Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
453
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
lib
semmle
code
xml
on
codeql-cli/v2.26.3
User selector
All users
Datepicker
All time
Commit history
Commits on Nov 26, 2025
Factor XML discard predicates into OverlayXml.qll
asgerf
committed
dbf14c1
View commit details
Copy full SHA for dbf14c1
View code at this point
Browse repository at this point
Commits on Sep 23, 2025
Overlay: Discard base XML entities in overlay extracted files
kaspersv
committed
f02da68
View commit details
Copy full SHA for f02da68
View code at this point
Browse repository at this point
Commits on Sep 18, 2025
Overlay: Future-proof Java XML discarding
kaspersv
committed
dbb9a26
View commit details
Copy full SHA for dbb9a26
View code at this point
Browse repository at this point
Commits on Jun 24, 2025
Overlay: Add overlay annotations to Java & shared libraries
kaspersv
committed
c207cfd
View commit details
Copy full SHA for c207cfd
View code at this point
Browse repository at this point
Commits on Jul 16, 2024
Accept suggested QLDoc fix
Show description for db6cd18
owen-mc
and
smowton
authored
db6cd18
View commit details
Copy full SHA for db6cd18
View code at this point
Browse repository at this point
Commits on Jul 13, 2024
Refactor `inAndroidApplication`
owen-mc
committed
b7a5252
View commit details
Copy full SHA for b7a5252
View code at this point
Browse repository at this point
Commits on Mar 19, 2024
Java: Switch to shared `XML.qll` implementation
hvitved
committed
a6c1471
View commit details
Copy full SHA for a6c1471
View code at this point
Browse repository at this point
Commits on Jan 22, 2024
delete outdated deprecations
erik-krogh
committed
8be7ead
View commit details
Copy full SHA for 8be7ead
View code at this point
Browse repository at this point
Commits on Jun 2, 2023
delete old deprecations
erik-krogh
committed
44b6366
View commit details
Copy full SHA for 44b6366
View code at this point
Browse repository at this point
Commits on Mar 3, 2023
delete old deprecations
erik-krogh
committed
f96d6ac
View commit details
Copy full SHA for f96d6ac
View code at this point
Browse repository at this point
Commits on Dec 7, 2022
Activity alias: formatting changes suggested by Actions
egregius313
committed
4620db0
View commit details
Copy full SHA for 4620db0
View code at this point
Browse repository at this point
Add method for finding aliases to `AndroidActivityXmlElement`
egregius313
committed
4df926e
View commit details
Copy full SHA for 4df926e
View code at this point
Browse repository at this point
Add support for Android Manifest `<activity-alias>` element
egregius313
committed
b4f08f8
View commit details
Copy full SHA for b4f08f8
View code at this point
Browse repository at this point
Add generalized identifier resolution for AndroidManifest
Show description for 4c270fc
egregius313
committed
4c270fc
View commit details
Copy full SHA for 4c270fc
View code at this point
Browse repository at this point
Add class for XML Attributes meant to hold an identifier in AndroidManifest
Show description for cf3e5a0
egregius313
committed
cf3e5a0
View commit details
Copy full SHA for cf3e5a0
View code at this point
Browse repository at this point
Commits on Nov 21, 2022
Handle disabled Maven repositories
atorralba
committed
2809c3a
View commit details
Copy full SHA for 2809c3a
View code at this point
Browse repository at this point
Commits on Oct 3, 2022
Documentation fix for `hasIncompletePermissions`
Show description for cfc0bb5
egregius313
and
atorralba
authored
cfc0bb5
View commit details
Copy full SHA for cfc0bb5
View code at this point
Browse repository at this point
Commits on Sep 29, 2022
Moved Android manifest incomplete permission logic into library
egregius313
committed
e729639
View commit details
Copy full SHA for e729639
View code at this point
Browse repository at this point
Commits on Sep 12, 2022
Merge pull request #10106 from egregius313/egregius313/android-backup-allowed
Show description for eadb8a3
egregius313
authored
eadb8a3
View commit details
Copy full SHA for eadb8a3
View code at this point
Browse repository at this point
Commits on Sep 7, 2022
Moved allowBackup query logic to allowsBackup pred
egregius313
committed
c69a2be
View commit details
Copy full SHA for c69a2be
View code at this point
Browse repository at this point
Commits on Sep 6, 2022
Documentation cleanup for allowBackup query
egregius313
committed
dca4cd2
View commit details
Copy full SHA for dca4cd2
View code at this point
Browse repository at this point
Commits on Aug 30, 2022
Added documentation for `providesMainIntent` pred
egregius313
committed
6485e73
View commit details
Copy full SHA for 6485e73
View code at this point
Browse repository at this point
Add check for files which provide the app launcher
Show description for 500a6f3
egregius313
committed
500a6f3
View commit details
Copy full SHA for 500a6f3
View code at this point
Browse repository at this point
Add check for android:allowBackup explicitly set
Show description for b5c54f5
egregius313
committed
b5c54f5
View commit details
Copy full SHA for b5c54f5
View code at this point
Browse repository at this point
Commits on Aug 25, 2022
Merge pull request #10161 from igfoo/igfoo/exec
Show description for bf6d9f8
igfoo
authored
bf6d9f8
View commit details
Copy full SHA for bf6d9f8
View code at this point
Browse repository at this point
Commits on Aug 24, 2022
Refactor android:backupAllowed query
Show description for de36372
egregius313
committed
de36372
View commit details
Copy full SHA for de36372
View code at this point
Browse repository at this point
Add support for android:allowBackup default value
Show description for dad4a40
egregius313
committed
dad4a40
View commit details
Copy full SHA for dad4a40
View code at this point
Browse repository at this point
Add allowBackup check to AndroidManifest
egregius313
committed
7d15af6
View commit details
Copy full SHA for 7d15af6
View code at this point
Browse repository at this point
Make *.qll non-executable
igfoo
committed
501a9b3
View commit details
Copy full SHA for 501a9b3
View code at this point
Browse repository at this point
Merge pull request #9983 from jcogs33/android-implicit-export
Show description for b3e88f8
jcogs33
authored
b3e88f8
View commit details
Copy full SHA for b3e88f8
View code at this point
Browse repository at this point
Commits on Aug 23, 2022
only have one deprecated alias for XmlDtd
erik-krogh
committed
82d9180
View commit details
Copy full SHA for 82d9180
View code at this point
Browse repository at this point
Commits on Aug 22, 2022
run the implicit-this patch
erik-krogh
committed
28083eb
View commit details
Copy full SHA for 28083eb
View code at this point
Browse repository at this point
make some acronyms camelCase
erik-krogh
committed
e89e0eb
View commit details
Copy full SHA for e89e0eb
View code at this point
Browse repository at this point
update XML to Xml due to recent deprecation
Jami Cogswell
authored and
Jami Cogswell
committed
0136c75
View commit details
Copy full SHA for 0136c75
View code at this point
Browse repository at this point
removed another comment
Jami Cogswell
authored and
Jami Cogswell
committed
efac4b1
View commit details
Copy full SHA for efac4b1
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.