full SHA for 8731eee
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
