| route-pattern | /:user_id/:repository/pull/*id(.:format) |
| route-controller | pull_requests |
| route-action | show |
| fetch-nonce | v2:2238d1ad-a228-9041-d63c-8da83494bd0f |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | AE8E:E6048:BCCD3E:112DD83:6A57932D |
| html-safe-nonce | c895a57d0f81ad3f3f45a337336714fab6c89662d25960f88a1af34577dfa7eb |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBRThFOkU2MDQ4OkJDQ0QzRToxMTJERDgzOjZBNTc5MzJEIiwidmlzaXRvcl9pZCI6IjgzMzE1OTkwNTQwMjgzNzg5MjUiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | ab8e9ecb7ab06df323e78c76a31d2889462c59664ac33cc749cd169888c9d7d6 |
| hovercard-subject-tag | pull_request:2284337495 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///pull_requests/show |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/github/codeql/pull/18528 |
| twitter:image | https://opengraph.githubassets.com/ea88a675d9d52f49fc28e05368d1c887411b7e14d5aee3b20ce1ebeb15ca23ff/github/codeql/pull/18528 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/ea88a675d9d52f49fc28e05368d1c887411b7e14d5aee3b20ce1ebeb15ca23ff/github/codeql/pull/18528 |
| og:image:alt | The first commit is an auto-generated patch that enables diff-informed data flow in the obvious cases, and inserts a TODO comment in the non-obvious cases.
Those TODOs are then fixed up in the seco... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | asgerf |
| hostname | github.com |
| expected-hostname | github.com |
| None | a87fc68e9bdf22e1c7e48ac6a60b98882f4bb103314b3f26b3460c61fc5441ae |
| turbo-cache-control | no-cache |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | a2198d0212ed703af207673eb4d0868d4f867a5b |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/18528#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18528 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18528 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/18528 |
| Reload | https://github.com/github/codeql/pull/18528 |
| Reload | https://github.com/github/codeql/pull/18528 |
| Please reload this page | https://github.com/github/codeql/pull/18528 |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
990
| https://github.com/github/codeql/issues |
|
Pull requests
428
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| asgerf | https://github.com/asgerf |
| github:main | https://github.com/github/codeql/tree/main |
| asgerf:jss/diff-informed | https://github.com/asgerf/codeql/tree/jss/diff-informed |
| Conversation | https://github.com/github/codeql/pull/18528 |
| Commits7 (7) | https://github.com/github/codeql/pull/18528/commits |
| Checks | https://github.com/github/codeql/pull/18528/checks |
| Files changed | https://github.com/github/codeql/pull/18528/files |
| JS: Enable diff-informed queries | https://github.com/github/codeql/pull/18528#top |
| asgerf | https://github.com/asgerf |
| github:main | https://github.com/github/codeql/tree/main |
| asgerf:jss/diff-informed | https://github.com/asgerf/codeql/tree/jss/diff-informed |
|
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
| Jan 17, 2025 | https://github.com/github/codeql/pull/18528#issue-2795494669 |
| Please reload this page | https://github.com/github/codeql/pull/18528 |
| Evaluation | https://github.com/github/codeql-dca-main/tree/data/asgerf/PR-18528-0-javascript/reports |
| Please reload this page | https://github.com/github/codeql/pull/18528 |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
|
JS
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJS |
| Jan 17, 2025 | https://github.com/github/codeql/pull/18528#event-15977600287 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
|
Jan 17, 2025
| https://github.com/github/codeql/pull/18528#ref-pullrequest-2789855265 |
|
JS: Enable diff-informed queries
#18496
| https://github.com/github/codeql/pull/18496 |
| asgerf | https://github.com/asgerf |
| January 20, 2025 11:20 | https://github.com/github/codeql/pull/18528#commits-pushed-fd763a0 |
|
| https://github.com/asgerf |
| JS: Auto-patch diff informed queries | https://github.com/github/codeql/pull/18528/commits/fd763a0883ff6ab5df81af1b33dd6f5f477a2ebe |
| fd763a0 | https://github.com/github/codeql/pull/18528/commits/fd763a0883ff6ab5df81af1b33dd6f5f477a2ebe |
|
| https://github.com/asgerf |
| JS: Update PrototypePollutingFunction.ql | https://github.com/github/codeql/pull/18528/commits/8fe622f572fdc84a1ddaf9f717986fa0fc630acb |
| 8fe622f | https://github.com/github/codeql/pull/18528/commits/8fe622f572fdc84a1ddaf9f717986fa0fc630acb |
|
| https://github.com/asgerf |
| JS: Update ConditionalBypassQuery.qll | https://github.com/github/codeql/pull/18528/commits/29da1fb6c8cdcdf1c24e2b2e0135109f3fadc2c6 |
| 29da1fb | https://github.com/github/codeql/pull/18528/commits/29da1fb6c8cdcdf1c24e2b2e0135109f3fadc2c6 |
|
| https://github.com/asgerf |
| JS: Update DifferentKindsComparisonBypassQuery.qll | https://github.com/github/codeql/pull/18528/commits/ecbd7983ba92f429732bf206bbefed2007a62e2f |
