Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
trailofbits
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
2
Code
Pull requests
9
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Feb 13, 2026
Bump next in /javascript/ql/test/query-tests/Security/CWE-918/Request (#10)
Show description for afc2e06
dependabot[bot]
authored
afc2e06
View commit details
Copy full SHA for afc2e06
View code at this point
Browse repository at this point
Bump lodash (#8)
Show description for 2bcf2e8
dependabot[bot]
authored
2bcf2e8
View commit details
Copy full SHA for 2bcf2e8
View code at this point
Browse repository at this point
Commits on Jun 25, 2025
Merge pull request #19858 from Napalys/js/execa
Show description for 3d9e2f5
Napalys
authored
3d9e2f5
View commit details
Copy full SHA for 3d9e2f5
View code at this point
Browse repository at this point
JS: update change note.
Napalys
committed
73126fe
View commit details
Copy full SHA for 73126fe
View code at this point
Browse repository at this point
Merge pull request #19849 from asgerf/js/remove-legacy-actions-queries
Show description for d39b68c
asgerf
authored
d39b68c
View commit details
Copy full SHA for d39b68c
View code at this point
Browse repository at this point
Merge pull request #19852 from asgerf/js/react-use-server
Show description for 853fc1a
asgerf
authored
853fc1a
View commit details
Copy full SHA for 853fc1a
View code at this point
Browse repository at this point
Commits on Jun 24, 2025
Post-release preparation for codeql-cli-2.22.1
github-actions[bot]
committed
6972c7a
View commit details
Copy full SHA for 6972c7a
View code at this point
Browse repository at this point
JS: removed `execa` parts from `SystemCommandExecutors` and moved it to `Execa.qll`
Napalys
committed
79a9d7d
View commit details
Copy full SHA for 79a9d7d
View code at this point
Browse repository at this point
JS: address copilot suggestions
Napalys
committed
0902ca0
View commit details
Copy full SHA for 0902ca0
View code at this point
Browse repository at this point
Update javascript/ql/src/change-notes/2025-06-23-remove-legacy-actions-queries.md
Show description for 54bfde9
asgerf
and
Copilot
authored
54bfde9
View commit details
Copy full SHA for 54bfde9
View code at this point
Browse repository at this point
Release preparation for version 2.22.1
github-actions[bot]
committed
3e074b2
View commit details
Copy full SHA for 3e074b2
View code at this point
Browse repository at this point
Merge pull request #19655 from GeekMasher/js-clientrests-axios
Show description for d428eae
asgerf
authored
d428eae
View commit details
Copy full SHA for d428eae
View code at this point
Browse repository at this point
Merge pull request #19854 from Napalys/js/sinon
Show description for 2218a98
Napalys
authored
2218a98
View commit details
Copy full SHA for 2218a98
View code at this point
Browse repository at this point
JS: add change note
Napalys
committed
8c34546
View commit details
Copy full SHA for 8c34546
View code at this point
Browse repository at this point
JS: moved `execa` test cases outside experimental
Napalys
committed
d05de1b
View commit details
Copy full SHA for d05de1b
View code at this point
Browse repository at this point
JS: moved `execa` out of experimental
Napalys
committed
d8b5cb5
View commit details
Copy full SHA for d8b5cb5
View code at this point
Browse repository at this point
Commits on Jun 23, 2025
JS: add change note
Napalys
committed
33f4244
View commit details
Copy full SHA for 33f4244
View code at this point
Browse repository at this point
JS: exclude `sinon` module from regexp match calls
Napalys
committed
ef51ab1
View commit details
Copy full SHA for ef51ab1
View code at this point
Browse repository at this point
JS: add false positive test cases for hostname regex detection
Napalys
committed
584b4f5
View commit details
Copy full SHA for 584b4f5
View code at this point
Browse repository at this point
JS: Un-deprecate Actions.qll for now as we have some internal queries that use it.
asgerf
committed
ea0a80a
View commit details
Copy full SHA for ea0a80a
View code at this point
Browse repository at this point
JS: Change note
asgerf
committed
4fc5738
View commit details
Copy full SHA for 4fc5738
View code at this point
Browse repository at this point
JS: Add test case for false positive
asgerf
committed
61887be
View commit details
Copy full SHA for 61887be
View code at this point
Browse repository at this point
JS: Add parameters of server functions as remote flow sources
asgerf
committed
cc1a28a
View commit details
Copy full SHA for cc1a28a
View code at this point
Browse repository at this point
JS: Add tests for functions with "use server" directive
asgerf
committed
d9f4e4a
View commit details
Copy full SHA for d9f4e4a
View code at this point
Browse repository at this point
JS: Update tests.expected
Show description for 7dd7246
asgerf
committed
7dd7246
View commit details
Copy full SHA for 7dd7246
View code at this point
Browse repository at this point
JS: Add inline expectations to React test
asgerf
committed
180b023
View commit details
Copy full SHA for 180b023
View code at this point
Browse repository at this point
JS: Enable inline expectations in test
Show description for 1787d4d
asgerf
committed
1787d4d
View commit details
Copy full SHA for 1787d4d
View code at this point
Browse repository at this point
JS: Remove reactLibraryRef
Show description for 1a18e68
asgerf
committed
1a18e68
View commit details
Copy full SHA for 1a18e68
View code at this point
Browse repository at this point
JS: Remove test_ prefix from query predicates
asgerf
committed
99fb6b6
View commit details
Copy full SHA for 99fb6b6
View code at this point
Browse repository at this point
JS: Move React test predicates into one file
asgerf
committed
8ff7182
View commit details
Copy full SHA for 8ff7182
View code at this point
Browse repository at this point
JS: Add model for react 'use'
asgerf
committed
980d0f4
View commit details
Copy full SHA for 980d0f4
View code at this point
Browse repository at this point
JS: Add test for react 'use' function
asgerf
committed
768ccc6
View commit details
Copy full SHA for 768ccc6
View code at this point
Browse repository at this point
JS: Update query suite expectations
asgerf
committed
7da2d71
View commit details
Copy full SHA for 7da2d71
View code at this point
Browse repository at this point
JS: Change note
asgerf
committed
b1da239
View commit details
Copy full SHA for b1da239
View code at this point
Browse repository at this point
JS: Remove js/actions/command-injection
Show description for 76b7228
asgerf
committed
76b7228
View commit details
Copy full SHA for 76b7228
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=32){kind=avatar}
github-actions[bot]