René's URL Explorer Experiment


Title: JS: fix and improve diff-informed queries by asgerf · Pull Request #18574 · github/codeql · GitHub

Open Graph Title: JS: fix and improve diff-informed queries by asgerf · Pull Request #18574 · github/codeql

X Title: JS: fix and improve diff-informed queries by asgerf · Pull Request #18574 · github/codeql

Description: There was a bug in the patch query which meant some queries were inadvertently marked as "obviously" safe for diff-informed queries, even though they select a related location. This PR starts by re-running the new fixed version of the patch query, which also does a better job of mentioning which related location is selected. The inserted TODOs are then resolved using the new getASelectedSinkLocation and getASelectedSourceLocation API.

Open Graph Description: There was a bug in the patch query which meant some queries were inadvertently marked as "obviously" safe for diff-informed queries, even though they select a related location. This PR st...

X Description: There was a bug in the patch query which meant some queries were inadvertently marked as "obviously" safe for diff-informed queries, even though they select a related location. Th...

Opengraph URL: https://github.com/github/codeql/pull/18574

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:09b7d913-a3f6-246c-b789-4924b656e1dd
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idD050:3DB69D:5E5F1C:834F10:6A57C091
html-safe-nonce3f4abbbdded9625b408eaabfb0b2d92a6774976c083c2d1f4b76e8ded8747180
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEMDUwOjNEQjY5RDo1RTVGMUM6ODM0RjEwOjZBNTdDMDkxIiwidmlzaXRvcl9pZCI6IjI2Mjg5MzY4MzkyODIwMTY0MDEiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmaca513388b1e60fb1d905b1ef3b22d1465e0c5f96a127d9b1fbf0583119c9afc36
hovercard-subject-tagpull_request:2294334759
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/18574/files
twitter:imagehttps://avatars.githubusercontent.com/u/316427?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/316427?s=400&v=4
og:image:altThere was a bug in the patch query which meant some queries were inadvertently marked as "obviously" safe for diff-informed queries, even though they select a related location. This PR st...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None5bf9f84655de1d0e9aa064cd3b2bc9703556c68ae53b94e21b872b7e9f1f7cc1
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release9e5a4d2583d61726264f5ec9440b26ec7a94eb3f
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/18574/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18574%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F18574%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/18574/files
Reloadhttps://github.com/github/codeql/pull/18574/files
Reloadhttps://github.com/github/codeql/pull/18574/files
Please reload this pagehttps://github.com/github/codeql/pull/18574/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 990 https://github.com/github/codeql/issues
Pull requests 428 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
asgerfhttps://github.com/asgerf
github:mainhttps://github.com/github/codeql/tree/main
asgerf:js/diff-informed2https://github.com/asgerf/codeql/tree/js/diff-informed2
Conversation 1 https://github.com/github/codeql/pull/18574
Findings https://github.com/github/codeql/pull/18574/findings
Commits 3 https://github.com/github/codeql/pull/18574/commits
Checks 0 https://github.com/github/codeql/pull/18574/checks
Files changed https://github.com/github/codeql/pull/18574/files
Please reload this pagehttps://github.com/github/codeql/pull/18574/files
JS: fix and improve diff-informed queries https://github.com/github/codeql/pull/18574/files#top
Show all changes 3 commits https://github.com/github/codeql/pull/18574/files
dba76a0 JS: Rerun patch query after bugfix asgerf Jan 23, 2025 https://github.com/github/codeql/pull/18574/commits/dba76a0e4d3a8cb3c2c05165529063b33932d42f
102b187 JS: Ignore experimental queries for now asgerf Jan 23, 2025 https://github.com/github/codeql/pull/18574/commits/102b187c35d50f1bd05fed5462fded90ba3200c8
6423033 JS: Resolve inserted TODOs asgerf Jan 23, 2025 https://github.com/github/codeql/pull/18574/commits/6423033db62ba55018549f1f87859f5f737f0d43
Clear filters https://github.com/github/codeql/pull/18574/files
Please reload this pagehttps://github.com/github/codeql/pull/18574/files
Please reload this pagehttps://github.com/github/codeql/pull/18574/files
BrokenCryptoAlgorithmQuery.qll https://github.com/github/codeql/pull/18574/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
ClientSideRequestForgeryQuery.qll https://github.com/github/codeql/pull/18574/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
CommandInjectionQuery.qll https://github.com/github/codeql/pull/18574/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
CorsMisconfigurationForCredentialsQuery.qll https://github.com/github/codeql/pull/18574/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
DeepObjectResourceExhaustionQuery.qll https://github.com/github/codeql/pull/18574/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
IndirectCommandInjectionQuery.qll https://github.com/github/codeql/pull/18574/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
InsecureDownloadQuery.qll https://github.com/github/codeql/pull/18574/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
PrototypePollutionQuery.qll https://github.com/github/codeql/pull/18574/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
RequestForgeryQuery.qll https://github.com/github/codeql/pull/18574/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
ShellCommandInjectionFromEnvironmentQuery.qll https://github.com/github/codeql/pull/18574/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
UnsafeCodeConstruction.qll https://github.com/github/codeql/pull/18574/files#diff-2efa0a0a05b5ab0525f34cd5a2c3b69ba04d2069deaa2bb26a221e91f03d0855
UnsafeHtmlConstructionQuery.qll https://github.com/github/codeql/pull/18574/files#diff-b562c4cfc9e3eb35d9eb313801269297411d9f648e4838e9db2430f662724791
UnsafeJQueryPluginQuery.qll https://github.com/github/codeql/pull/18574/files#diff-8a2775cfb20df235583371f4dba1c9cb5edfa292d2f941456a7d2a6c7d47b0b9
