Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
unprovable
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Jul 21, 2023
Post-release preparation for codeql-cli-2.14.1
github-actions[bot]
committed
f91b7a9
View commit details
Copy full SHA for f91b7a9
View code at this point
Browse repository at this point
Commits on Jul 20, 2023
Release preparation for version 2.14.1
github-actions[bot]
committed
c936a92
View commit details
Copy full SHA for c936a92
View code at this point
Browse repository at this point
Commits on Jul 13, 2023
Merge pull request #13719 from asgerf/js/barrier-inout
Show description for d57276c
asgerf
authored
d57276c
View commit details
Copy full SHA for d57276c
View code at this point
Browse repository at this point
Merge branch 'main' into max-schaefer/improve-command-injection-qhelp
max-schaefer
authored
b8eb2ef
View commit details
Copy full SHA for b8eb2ef
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for ae23724
max-schaefer
and
subatoi
authored
ae23724
View commit details
Copy full SHA for ae23724
View code at this point
Browse repository at this point
Commits on Jul 12, 2023
JS: Remove the unused edge-sanitizer hook in UnvalidatedDynamicMethodCall
asgerf
committed
c7abd4c
View commit details
Copy full SHA for c7abd4c
View code at this point
Browse repository at this point
Commits on Jul 11, 2023
Merge pull request #13700 from asgerf/js/path-join-spread
Show description for c8af28c
asgerf
authored
c8af28c
View commit details
Copy full SHA for c8af28c
View code at this point
Browse repository at this point
JS: Use sanitizerOut in PrototypePollutingAssignment
asgerf
committed
1a395c5
View commit details
Copy full SHA for 1a395c5
View code at this point
Browse repository at this point
JS: Update a test.
Show description for 03bdebe
asgerf
committed
03bdebe
View commit details
Copy full SHA for 03bdebe
View code at this point
Browse repository at this point
JS: Update UnsafeJQueryPlugin
asgerf
committed
b09ed4b
View commit details
Copy full SHA for b09ed4b
View code at this point
Browse repository at this point
JS: Update ResourceExhaustion
asgerf
committed
a1d8a05
View commit details
Copy full SHA for a1d8a05
View code at this point
Browse repository at this point
JS: Update InsecureRandomness
asgerf
committed
58a557b
View commit details
Copy full SHA for 58a557b
View code at this point
Browse repository at this point
JS: Use sanitizerIn in ExtenralAPIUsedWithUntrustedData
asgerf
committed
e863e23
View commit details
Copy full SHA for e863e23
View code at this point
Browse repository at this point
JS: Replace sanitizing prefix edge with node
asgerf
committed
094302a
View commit details
Copy full SHA for 094302a
View code at this point
Browse repository at this point
JS: Replace ClearTextLogging::isSanitizerEdge with a node
asgerf
committed
944a2ca
View commit details
Copy full SHA for 944a2ca
View code at this point
Browse repository at this point
JS: Replace isOptionallySanitizedEdge with a node
asgerf
committed
68584e5
View commit details
Copy full SHA for 68584e5
View code at this point
Browse repository at this point
JS: Add tests
asgerf
committed
3691b83
View commit details
Copy full SHA for 3691b83
View code at this point
Browse repository at this point
JS: Add isSanitizerX variants in TaintTracking
asgerf
committed
0841677
View commit details
Copy full SHA for 0841677
View code at this point
Browse repository at this point
JS: Embed check for in/out barriers in edge barrier check
asgerf
committed
d53beb3
View commit details
Copy full SHA for d53beb3
View code at this point
Browse repository at this point
JS: Add interface for isBarrier in/out
asgerf
committed
4964d81
View commit details
Copy full SHA for 4964d81
View code at this point
Browse repository at this point
Commits on Jul 10, 2023
Add another example of when and how to use shell-quote.
Max Schaefer
committed
63c45a0
View commit details
Copy full SHA for 63c45a0
View code at this point
Browse repository at this point
JS: Change note
asgerf
committed
8234b8f
View commit details
Copy full SHA for 8234b8f
View code at this point
Browse repository at this point
JS: Fix whitespace
asgerf
committed
27085b1
View commit details
Copy full SHA for 27085b1
View code at this point
Browse repository at this point
JS: Add test for path.join with spread argument
asgerf
committed
fe90146
View commit details
Copy full SHA for fe90146
View code at this point
Browse repository at this point
JS: Add test for fs/promises
asgerf
committed
06bc0f6
View commit details
Copy full SHA for 06bc0f6
View code at this point
Browse repository at this point
Commits on Jul 7, 2023
Post-release preparation for codeql-cli-2.14.0
github-actions[bot]
committed
13cf054
View commit details
Copy full SHA for 13cf054
View code at this point
Browse repository at this point
JS: Recognise fs/promises
asgerf
committed
965ca16
View commit details
Copy full SHA for 965ca16
View code at this point
Browse repository at this point
JS: Add step through spread arg to path.join()
asgerf
committed
d49359a
View commit details
Copy full SHA for d49359a
View code at this point
Browse repository at this point
Release preparation for version 2.14.0
github-actions[bot]
committed
6484ee1
View commit details
Copy full SHA for 6484ee1
View code at this point
Browse repository at this point
Commits on Jul 6, 2023
Bump minor version numbers post-GHES
Dave Bartolomeo
committed
9631e9f
View commit details
Copy full SHA for 9631e9f
View code at this point
Browse repository at this point
Merge remote-tracking branch 'origin/main' into dbartol/mergeback-3.10
Dave Bartolomeo
committed
2bb9adf
View commit details
Copy full SHA for 2bb9adf
View code at this point
Browse repository at this point
Merge pull request #13642 from erik-krogh/san-script
Show description for b2a60bf
erik-krogh
authored
b2a60bf
View commit details
Copy full SHA for b2a60bf
View code at this point
Browse repository at this point
Add example of manual sanitisation.
Max Schaefer
committed
1d3e344
View commit details
Copy full SHA for 1d3e344
View code at this point
Browse repository at this point
Fix spurious character in code example.
Max Schaefer
committed
240e079
View commit details
Copy full SHA for 240e079
View code at this point
Browse repository at this point
Update javascript/ql/src/Security/CWE-078/IndirectCommandInjection.qhelp
Show description for 83a854c
max-schaefer
and
erik-krogh
authored
83a854c
View commit details
Copy full SHA for 83a854c
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.