René's URL Explorer Experiment


Title: Go: fix models for built-in functions by owen-mc · Pull Request #16413 · github/codeql · GitHub

Open Graph Title: Go: fix models for built-in functions by owen-mc · Pull Request #16413 · github/codeql

X Title: Go: fix models for built-in functions by owen-mc · Pull Request #16413 · github/codeql

Description: Our model for append was wrong, as append is variadic. We were missing a model for copy. Here are the package docs and the relevant part of the spec. I had to fix two bugs which I made into separate PRs Go: Fix getType on ImplicitVarArgsSlice Go: fix hasQualifiedName and models-as-data for built-in functions And I fixed one bug in this PR which is hard to otherwise test for. I also span out #16444 to make the value flow tests have the same results as the taint flow tests.

Open Graph Description: Our model for append was wrong, as append is variadic. We were missing a model for copy. Here are the package docs and the relevant part of the spec. I had to fix two bugs which I made into separat...

X Description: Our model for append was wrong, as append is variadic. We were missing a model for copy. Here are the package docs and the relevant part of the spec. I had to fix two bugs which I made into separat...

Opengraph URL: https://github.com/github/codeql/pull/16413

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:d29cbb29-3e5c-ffff-299a-8a429dea06f2
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idC87E:160543:B63F08:F21AC2:6AF8626A
html-safe-nonce4d6c97a2da7665cb8c5b8d90b9d380906c9a934dd4db49465385866818c029c0
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDODdFOjE2MDU0MzpCNjNGMDg6RjIxQUMyOjZBRjg2MjZBIiwidmlzaXRvcl9pZCI6IjQ3OTE1NTE5MzE5NTQyNTg1MzgiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac20ebe99e2514158385200e2822b9def3646921c929bca69582bf035afd06892d
hovercard-subject-tagpull_request:1853222092
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/16413/files
twitter:imagehttps://avatars.githubusercontent.com/u/62447351?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/62447351?s=400&v=4
og:image:altOur model for append was wrong, as append is variadic. We were missing a model for copy. Here are the package docs and the relevant part of the spec. I had to fix two bugs which I made into separat...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None5713ecd83001b2f55c3509fb7a292bf7d66d0f167c7ae87a9f7eaec5a52bf8db
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release653be32ff5c755082a4db662491bfbbcfc9112c1
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/16413/files#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F16413%2Ffiles
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F16413%2Ffiles
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/16413/files
Reloadhttps://github.com/github/codeql/pull/16413/files
Reloadhttps://github.com/github/codeql/pull/16413/files
githubhttps://github.com/github
codeqlhttps://github.com/github/codeql
Codehttps://github.com/github/codeql
Issues1k (1k)https://github.com/github/codeql/issues
Pull requests516 (516)https://github.com/github/codeql/pulls
Discussionshttps://github.com/github/codeql/discussions
Actionshttps://github.com/github/codeql/actions
Projectshttps://github.com/github/codeql/projects
Security and qualityhttps://github.com/github/codeql/security
Insightshttps://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
owen-mchttps://github.com/owen-mc
github:mainhttps://github.com/github/codeql/tree/main
owen-mc:go/fix-builtin-modelshttps://github.com/owen-mc/codeql/tree/go/fix-builtin-models
Conversation 12 https://github.com/github/codeql/pull/16413
Commits 16 https://github.com/github/codeql/pull/16413/commits
Checks 0 https://github.com/github/codeql/pull/16413/checks
Findings https://github.com/github/codeql/pull/16413/findings
Files changed https://github.com/github/codeql/pull/16413/files
Please reload this pagehttps://github.com/github/codeql/pull/16413/files
Go: fix models for built-in functions https://github.com/github/codeql/pull/16413/files#top
Show all changes 16 commits https://github.com/github/codeql/pull/16413/files
e857eed Fix model for `append` - it is variadic owen-mc May 3, 2024 https://github.com/github/codeql/pull/16413/commits/e857eedd4a5c8b0105729e653ec94f862e57e4b7
1322ce3 Add model for built-in function `copy` owen-mc May 3, 2024 https://github.com/github/codeql/pull/16413/commits/1322ce35d6285ee392ea887b0f25a68eb565b416
fcdac0a Add models for `min` and `max` built-in functions owen-mc May 7, 2024 https://github.com/github/codeql/pull/16413/commits/fcdac0aeb0a7eae4993cec9bbcae19f59a331bd5
f95ccd2 Remove old-style models of built-in functions owen-mc May 7, 2024 https://github.com/github/codeql/pull/16413/commits/f95ccd242f2867cf13773dadab516784962b42b1
84b7319 Rename test folder `ExternalFlow` to `ExternalTaintFlow` owen-mc Apr 30, 2024 https://github.com/github/codeql/pull/16413/commits/84b7319688c9ea7b4c3d921b4db6e6948ae0dbd5
c816412 Create copy of `ExternalTaintFlow` called `ExternalValueFlow` owen-mc May 4, 2024 https://github.com/github/codeql/pull/16413/commits/c81641279558295baa8c05fb45f9e1eec370ffc7
eab1569 Update `ExternalValueFlow` to use value flow owen-mc Apr 30, 2024 https://github.com/github/codeql/pull/16413/commits/eab156934241d402b9baabab7aaa75528920d2ae
86e2b84 Add tests for `copy` (taint passes, value fails) owen-mc May 4, 2024 https://github.com/github/codeql/pull/16413/commits/86e2b845f32a97a82717cdb5f9e8c636f15a00ce
d5aa08d Local flow steps for flow summaries for built-in functions owen-mc May 8, 2024 https://github.com/github/codeql/pull/16413/commits/d5aa08dbf35e0a30cff658a279ccc60a98b83ed1
8cc9838 Add change note owen-mc May 8, 2024 https://github.com/github/codeql/pull/16413/commits/8cc9838628ab337794130a569dd46fc936137194
e1c85e3 Fix `elementWrite` to include flow summaries owen-mc May 8, 2024 https://github.com/github/codeql/pull/16413/commits/e1c85e3581d590470dcd9959f9eac0320a623860
7694618 Accept MaD renumbering for edge provenance owen-mc May 10, 2024 https://github.com/github/codeql/pull/16413/commits/76946184de6b3e611d8b4e35d45fc347594911a5
f8e17fe Accept expected test changes owen-mc May 10, 2024 https://github.com/github/codeql/pull/16413/commits/f8e17fe8cc91bb89d1905ae0486b79559e8af7dd
f7e6bf7 Two tests have different paths but same results owen-mc May 10, 2024 https://github.com/github/codeql/pull/16413/commits/f7e6bf7ef52f26719f27742c8e7976174b09fc86
ab5e1f8 Fix models for `min` and `max` and improve tests owen-mc May 14, 2024 https://github.com/github/codeql/pull/16413/commits/ab5e1f8a69a725956f86bdcef67db8ab4ffe8354
827d15a Test changes due to model renumbering owen-mc May 14, 2024 https://github.com/github/codeql/pull/16413/commits/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc
Clear filters https://github.com/github/codeql/pull/16413/files
Please reload this pagehttps://github.com/github/codeql/pull/16413/files
Please reload this pagehttps://github.com/github/codeql/pull/16413/files
2024-05-09-model-append-copy-max-min.md https://github.com/github/codeql/pull/16413/files#diff-d70bffefbb1587f6af45afd809f806cffdd0ff75192509cabe5a9eaef36f6aea
builtin.model.yml https://github.com/github/codeql/pull/16413/files#diff-49acfb1300f7330ae5b9809c5c5d03160b0490040271c671201b11afcb8972da
TaintTrackingUtil.qll https://github.com/github/codeql/pull/16413/files#diff-b0ec0c0f4564c7623f7b18ea6423ee081162aed69ac25334e316ea89411004ee
Stdlib.qll https://github.com/github/codeql/pull/16413/files#diff-e9ba2277b38f9ca9e3d0e41ffe9bc5f61a50a052a3cc01275b0f3055c6922d73
LDAPInjection.expected https://github.com/github/codeql/pull/16413/files#diff-81eed0a4cb01f75b5844966a1e1447902ce0ed588f8b71d51ae7342c85a9444e
Timing.expected https://github.com/github/codeql/pull/16413/files#diff-6bdd2e388750e4ece0a472691b167f008a3f37668daba265900e2f5cf20141f9
ImproperLdapAuth.expected https://github.com/github/codeql/pull/16413/files#diff-8637ca06c96a02ff3bbbfb9b20de43be9749c5cd6e0c40fe221ea957acdbaad3
DivideByZero.expected https://github.com/github/codeql/pull/16413/files#diff-4f0079c6d531341641f812ce43c2eb231369d3dfc7b793ee7f8ef7e795cce6b7
DecompressionBombs.expected https://github.com/github/codeql/pull/16413/files#diff-10bfec86b098ea0649cf6583003fa5d7eccd48f816dac49f0ba061144db83d07
DsnInjection.expected https://github.com/github/codeql/pull/16413/files#diff-f39d614ca004acb9ebf07b3269f0e2af84d79c630091d51e87b51a60b18883de
DsnInjectionLocal.expected https://github.com/github/codeql/pull/16413/files#diff-0698b34428242cfd10ecbea036b470e89aecaabf6a3badb1a257247ebcb68d9f
HTMLTemplateEscapingPassthrough.expected https://github.com/github/codeql/pull/16413/files#diff-835ef29fbfede3a3967a3af79f86a76833640ba1b6388cfb2b2cd9d36d407564
SSRF.expected https://github.com/github/codeql/pull/16413/files#diff-1c3452005c2c7a428de32c51e473a6a4b50dad9d7b4195e011c0d13daafc3e77
DefaultSanitizer.expected https://github.com/github/codeql/pull/16413/files#diff-a3e727e8e25737d17e50d4d8d922545b4704a27ba9b4a30bd5ffb8833369c7d3
completetest.expected https://github.com/github/codeql/pull/16413/files#diff-c83328b58f64e336268b14ffbc403f63563d5a2292dd073a77b0404ee0801066
completetest.ext.yml https://github.com/github/codeql/pull/16413/files#diff-ec39cd6e3d9c8866be5a337e36cf38263c5d673daa03d468477f8749513e6a43
completetest.ql https://github.com/github/codeql/pull/16413/files#diff-155e22c3cacd86363a7c3cff32ce2aa77721f4dfdaccfca76ec63d18c1b995bc
go.mod https://github.com/github/codeql/pull/16413/files#diff-53cee7557a49a2b97f834711ccb04aef49cfc780068ffc75d214dc1a427d258d
sinks.expected https://github.com/github/codeql/pull/16413/files#diff-aef9fd6e07215d8fb00bddf8579cf584982d671f0bc26d9d2bfe8c5ea7995416
sinks.ext.yml https://github.com/github/codeql/pull/16413/files#diff-61f45f2b7d608ecaec11c7089062c453395e05a60d23760e8d2f692f528ec1dd
sinks.ql https://github.com/github/codeql/pull/16413/files#diff-d560351ab41ee6f2c515254b18989ab196e97a99e7f5aa526056e2c15381d56c
srcs.expected https://github.com/github/codeql/pull/16413/files#diff-2950f3a766f603fdca540bffd86ea96ff0100752f6819b3dd6be216449383a2e
srcs.ext.yml https://github.com/github/codeql/pull/16413/files#diff-20f33e8b8901224ae97e3b19e7cee854e9a9c8f177a191b8b0efb573ecc9fa4b
srcs.ql https://github.com/github/codeql/pull/16413/files#diff-bd3a48bc6e428962b454a9300cd833308b046637cc3573587abbc5cba0312b8f
steps.expected https://github.com/github/codeql/pull/16413/files#diff-8614e296d7b042cfcf0cf7c708c27b174b53a0eb05fad4eaf0a562d8195f4691
steps.ext.yml https://github.com/github/codeql/pull/16413/files#diff-6e96f081be47e6b5ae814ead0ebbb8db0c57a575a2e0231ce89dcf2999549070
steps.ql https://github.com/github/codeql/pull/16413/files#diff-6c1780a9d267923f9c032e72dbf591db8af8fee3e67d4d82c7b6f47a9a5b5e4e
test.go https://github.com/github/codeql/pull/16413/files#diff-01836aa4338bb102983ac027ecc4b68b438d3abd890b3aae2a1eec69fed284c1
stub.go https://github.com/github/codeql/pull/16413/files#diff-e03012569b64a46979474b6b2066e1b6bb67e8231d3456589c22e37120231198
modules.txt https://github.com/github/codeql/pull/16413/files#diff-fee93c38105f18ab1f5c4bdc4676e534103ec319ef10f22985d0bf35c9f31495
completetest.expected https://github.com/github/codeql/pull/16413/files#diff-2276314f07ccab2bb1de66cc30a564c1efdde3ea7ae8b7e470528b30c484ee76
completetest.ext.yml https://github.com/github/codeql/pull/16413/files#diff-081e2599661d4f840aebee7b5482b1e9a98d8d37bc99483ab5f89c688cdc2550
completetest.ql https://github.com/github/codeql/pull/16413/files#diff-46526ba9cbf1fd113316528783e1f54070a6451bc28a5dd49a63178605fdd1ef
go.mod https://github.com/github/codeql/pull/16413/files#diff-b9f3ba6da072274d27b2a12787c81d96a0d605009120becd6e4f969c6dd96f57
sinks.expected https://github.com/github/codeql/pull/16413/files#diff-f1d953c51ba18899a92842e9ca39414b2bccfee900db5c0f43b042ac8ee34dfc
sinks.ext.yml https://github.com/github/codeql/pull/16413/files#diff-41fa2c6bbef73ac5182c10cfebd66ca816cfebbe7df1f42eb86e34961cf1d088
sinks.ql https://github.com/github/codeql/pull/16413/files#diff-18ce2ecc5954cb550984d27b0ad894a0c628132c91513a7b1ca518d2082c2a7d
srcs.expected https://github.com/github/codeql/pull/16413/files#diff-334d242ee80f393b2cfa0410c85ec21bb77dba4d44d0125b344a7e1ffecd2d36
srcs.ext.yml https://github.com/github/codeql/pull/16413/files#diff-64ce2fbfdfe3a66911b7e8bfef641821e4c2a43048a40943dd5105853a598554
srcs.ql https://github.com/github/codeql/pull/16413/files#diff-df96084b539f269161c56f4eb4322514bc619c863e488596d3f9edf0e2a4d512
steps.expected https://github.com/github/codeql/pull/16413/files#diff-4cf2466977c7553d6b640d27c76ed192b6b8f814dfe81c12313970f64f88c438
steps.ext.yml https://github.com/github/codeql/pull/16413/files#diff-cf592fc9aea82d8e66b1b646e4929a52a3569513990cab636c0a12faa6351894
steps.ql https://github.com/github/codeql/pull/16413/files#diff-c7fb5b4427a386195317d063f9dec2e0f4f40a59dd593081b0d22e9aa8439d8c
test.go https://github.com/github/codeql/pull/16413/files#diff-0675879b0777bfaf53479108489f10efba676f1e200399f45b5db57149802168
stub.go https://github.com/github/codeql/pull/16413/files#diff-634508c47ac8e2822184a7fcb4c583e0c8907ab2803eaee1a896e2226bff0727
modules.txt https://github.com/github/codeql/pull/16413/files#diff-735b5b3178cc64bfd4cf011fec3953ff3eb39c8199f6d39d40102146f000f7cb
LocalTaintStep.expected https://github.com/github/codeql/pull/16413/files#diff-bd65c452287be4d1adcf18ef7dd74222f17b8ebb162f0616ae31e532b4999b21
ReflectedXss.expected https://github.com/github/codeql/pull/16413/files#diff-3ff34289c073416de6eb63842dcfe6a2d8338f0cff604915b9dddc06c7d977ad
TaintedPath.expected https://github.com/github/codeql/pull/16413/files#diff-439aded8d11377f35b6310cec1f555a0a5b767392eac1361f4ac6eacf1633dfa
SqlInjection.expected https://github.com/github/codeql/pull/16413/files#diff-062f4196358d64e41271c0d7fab1163ea497579af9a0232a3569e16476338bce
ReflectedXss.expected https://github.com/github/codeql/pull/16413/files#diff-ff590c61da1a3cf4ad31a300c74dfc2fc3d26f8bc58a0f8e2fdc887e1086ee56
jsoniter.expected https://github.com/github/codeql/pull/16413/files#diff-3eff728113106c383308ab5d6982b228d1876e4ce6aa37d9767d7b5c0175c636
ReflectedXss.expected https://github.com/github/codeql/pull/16413/files#diff-42d223c85d9b656444d92179910ac7abfa92653f873c3309cb623bc04e41bbb2
TaintedPath.expected https://github.com/github/codeql/pull/16413/files#diff-324d43dbaa18da92f1564170f78e18759a685669fb70c31e523f66f7e8556166
RequestForgery.expected https://github.com/github/codeql/pull/16413/files#diff-f8ed7777fa474f953488eda235c0e5d644fa3053f4e05630ef2b69e4bcd50e52
ReflectedXss.expected https://github.com/github/codeql/pull/16413/files#diff-462a650258528889fe6bcc8293f09f95df41f3bc6b357c63e51e23f1c29fd696
SqlInjection.expected https://github.com/github/codeql/pull/16413/files#diff-b1a9c63dbedeb67a90e9e449f705623c1999a0c5ba5e11cda57b6f5f0477817f
TaintedPath.expected https://github.com/github/codeql/pull/16413/files#diff-7991d07944ebf7e27159b50c2628c6e8e8bfeb780e0751c0c1a105aa4c34bf00