| ecbd798 | https://github.com/github/codeql/pull/18528/commits/ecbd7983ba92f429732bf206bbefed2007a62e2f |
|
| https://github.com/asgerf |
| JS: Update ExternalAPIUsedwithUntrustedData | https://github.com/github/codeql/pull/18528/commits/7c29ea9dda61ebb776408731059154688d08bf3a |
| 7c29ea9 | https://github.com/github/codeql/pull/18528/commits/7c29ea9dda61ebb776408731059154688d08bf3a |
|
| https://github.com/asgerf |
| JS: Add dummy extension with an empty diff | https://github.com/github/codeql/pull/18528/commits/a948915bb0d74fe6e47e4ac2e8f8a0cd3c7095b1 |
| a948915 | https://github.com/github/codeql/pull/18528/commits/a948915bb0d74fe6e47e4ac2e8f8a0cd3c7095b1 |
|
| https://github.com/asgerf |
| Revert "JS: Add dummy extension with an empty diff" | https://github.com/github/codeql/pull/18528/commits/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
| 683ebca | https://github.com/github/codeql/pull/18528/commits/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
| 6e9b95d | https://github.com/asgerf/codeql/commit/6e9b95d4e85f4829e788400575570bdb65eda6f6 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
| force-pushed | https://github.com/github/codeql/compare/3b63d18ad68ed85172e8380bc69e63d6c8837087..683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
| 3b63d18 | https://github.com/github/codeql/commit/3b63d18ad68ed85172e8380bc69e63d6c8837087 |
| 683ebca | https://github.com/github/codeql/commit/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
|
Compare
| https://github.com/github/codeql/compare/3b63d18ad68ed85172e8380bc69e63d6c8837087..683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
| January 20, 2025 10:20 | https://github.com/github/codeql/pull/18528#event-15996479238 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
|
no-change-note-required
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Ano-change-note-required |
| Jan 20, 2025 | https://github.com/github/codeql/pull/18528#event-15996526174 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
| January 20, 2025 10:24 | https://github.com/github/codeql/pull/18528#event-15996527419 |
|
| https://github.com/apps/copilot-pull-request-reviewer |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
| January 20, 2025 10:24 | https://github.com/github/codeql/pull/18528#event-15996527500 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
| code owner | https://github.com/github/codeql/blob/ef034bce4eb670bfa4655991c9ffb2738c39b6ca/CODEOWNERS#L8 |
| January 20, 2025 10:24 | https://github.com/github/codeql/pull/18528#event-15996527632 |
|
| https://github.com/apps/copilot-pull-request-reviewer |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
|
Jan 20, 2025
| https://github.com/github/codeql/pull/18528#pullrequestreview-2561974916 |
|
View reviewed changes
| https://github.com/github/codeql/pull/18528/files/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
| https://github.com/github/codeql/pull/18528#pullrequestreview-2561974916 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/18528 |
| https://github.com/erik-krogh |
| erik-krogh | https://github.com/erik-krogh |
|
Jan 20, 2025
| https://github.com/github/codeql/pull/18528#pullrequestreview-2562244080 |
|
View reviewed changes
| https://github.com/github/codeql/pull/18528/files/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
| erik-krogh | https://github.com/erik-krogh |
| https://github.com/github/codeql/pull/18528#pullrequestreview-2562244080 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/18528 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
| f319003 | https://github.com/github/codeql/commit/f31900378b2e292e7498e53f38ea022621b86b64 |
| Jan 20, 2025 | https://github.com/github/codeql/pull/18528#event-15998090176 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
|
Aug 14, 2025
| https://github.com/github/codeql/pull/18528#ref-pullrequest-3239435811 |
|
JS: Diff-informed queries: phase 3 (non-trivial locations)
#20078
| https://github.com/github/codeql/pull/20078 |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18528 |
|
Copilot code review
| https://github.com/apps/copilot-pull-request-reviewer |
|
Copilot
| https://github.com/apps/copilot-pull-request-reviewer |
|
| https://github.com/github/codeql/pull/18528/files/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
|
| https://github.com/erik-krogh |
|
erik-krogh
| https://github.com/erik-krogh |
|
| https://github.com/github/codeql/pull/18528/files/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d |
|
JS
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJS |
|
no-change-note-required
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Ano-change-note-required |
| Please reload this page | https://github.com/github/codeql/pull/18528 |
|
| https://github.com/asgerf |
|
| https://github.com/erik-krogh |
|
| https://github.com/apps/copilot-pull-request-reviewer |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |