René's URL Explorer Experiment


Title: JS: Enable diff-informed queries by asgerf · Pull Request #18528 · github/codeql · GitHub

Open Graph Title: JS: Enable diff-informed queries by asgerf · Pull Request #18528 · github/codeql

X Title: JS: Enable diff-informed queries by asgerf · Pull Request #18528 · github/codeql

Description: The first commit is an auto-generated patch that enables diff-informed data flow in the obvious cases, and inserts a TODO comment in the non-obvious cases. Those TODOs are then fixed up in the second commit. Evaluation shows up to 88% speedup, with a median of 15% speedup.

Open Graph Description: The first commit is an auto-generated patch that enables diff-informed data flow in the obvious cases, and inserts a TODO comment in the non-obvious cases. Those TODOs are then fixed up in the seco...

X Description: The first commit is an auto-generated patch that enables diff-informed data flow in the obvious cases, and inserts a TODO comment in the non-obvious cases. Those TODOs are then fixed up in the seco...

Opengraph URL: https://github.com/github/codeql/pull/18528

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:30ff107f-c451-ee4d-90b5-ac0de6147d51
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8F14:DEB92:8BD564:BF4779:6A57E1AF
html-safe-nonce3244b16fff1fe17a88ad8c292d70cfcadff76f2c624296eedac271638715f90f
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RjE0OkRFQjkyOjhCRDU2NDpCRjQ3Nzk6NkE1N0UxQUYiLCJ2aXNpdG9yX2lkIjoiNDU3MTU1NTE3Mjk0MjYwMjY3MSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac1985ce949610efe64e5ed7e782cc0485d6555ba1658bab5109749c285ab15515
hovercard-subject-tagpull_request:2284337495
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/18528/files
twitter:imagehttps://avatars.githubusercontent.com/u/316427?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/316427?s=400&v=4
og:image:altThe first commit is an auto-generated patch that enables diff-informed data flow in the obvious cases, and inserts a TODO comment in the non-obvious cases. Those TODOs are then fixed up in the seco...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None837767abbd14b05f219fd812ef2842c659968b63619e1b966dded83972ab5bca
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release36b9c371e4e031091f1b89adf913d9e6993943df
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/18528/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18528%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18528%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/18528/files
Reloadhttps://github.com/github/codeql/pull/18528/files
Reloadhttps://github.com/github/codeql/pull/18528/files
Please reload this pagehttps://github.com/github/codeql/pull/18528/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 990 https://github.com/github/codeql/issues
Pull requests 429 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
asgerfhttps://github.com/asgerf
github:mainhttps://github.com/github/codeql/tree/main
asgerf:jss/diff-informedhttps://github.com/asgerf/codeql/tree/jss/diff-informed
Conversation 2 https://github.com/github/codeql/pull/18528
Findings https://github.com/github/codeql/pull/18528/findings
Commits 7 https://github.com/github/codeql/pull/18528/commits
Checks 0 https://github.com/github/codeql/pull/18528/checks
Files changed https://github.com/github/codeql/pull/18528/files
Please reload this pagehttps://github.com/github/codeql/pull/18528/files
JS: Enable diff-informed queries https://github.com/github/codeql/pull/18528/files#top
Show all changes 7 commits https://github.com/github/codeql/pull/18528/files
fd763a0 JS: Auto-patch diff informed queries asgerf Dec 19, 2024 https://github.com/github/codeql/pull/18528/commits/fd763a0883ff6ab5df81af1b33dd6f5f477a2ebe
8fe622f JS: Update PrototypePollutingFunction.ql asgerf Jan 17, 2025 https://github.com/github/codeql/pull/18528/commits/8fe622f572fdc84a1ddaf9f717986fa0fc630acb
29da1fb JS: Update ConditionalBypassQuery.qll asgerf Jan 17, 2025 https://github.com/github/codeql/pull/18528/commits/29da1fb6c8cdcdf1c24e2b2e0135109f3fadc2c6
ecbd798 JS: Update DifferentKindsComparisonBypassQuery.qll asgerf Jan 17, 2025 https://github.com/github/codeql/pull/18528/commits/ecbd7983ba92f429732bf206bbefed2007a62e2f
7c29ea9 JS: Update ExternalAPIUsedwithUntrustedData asgerf Jan 17, 2025 https://github.com/github/codeql/pull/18528/commits/7c29ea9dda61ebb776408731059154688d08bf3a
a948915 JS: Add dummy extension with an empty diff asgerf Dec 19, 2024 https://github.com/github/codeql/pull/18528/commits/a948915bb0d74fe6e47e4ac2e8f8a0cd3c7095b1
683ebca Revert "JS: Add dummy extension with an empty diff" asgerf Jan 20, 2025 https://github.com/github/codeql/pull/18528/commits/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d
Clear filters https://github.com/github/codeql/pull/18528/files
Please reload this pagehttps://github.com/github/codeql/pull/18528/files
Please reload this pagehttps://github.com/github/codeql/pull/18528/files
BrokenCryptoAlgorithmQuery.qll https://github.com/github/codeql/pull/18528/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
BuildArtifactLeakQuery.qll https://github.com/github/codeql/pull/18528/files#diff-3d5e95bcb52901d5e3c143fc2bd8ff400a807dc48a1f9ab09fe3f2cf5761d37b
CleartextLoggingQuery.qll https://github.com/github/codeql/pull/18528/files#diff-fa521ed58c35fac759b37a4036b4e2efcf2d94972cc594a69bcdd52dc6858b50
CleartextStorageQuery.qll https://github.com/github/codeql/pull/18528/files#diff-94485a4f905a4c0066ca273f7ef431d85a19420f3ecbebeb66f61b0d808d4b6b
ClientSideRequestForgeryQuery.qll https://github.com/github/codeql/pull/18528/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
ClientSideUrlRedirectQuery.qll https://github.com/github/codeql/pull/18528/files#diff-fcc4c794da09f6482c35fe113bb197616f88f07eadf145bfe01d4c17475c7c67
CodeInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-9a07277e3efcf16e9f778275aabb0410eb53c7cfa310c0d07955419e2a9f20a9
CommandInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
ConditionalBypassQuery.qll https://github.com/github/codeql/pull/18528/files#diff-9a66e64298c36635f4fea19c87932e9e33ec8de2d258f41ac95f2f7fa9ee4f03
CorsMisconfigurationForCredentialsQuery.qll https://github.com/github/codeql/pull/18528/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
DeepObjectResourceExhaustionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
DifferentKindsComparisonBypassQuery.qll https://github.com/github/codeql/pull/18528/files#diff-50ff56f6f3ab37c218208629e36e59e88f7b2dce1052f66a0023e0a08f46751d
DomBasedXssQuery.qll https://github.com/github/codeql/pull/18528/files#diff-bc5e7d2a22be35b555cdd1a8d5d90d631bf3403c4c3cb3e26ffaedd8d757e834
ExceptionXssQuery.qll https://github.com/github/codeql/pull/18528/files#diff-5dff9f12aec120d4f9ffb190c4dc16ea64c8e27f50b2f8985431bc409146ce15
ExternalAPIUsedWithUntrustedDataQuery.qll https://github.com/github/codeql/pull/18528/files#diff-d227917e6940711b81ec520a07a672d3cc697b8f3e8edd37c140242588051caa
FileAccessToHttpQuery.qll https://github.com/github/codeql/pull/18528/files#diff-5fdf9a16e8af75f14c563caff72bccc57bb5f64c5948bcd7e4e31a8c1927156a
HardcodedCredentialsQuery.qll https://github.com/github/codeql/pull/18528/files#diff-9656d027bac66dbad22d3caf89f801a625337a72a407a7488e16787124f22d9f
HardcodedDataInterpretedAsCodeQuery.qll https://github.com/github/codeql/pull/18528/files#diff-ae431688403bc9be24a86fff5c9512f30c0e2f3684ec7aae7521ced60eb5b821
HostHeaderPoisoningInEmailGenerationQuery.qll https://github.com/github/codeql/pull/18528/files#diff-2b76f0ce44e2febb6090ea2ce911cc6a2e05d1e9b1b4d92bd5aefb0c7ab649f4
HttpToFileAccessQuery.qll https://github.com/github/codeql/pull/18528/files#diff-a28fdb83b79b926f4b9c521e2af42ea5d69d8912cb91b85e7067532132ff8a26
ImproperCodeSanitizationQuery.qll https://github.com/github/codeql/pull/18528/files#diff-4f099d81bf9433338fad63ad88e4fb83ba16674e17a6314db6bb09e0b86b4d9b
IncompleteHtmlAttributeSanitizationQuery.qll https://github.com/github/codeql/pull/18528/files#diff-2c303e887a42e5fa94fc160232b5abfbc69bc66f5b4e14049630de64301a78fd
IndirectCommandInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
InsecureDownloadQuery.qll https://github.com/github/codeql/pull/18528/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
InsecureRandomnessQuery.qll https://github.com/github/codeql/pull/18528/files#diff-e01c555045e6d7e1e3317abcb6ad3e075bcb9bc0149e471a21945fd6c77aa326
InsecureTemporaryFileQuery.qll https://github.com/github/codeql/pull/18528/files#diff-0beaedd7044f950974071c66f800751d79870dd401d9a8a44c75bf9d6752eb30
InsufficientPasswordHashQuery.qll https://github.com/github/codeql/pull/18528/files#diff-4c9df2acb2f933253304094d1e89ca1af7f74cff214ddff848b95018d1eb0abc
LogInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-cedaf769b3fae733a5f46c19d329aa393a9990a0d80f597652395713de3cdece
LoopBoundInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-8ac573570209abdbd8bdb6c572a2e6c6d2e43943723199490e16f62c9914949e
NosqlInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-d85badd56edf845b41fb5b992770ec64067167b73ef2836b5ee8a570d79f793e
PostMessageStarQuery.qll https://github.com/github/codeql/pull/18528/files#diff-96475cc233325d4829cfd3f60508c97098b8ea79a111f02cd05fd034dcaee183
PrototypePollutingAssignmentQuery.qll https://github.com/github/codeql/pull/18528/files#diff-dfd875696b5297e5e44d495c3b5b05f78a166b8da0f0a64a97892e7ceb313bb8
PrototypePollutionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
ReflectedXssQuery.qll https://github.com/github/codeql/pull/18528/files#diff-61b857bacad8e26e038233625a26a392efa1c7e04a57b6b7e914f7528e161c79
RegExpInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-bd8a3728e1524d47dcf0e55c9e228dece1f2cf921e8518ff4c8002c877f8785b
RemotePropertyInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-28b4c2b22a7a2a286fdb8aa4f17c27cf7b7cc18a2d31f496063247a62563cb4e
RequestForgeryQuery.qll https://github.com/github/codeql/pull/18528/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
ResourceExhaustionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-d9d11731156895efbeed8cc7319890f3e89f23a5c43990a86d0e7489054de866
SecondOrderCommandInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-0adbe1929dddee3d06dfaa92d685fb521d6538270a0e86570f30357a623039b7
ServerSideUrlRedirectQuery.qll https://github.com/github/codeql/pull/18528/files#diff-03ebe5aa4ce835a897e5651790446e46bfc8483abdf219e75cf3432010384a68
ShellCommandInjectionFromEnvironmentQuery.qll https://github.com/github/codeql/pull/18528/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
SqlInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-c2246892be8b93487f95bcefc2ea48703e907c95ca95cd594248a5234209cd8a
StackTraceExposureQuery.qll https://github.com/github/codeql/pull/18528/files#diff-a17441ca0878dff6b9fb8f42059645a2e2b67455d5b5830a05b90fbcf61fde9a
StoredXssQuery.qll https://github.com/github/codeql/pull/18528/files#diff-106474823299b47c4b5f17f57fa0d6e70aa448bfed64e7b051126b858e98c723
TaintedFormatStringQuery.qll https://github.com/github/codeql/pull/18528/files#diff-60803cc3d6fa7365c2b86c05da3198cb0d9906f01f714423125e906121415a0d
TaintedPathQuery.qll https://github.com/github/codeql/pull/18528/files#diff-0f2a31f1431e563a79c75337e9216ae07ea9f1f4feee74e42e736fb727168201
TemplateObjectInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-2d058300e86120ffe24ce842711ff03b0fc4067cfd97cbd5e30edc3237d1b0be
TypeConfusionThroughParameterTamperingQuery.qll https://github.com/github/codeql/pull/18528/files#diff-13dbbd450b452cef6d0ed8bfe2d6e2068f0091f95bf25c5976cdab8e1116d37b
UnsafeCodeConstruction.qll https://github.com/github/codeql/pull/18528/files#diff-2efa0a0a05b5ab0525f34cd5a2c3b69ba04d2069deaa2bb26a221e91f03d0855
UnsafeDeserializationQuery.qll https://github.com/github/codeql/pull/18528/files#diff-54a3e7fb9d107fcfd592b5a5c98436f557dade7fa5d6ee0bbccf5923f381f818
UnsafeDynamicMethodAccessQuery.qll https://github.com/github/codeql/pull/18528/files#diff-ff6eae77aba423cf87070bfb24c010ee94a44060388e3de8cd468c38b0d1dadc
UnsafeHtmlConstructionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-b562c4cfc9e3eb35d9eb313801269297411d9f648e4838e9db2430f662724791
UnsafeJQueryPluginQuery.qll https://github.com/github/codeql/pull/18528/files#diff-8a2775cfb20df235583371f4dba1c9cb5edfa292d2f941456a7d2a6c7d47b0b9
UnsafeShellCommandConstructionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-bd653ad62907745fff99b11839ec86d98b1454ec97a1218624abae4b2ee25d20
UnvalidatedDynamicMethodCallQuery.qll https://github.com/github/codeql/pull/18528/files#diff-9b2b223a73085745341b17cd67ed9d081bcd19d10f5cfc2d4b8904275bc52762
XmlBombQuery.qll https://github.com/github/codeql/pull/18528/files#diff-b6a17bc38fbec4c1cf2fc26e070693e98da22acb08de35e38a009fa5204c53cc
XpathInjectionQuery.qll https://github.com/github/codeql/pull/18528/files#diff-0958057a6c7b8ced0072e94fdd336e1aa87d92c96feaf330124a4d513e4d831d
XssThroughDomQuery.qll https://github.com/github/codeql/pull/18528/files#diff-322ce8f3123cf0b6ad3852a76d3fbc41f88ebc5ad2d9a47cd4167295392e2096
XxeQuery.qll https://github.com/github/codeql/pull/18528/files#diff-bd41f872056996b1c802aaf68195ebaa5bddc0598818fcdf4685bfd6766b0eea
ZipSlipQuery.qll https://github.com/github/codeql/pull/18528/files#diff-76c16d9698d59fa78c05e6ab96364197fa7089a8f4e060e617784bf12c98ea09
PolynomialReDoSQuery.qll https://github.com/github/codeql/pull/18528/files#diff-5e7279175f3d06c4bd2003b6af6fe09a1b191f181ce024d70516b69027e0660b
PrototypePollutingFunction.ql https://github.com/github/codeql/pull/18528/files#diff-f53081cc3d2ccec008b98ca0e28e78c498619514dbe3e01970c36025d0f96c59
CodeInjection.ql https://github.com/github/codeql/pull/18528/files#diff-0f2aa95eee5a1eb5a273a482c9fbe09a7c06f5ab849446521b038c049a4fdc27
EnvValueAndKeyInjection.ql https://github.com/github/codeql/pull/18528/files#diff-5b3698792000b0264ce0ce426651fdf3a9faef22e09369c8878cc6b0f6d8abd5
EnvValueInjection.ql https://github.com/github/codeql/pull/18528/files#diff-d7fa12a6d15cb3ba3d5f568059753ca0dcd74ca1191665a390822366668e9349
TokenBuiltFromUUID.ql https://github.com/github/codeql/pull/18528/files#diff-2aabce77abc8b143fe499204369287805ad494a61057958e462feba5885c3627
decodeJwtWithoutVerification.ql https://github.com/github/codeql/pull/18528/files#diff-8b17c4937d1824177f151316f07747b8a3ef7118688adb5a7a72ca150c2a4ed4
decodeJwtWithoutVerificationLocalSource.ql https://github.com/github/codeql/pull/18528/files#diff-4dcf5d6345b94556d000b167074993e9911c0ce0bbae18b9370a6c2c15c1d8c6
DecompressionBombs.ql https://github.com/github/codeql/pull/18528/files#diff-5dadc9cdf0670cc8c14960e87f9889064f42c410306b8ec379366a0f774dd7ee
SSRF.qll https://github.com/github/codeql/pull/18528/files#diff-370985846e3cad133d029c9ae56b0bdf5d82f63cd3877e159c1a4fca8ebdfea0
CorsPermissiveConfigurationQuery.qll https://github.com/github/codeql/pull/18528/files#diff-6daffa6a37fd3661a0ec7ec14884f3cb9ff2e7cfa4b45349cd8b1c28f13e2661
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/BrokenCryptoAlgorithmQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/BrokenCryptoAlgorithmQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
https://github.com/github/codeql/pull/18528/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/BuildArtifactLeakQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-3d5e95bcb52901d5e3c143fc2bd8ff400a807dc48a1f9ab09fe3f2cf5761d37b
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/BuildArtifactLeakQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-3d5e95bcb52901d5e3c143fc2bd8ff400a807dc48a1f9ab09fe3f2cf5761d37b
https://github.com/github/codeql/pull/18528/files#diff-3d5e95bcb52901d5e3c143fc2bd8ff400a807dc48a1f9ab09fe3f2cf5761d37b
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/CleartextLoggingQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-fa521ed58c35fac759b37a4036b4e2efcf2d94972cc594a69bcdd52dc6858b50
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/CleartextLoggingQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-fa521ed58c35fac759b37a4036b4e2efcf2d94972cc594a69bcdd52dc6858b50
https://github.com/github/codeql/pull/18528/files#diff-fa521ed58c35fac759b37a4036b4e2efcf2d94972cc594a69bcdd52dc6858b50
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/CleartextStorageQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-94485a4f905a4c0066ca273f7ef431d85a19420f3ecbebeb66f61b0d808d4b6b
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/CleartextStorageQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-94485a4f905a4c0066ca273f7ef431d85a19420f3ecbebeb66f61b0d808d4b6b
https://github.com/github/codeql/pull/18528/files#diff-94485a4f905a4c0066ca273f7ef431d85a19420f3ecbebeb66f61b0d808d4b6b
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideRequestForgeryQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideRequestForgeryQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
https://github.com/github/codeql/pull/18528/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideUrlRedirectQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-fcc4c794da09f6482c35fe113bb197616f88f07eadf145bfe01d4c17475c7c67
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideUrlRedirectQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-fcc4c794da09f6482c35fe113bb197616f88f07eadf145bfe01d4c17475c7c67
https://github.com/github/codeql/pull/18528/files#diff-fcc4c794da09f6482c35fe113bb197616f88f07eadf145bfe01d4c17475c7c67
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/CodeInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-9a07277e3efcf16e9f778275aabb0410eb53c7cfa310c0d07955419e2a9f20a9
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/CodeInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-9a07277e3efcf16e9f778275aabb0410eb53c7cfa310c0d07955419e2a9f20a9
https://github.com/github/codeql/pull/18528/files#diff-9a07277e3efcf16e9f778275aabb0410eb53c7cfa310c0d07955419e2a9f20a9
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/CommandInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/CommandInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
https://github.com/github/codeql/pull/18528/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ConditionalBypassQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-9a66e64298c36635f4fea19c87932e9e33ec8de2d258f41ac95f2f7fa9ee4f03
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ConditionalBypassQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-9a66e64298c36635f4fea19c87932e9e33ec8de2d258f41ac95f2f7fa9ee4f03
https://github.com/github/codeql/pull/18528/files#diff-9a66e64298c36635f4fea19c87932e9e33ec8de2d258f41ac95f2f7fa9ee4f03
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
...pt/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
https://github.com/github/codeql/pull/18528/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/DeepObjectResourceExhaustionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/DeepObjectResourceExhaustionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
https://github.com/github/codeql/pull/18528/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
...script/ql/lib/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-50ff56f6f3ab37c218208629e36e59e88f7b2dce1052f66a0023e0a08f46751d
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-50ff56f6f3ab37c218208629e36e59e88f7b2dce1052f66a0023e0a08f46751d
https://github.com/github/codeql/pull/18528/files#diff-50ff56f6f3ab37c218208629e36e59e88f7b2dce1052f66a0023e0a08f46751d
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-bc5e7d2a22be35b555cdd1a8d5d90d631bf3403c4c3cb3e26ffaedd8d757e834
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-bc5e7d2a22be35b555cdd1a8d5d90d631bf3403c4c3cb3e26ffaedd8d757e834
https://github.com/github/codeql/pull/18528/files#diff-bc5e7d2a22be35b555cdd1a8d5d90d631bf3403c4c3cb3e26ffaedd8d757e834
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ExceptionXssQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-5dff9f12aec120d4f9ffb190c4dc16ea64c8e27f50b2f8985431bc409146ce15
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ExceptionXssQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-5dff9f12aec120d4f9ffb190c4dc16ea64c8e27f50b2f8985431bc409146ce15
https://github.com/github/codeql/pull/18528/files#diff-5dff9f12aec120d4f9ffb190c4dc16ea64c8e27f50b2f8985431bc409146ce15
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
...ript/ql/lib/semmle/javascript/security/dataflow/ExternalAPIUsedWithUntrustedDataQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-d227917e6940711b81ec520a07a672d3cc697b8f3e8edd37c140242588051caa
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ExternalAPIUsedWithUntrustedDataQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-d227917e6940711b81ec520a07a672d3cc697b8f3e8edd37c140242588051caa
https://github.com/github/codeql/pull/18528/files#diff-d227917e6940711b81ec520a07a672d3cc697b8f3e8edd37c140242588051caa
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/FileAccessToHttpQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-5fdf9a16e8af75f14c563caff72bccc57bb5f64c5948bcd7e4e31a8c1927156a
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/FileAccessToHttpQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-5fdf9a16e8af75f14c563caff72bccc57bb5f64c5948bcd7e4e31a8c1927156a
https://github.com/github/codeql/pull/18528/files#diff-5fdf9a16e8af75f14c563caff72bccc57bb5f64c5948bcd7e4e31a8c1927156a
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/HardcodedCredentialsQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-9656d027bac66dbad22d3caf89f801a625337a72a407a7488e16787124f22d9f
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/HardcodedCredentialsQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-9656d027bac66dbad22d3caf89f801a625337a72a407a7488e16787124f22d9f
https://github.com/github/codeql/pull/18528/files#diff-9656d027bac66dbad22d3caf89f801a625337a72a407a7488e16787124f22d9f
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
...script/ql/lib/semmle/javascript/security/dataflow/HardcodedDataInterpretedAsCodeQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-ae431688403bc9be24a86fff5c9512f30c0e2f3684ec7aae7521ced60eb5b821
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/HardcodedDataInterpretedAsCodeQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-ae431688403bc9be24a86fff5c9512f30c0e2f3684ec7aae7521ced60eb5b821
https://github.com/github/codeql/pull/18528/files#diff-ae431688403bc9be24a86fff5c9512f30c0e2f3684ec7aae7521ced60eb5b821
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
.../ql/lib/semmle/javascript/security/dataflow/HostHeaderPoisoningInEmailGenerationQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-2b76f0ce44e2febb6090ea2ce911cc6a2e05d1e9b1b4d92bd5aefb0c7ab649f4
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/HostHeaderPoisoningInEmailGenerationQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-2b76f0ce44e2febb6090ea2ce911cc6a2e05d1e9b1b4d92bd5aefb0c7ab649f4
https://github.com/github/codeql/pull/18528/files#diff-2b76f0ce44e2febb6090ea2ce911cc6a2e05d1e9b1b4d92bd5aefb0c7ab649f4
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/HttpToFileAccessQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-a28fdb83b79b926f4b9c521e2af42ea5d69d8912cb91b85e7067532132ff8a26
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/HttpToFileAccessQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-a28fdb83b79b926f4b9c521e2af42ea5d69d8912cb91b85e7067532132ff8a26
https://github.com/github/codeql/pull/18528/files#diff-a28fdb83b79b926f4b9c521e2af42ea5d69d8912cb91b85e7067532132ff8a26
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ImproperCodeSanitizationQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-4f099d81bf9433338fad63ad88e4fb83ba16674e17a6314db6bb09e0b86b4d9b
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ImproperCodeSanitizationQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-4f099d81bf9433338fad63ad88e4fb83ba16674e17a6314db6bb09e0b86b4d9b
https://github.com/github/codeql/pull/18528/files#diff-4f099d81bf9433338fad63ad88e4fb83ba16674e17a6314db6bb09e0b86b4d9b
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
...t/ql/lib/semmle/javascript/security/dataflow/IncompleteHtmlAttributeSanitizationQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-2c303e887a42e5fa94fc160232b5abfbc69bc66f5b4e14049630de64301a78fd
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/IncompleteHtmlAttributeSanitizationQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-2c303e887a42e5fa94fc160232b5abfbc69bc66f5b4e14049630de64301a78fd
https://github.com/github/codeql/pull/18528/files#diff-2c303e887a42e5fa94fc160232b5abfbc69bc66f5b4e14049630de64301a78fd
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/IndirectCommandInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/IndirectCommandInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
https://github.com/github/codeql/pull/18528/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/InsecureDownloadQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/InsecureDownloadQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
https://github.com/github/codeql/pull/18528/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/InsecureRandomnessQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-e01c555045e6d7e1e3317abcb6ad3e075bcb9bc0149e471a21945fd6c77aa326
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/InsecureRandomnessQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-e01c555045e6d7e1e3317abcb6ad3e075bcb9bc0149e471a21945fd6c77aa326
https://github.com/github/codeql/pull/18528/files#diff-e01c555045e6d7e1e3317abcb6ad3e075bcb9bc0149e471a21945fd6c77aa326
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/InsecureTemporaryFileQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-0beaedd7044f950974071c66f800751d79870dd401d9a8a44c75bf9d6752eb30
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/InsecureTemporaryFileQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-0beaedd7044f950974071c66f800751d79870dd401d9a8a44c75bf9d6752eb30
https://github.com/github/codeql/pull/18528/files#diff-0beaedd7044f950974071c66f800751d79870dd401d9a8a44c75bf9d6752eb30
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/InsufficientPasswordHashQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-4c9df2acb2f933253304094d1e89ca1af7f74cff214ddff848b95018d1eb0abc
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/InsufficientPasswordHashQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-4c9df2acb2f933253304094d1e89ca1af7f74cff214ddff848b95018d1eb0abc
https://github.com/github/codeql/pull/18528/files#diff-4c9df2acb2f933253304094d1e89ca1af7f74cff214ddff848b95018d1eb0abc
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/LogInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-cedaf769b3fae733a5f46c19d329aa393a9990a0d80f597652395713de3cdece
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/LogInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-cedaf769b3fae733a5f46c19d329aa393a9990a0d80f597652395713de3cdece
https://github.com/github/codeql/pull/18528/files#diff-cedaf769b3fae733a5f46c19d329aa393a9990a0d80f597652395713de3cdece
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/LoopBoundInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-8ac573570209abdbd8bdb6c572a2e6c6d2e43943723199490e16f62c9914949e
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/LoopBoundInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-8ac573570209abdbd8bdb6c572a2e6c6d2e43943723199490e16f62c9914949e
https://github.com/github/codeql/pull/18528/files#diff-8ac573570209abdbd8bdb6c572a2e6c6d2e43943723199490e16f62c9914949e
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/NosqlInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-d85badd56edf845b41fb5b992770ec64067167b73ef2836b5ee8a570d79f793e
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/NosqlInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-d85badd56edf845b41fb5b992770ec64067167b73ef2836b5ee8a570d79f793e
https://github.com/github/codeql/pull/18528/files#diff-d85badd56edf845b41fb5b992770ec64067167b73ef2836b5ee8a570d79f793e
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/PostMessageStarQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-96475cc233325d4829cfd3f60508c97098b8ea79a111f02cd05fd034dcaee183
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/PostMessageStarQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-96475cc233325d4829cfd3f60508c97098b8ea79a111f02cd05fd034dcaee183
https://github.com/github/codeql/pull/18528/files#diff-96475cc233325d4829cfd3f60508c97098b8ea79a111f02cd05fd034dcaee183
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-dfd875696b5297e5e44d495c3b5b05f78a166b8da0f0a64a97892e7ceb313bb8
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-dfd875696b5297e5e44d495c3b5b05f78a166b8da0f0a64a97892e7ceb313bb8
https://github.com/github/codeql/pull/18528/files#diff-dfd875696b5297e5e44d495c3b5b05f78a166b8da0f0a64a97892e7ceb313bb8
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
https://github.com/github/codeql/pull/18528/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ReflectedXssQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-61b857bacad8e26e038233625a26a392efa1c7e04a57b6b7e914f7528e161c79
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ReflectedXssQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-61b857bacad8e26e038233625a26a392efa1c7e04a57b6b7e914f7528e161c79
https://github.com/github/codeql/pull/18528/files#diff-61b857bacad8e26e038233625a26a392efa1c7e04a57b6b7e914f7528e161c79
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/RegExpInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-bd8a3728e1524d47dcf0e55c9e228dece1f2cf921e8518ff4c8002c877f8785b
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/RegExpInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-bd8a3728e1524d47dcf0e55c9e228dece1f2cf921e8518ff4c8002c877f8785b
https://github.com/github/codeql/pull/18528/files#diff-bd8a3728e1524d47dcf0e55c9e228dece1f2cf921e8518ff4c8002c877f8785b
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/RemotePropertyInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-28b4c2b22a7a2a286fdb8aa4f17c27cf7b7cc18a2d31f496063247a62563cb4e
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/RemotePropertyInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-28b4c2b22a7a2a286fdb8aa4f17c27cf7b7cc18a2d31f496063247a62563cb4e
https://github.com/github/codeql/pull/18528/files#diff-28b4c2b22a7a2a286fdb8aa4f17c27cf7b7cc18a2d31f496063247a62563cb4e
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/RequestForgeryQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/RequestForgeryQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
https://github.com/github/codeql/pull/18528/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ResourceExhaustionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-d9d11731156895efbeed8cc7319890f3e89f23a5c43990a86d0e7489054de866
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ResourceExhaustionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-d9d11731156895efbeed8cc7319890f3e89f23a5c43990a86d0e7489054de866
https://github.com/github/codeql/pull/18528/files#diff-d9d11731156895efbeed8cc7319890f3e89f23a5c43990a86d0e7489054de866
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/SecondOrderCommandInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-0adbe1929dddee3d06dfaa92d685fb521d6538270a0e86570f30357a623039b7
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/SecondOrderCommandInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-0adbe1929dddee3d06dfaa92d685fb521d6538270a0e86570f30357a623039b7
https://github.com/github/codeql/pull/18528/files#diff-0adbe1929dddee3d06dfaa92d685fb521d6538270a0e86570f30357a623039b7
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ServerSideUrlRedirectQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-03ebe5aa4ce835a897e5651790446e46bfc8483abdf219e75cf3432010384a68
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ServerSideUrlRedirectQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-03ebe5aa4ce835a897e5651790446e46bfc8483abdf219e75cf3432010384a68
https://github.com/github/codeql/pull/18528/files#diff-03ebe5aa4ce835a897e5651790446e46bfc8483abdf219e75cf3432010384a68
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
.../ql/lib/semmle/javascript/security/dataflow/ShellCommandInjectionFromEnvironmentQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/ShellCommandInjectionFromEnvironmentQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
https://github.com/github/codeql/pull/18528/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/SqlInjectionQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-c2246892be8b93487f95bcefc2ea48703e907c95ca95cd594248a5234209cd8a
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/SqlInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-c2246892be8b93487f95bcefc2ea48703e907c95ca95cd594248a5234209cd8a
https://github.com/github/codeql/pull/18528/files#diff-c2246892be8b93487f95bcefc2ea48703e907c95ca95cd594248a5234209cd8a
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/StackTraceExposureQuery.qllhttps://github.com/github/codeql/pull/18528/files#diff-a17441ca0878dff6b9fb8f42059645a2e2b67455d5b5830a05b90fbcf61fde9a
View file https://github.com/asgerf/codeql/blob/683ebcaf16b894d986c8b2fea40b7a2e6b3fc23d/javascript/ql/lib/semmle/javascript/security/dataflow/StackTraceExposureQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18528/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18528/files#diff-a17441ca0878dff6b9fb8f42059645a2e2b67455d5b5830a05b90fbcf61fde9a
https://github.com/github/codeql/pull/18528/files#diff-a17441ca0878dff6b9fb8f42059645a2e2b67455d5b5830a05b90fbcf61fde9a
Please reload this pagehttps://github.com/github/codeql/pull/18528/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.