ZipSlip.expected https://github.com/github/codeql/pull/16413/files#diff-935bdc7b3f6e3e9fc0322ce87fa9e666927270e4466b6d6a71b9e80003afd722
CommandInjection.expected https://github.com/github/codeql/pull/16413/files#diff-cc031605d31e05587fee04c1b1900ef5d4ebaed669fe795a5474f28b97118ea4
ReflectedXss.expected https://github.com/github/codeql/pull/16413/files#diff-f468a70847120418a0a954a2285408b562e124fd4a300424637335e1977f2adc
SqlInjection.expected https://github.com/github/codeql/pull/16413/files#diff-f921601a4e52af0e232a50b411f52c1fdc318bf14b59c509e596acd2b4d88569
StringBreak.expected https://github.com/github/codeql/pull/16413/files#diff-04f7e77fca7af51c4e5cb2a8891d6ab0b3b78670a5be6b003ce4a8df079652d3
UnsafeTLS.expected https://github.com/github/codeql/pull/16413/files#diff-36a87f211d59000e89107f7d4f84c8f4493ddbd6512acbff51bf2fe5a0f6a68c
InsecureRandomness.expected https://github.com/github/codeql/pull/16413/files#diff-47c51184225c0cc1883bfbb14ec85f394791d70e4e6b66951d669dcff873d3a0
MissingJwtSignatureCheck.expected https://github.com/github/codeql/pull/16413/files#diff-3f1d352e49e18d85b96f466f8afd62b36b6666444b13677194b3834237088bbe
BadRedirectCheck.expected https://github.com/github/codeql/pull/16413/files#diff-a77ef4b3fe821489cc40b5d97981757cf5d3921245579af0f3f8c59d7107e73f
OpenUrlRedirect.expected https://github.com/github/codeql/pull/16413/files#diff-a9bd5a7f461dade12894c105144b5b38979dd03ab0258856566929cc19d74261
EmailInjection.expected https://github.com/github/codeql/pull/16413/files#diff-1bc85b46d13cb013bc5ab6ee4517ac1af23886423ff513c5b78f32658d9a5711
XPathInjection.expected https://github.com/github/codeql/pull/16413/files#diff-d46164fa7153407b3da59938da2d226e1949007cec0c77420c19cffe8632c155
RequestForgery.expected https://github.com/github/codeql/pull/16413/files#diff-359b27d764b038573d13ba23154ca336b4c9be6f27f8e755928a9d8f94b30e1b
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/lib/change-notes/2024-05-09-model-append-copy-max-min.mdhttps://github.com/github/codeql/pull/16413/files#diff-d70bffefbb1587f6af45afd809f806cffdd0ff75192509cabe5a9eaef36f6aea
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/lib/change-notes/2024-05-09-model-append-copy-max-min.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/lib/ext/builtin.model.ymlhttps://github.com/github/codeql/pull/16413/files#diff-49acfb1300f7330ae5b9809c5c5d03160b0490040271c671201b11afcb8972da
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/lib/ext/builtin.model.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-49acfb1300f7330ae5b9809c5c5d03160b0490040271c671201b11afcb8972da
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/lib/semmle/go/dataflow/internal/TaintTrackingUtil.qllhttps://github.com/github/codeql/pull/16413/files#diff-b0ec0c0f4564c7623f7b18ea6423ee081162aed69ac25334e316ea89411004ee
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/lib/semmle/go/dataflow/internal/TaintTrackingUtil.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-b0ec0c0f4564c7623f7b18ea6423ee081162aed69ac25334e316ea89411004ee
https://github.com/github/codeql/pull/16413/files#diff-b0ec0c0f4564c7623f7b18ea6423ee081162aed69ac25334e316ea89411004ee
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/lib/semmle/go/frameworks/Stdlib.qllhttps://github.com/github/codeql/pull/16413/files#diff-e9ba2277b38f9ca9e3d0e41ffe9bc5f61a50a052a3cc01275b0f3055c6922d73
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/lib/semmle/go/frameworks/Stdlib.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-e9ba2277b38f9ca9e3d0e41ffe9bc5f61a50a052a3cc01275b0f3055c6922d73
https://github.com/github/codeql/pull/16413/files#diff-e9ba2277b38f9ca9e3d0e41ffe9bc5f61a50a052a3cc01275b0f3055c6922d73
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/test/experimental/CWE-090/LDAPInjection.expectedhttps://github.com/github/codeql/pull/16413/files#diff-81eed0a4cb01f75b5844966a1e1447902ce0ed588f8b71d51ae7342c85a9444e
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/test/experimental/CWE-090/LDAPInjection.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-81eed0a4cb01f75b5844966a1e1447902ce0ed588f8b71d51ae7342c85a9444e
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/test/experimental/CWE-203/Timing.expectedhttps://github.com/github/codeql/pull/16413/files#diff-6bdd2e388750e4ece0a472691b167f008a3f37668daba265900e2f5cf20141f9
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/test/experimental/CWE-203/Timing.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-6bdd2e388750e4ece0a472691b167f008a3f37668daba265900e2f5cf20141f9
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/test/experimental/CWE-287/ImproperLdapAuth.expectedhttps://github.com/github/codeql/pull/16413/files#diff-8637ca06c96a02ff3bbbfb9b20de43be9749c5cd6e0c40fe221ea957acdbaad3
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/test/experimental/CWE-287/ImproperLdapAuth.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-8637ca06c96a02ff3bbbfb9b20de43be9749c5cd6e0c40fe221ea957acdbaad3
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/test/experimental/CWE-369/DivideByZero.expectedhttps://github.com/github/codeql/pull/16413/files#diff-4f0079c6d531341641f812ce43c2eb231369d3dfc7b793ee7f8ef7e795cce6b7
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/test/experimental/CWE-369/DivideByZero.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-4f0079c6d531341641f812ce43c2eb231369d3dfc7b793ee7f8ef7e795cce6b7
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/test/experimental/CWE-522-DecompressionBombs/DecompressionBombs.expectedhttps://github.com/github/codeql/pull/16413/files#diff-10bfec86b098ea0649cf6583003fa5d7eccd48f816dac49f0ba061144db83d07
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/test/experimental/CWE-522-DecompressionBombs/DecompressionBombs.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-10bfec86b098ea0649cf6583003fa5d7eccd48f816dac49f0ba061144db83d07
https://github.com/github/codeql/pull/16413/files#diff-10bfec86b098ea0649cf6583003fa5d7eccd48f816dac49f0ba061144db83d07
https://github.com/github/codeql/pull/16413/files#diff-10bfec86b098ea0649cf6583003fa5d7eccd48f816dac49f0ba061144db83d07
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/test/experimental/CWE-74/DsnInjection.expectedhttps://github.com/github/codeql/pull/16413/files#diff-f39d614ca004acb9ebf07b3269f0e2af84d79c630091d51e87b51a60b18883de
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/test/experimental/CWE-74/DsnInjection.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-f39d614ca004acb9ebf07b3269f0e2af84d79c630091d51e87b51a60b18883de
https://github.com/github/codeql/blob/main/CODEOWNERS#L10
go/ql/test/experimental/CWE-74/DsnInjectionLocal.expectedhttps://github.com/github/codeql/pull/16413/files#diff-0698b34428242cfd10ecbea036b470e89aecaabf6a3badb1a257247ebcb68d9f
View file https://github.com/owen-mc/codeql/blob/827d15aaa0f7f6b1a95cbcb593eef899ae6b9fbc/go/ql/test/experimental/CWE-74/DsnInjectionLocal.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/16413/{{ revealButtonHref }}
https://github.com/github/codeql/pull/16413/files#diff-0698b34428242cfd10ecbea036b470e89aecaabf6a3badb1a257247ebcb68d9f
https://github.com/github/codeql/pull/16413/files#diff-0698b34428242cfd10ecbea036b470e89aecaabf6a3badb1a257247ebcb68d9f
Please reload this pagehttps://github.com/github/codeql/pull/16413/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.