UnsafeShellCommandConstructionQuery.qll https://github.com/github/codeql/pull/18574/files#diff-bd653ad62907745fff99b11839ec86d98b1454ec97a1218624abae4b2ee25d20
PolynomialReDoSQuery.qll https://github.com/github/codeql/pull/18574/files#diff-5e7279175f3d06c4bd2003b6af6fe09a1b191f181ce024d70516b69027e0660b
EnvValueAndKeyInjection.ql https://github.com/github/codeql/pull/18574/files#diff-5b3698792000b0264ce0ce426651fdf3a9faef22e09369c8878cc6b0f6d8abd5
decodeJwtWithoutVerification.ql https://github.com/github/codeql/pull/18574/files#diff-8b17c4937d1824177f151316f07747b8a3ef7118688adb5a7a72ca150c2a4ed4
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/BrokenCryptoAlgorithmQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/BrokenCryptoAlgorithmQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
https://github.com/github/codeql/pull/18574/files#diff-043d3c3715648559b4dfdfa928e5965170ffb41d4d5a950bbec2e68d19fab530
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideRequestForgeryQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideRequestForgeryQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
https://github.com/github/codeql/pull/18574/files#diff-d880350e9fb035e2ac64a51eaebe7681ae22843c242388bd0556433627617e1c
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/CommandInjectionQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/CommandInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
https://github.com/github/codeql/pull/18574/files#diff-0ccb98c59172dd04b45f931ab6b108ef4a748d10dff177632e850c162b52548d
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
...pt/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
https://github.com/github/codeql/pull/18574/files#diff-603dc82945a613c2403eea9f7167c6a47ae590b41fce73bbe25f0374fa5cab78
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/DeepObjectResourceExhaustionQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/DeepObjectResourceExhaustionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
https://github.com/github/codeql/pull/18574/files#diff-002c4b4b95a7d1d5a39ef1419f29df0c520e5656037c56b1d4866dadb59c779a
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/IndirectCommandInjectionQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/IndirectCommandInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
https://github.com/github/codeql/pull/18574/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/InsecureDownloadQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/InsecureDownloadQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
https://github.com/github/codeql/pull/18574/files#diff-ae052bd5f05c791a2d3f7fbb99ab3a5a7fadac51704cceefef602db27a00686c
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutionQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
https://github.com/github/codeql/pull/18574/files#diff-769784b4870786e69b95f4a4fcc76d323768e267b9aaf5ada30990f0b4444a3b
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/RequestForgeryQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/RequestForgeryQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
https://github.com/github/codeql/pull/18574/files#diff-6748de544468c0dc71ba53e0f7c9e6b6ec30511341eecad0f70616af5294d473
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
.../ql/lib/semmle/javascript/security/dataflow/ShellCommandInjectionFromEnvironmentQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/ShellCommandInjectionFromEnvironmentQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
https://github.com/github/codeql/pull/18574/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeCodeConstruction.qllhttps://github.com/github/codeql/pull/18574/files#diff-2efa0a0a05b5ab0525f34cd5a2c3b69ba04d2069deaa2bb26a221e91f03d0855
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeCodeConstruction.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-2efa0a0a05b5ab0525f34cd5a2c3b69ba04d2069deaa2bb26a221e91f03d0855
https://github.com/github/codeql/pull/18574/files#diff-2efa0a0a05b5ab0525f34cd5a2c3b69ba04d2069deaa2bb26a221e91f03d0855
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeHtmlConstructionQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-b562c4cfc9e3eb35d9eb313801269297411d9f648e4838e9db2430f662724791
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeHtmlConstructionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-b562c4cfc9e3eb35d9eb313801269297411d9f648e4838e9db2430f662724791
https://github.com/github/codeql/pull/18574/files#diff-b562c4cfc9e3eb35d9eb313801269297411d9f648e4838e9db2430f662724791
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeJQueryPluginQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-8a2775cfb20df235583371f4dba1c9cb5edfa292d2f941456a7d2a6c7d47b0b9
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeJQueryPluginQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-8a2775cfb20df235583371f4dba1c9cb5edfa292d2f941456a7d2a6c7d47b0b9
https://github.com/github/codeql/pull/18574/files#diff-8a2775cfb20df235583371f4dba1c9cb5edfa292d2f941456a7d2a6c7d47b0b9
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
...script/ql/lib/semmle/javascript/security/dataflow/UnsafeShellCommandConstructionQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-bd653ad62907745fff99b11839ec86d98b1454ec97a1218624abae4b2ee25d20
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeShellCommandConstructionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-bd653ad62907745fff99b11839ec86d98b1454ec97a1218624abae4b2ee25d20
https://github.com/github/codeql/pull/18574/files#diff-bd653ad62907745fff99b11839ec86d98b1454ec97a1218624abae4b2ee25d20
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSQuery.qllhttps://github.com/github/codeql/pull/18574/files#diff-5e7279175f3d06c4bd2003b6af6fe09a1b191f181ce024d70516b69027e0660b
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-5e7279175f3d06c4bd2003b6af6fe09a1b191f181ce024d70516b69027e0660b
https://github.com/github/codeql/pull/18574/files#diff-5e7279175f3d06c4bd2003b6af6fe09a1b191f181ce024d70516b69027e0660b
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/src/experimental/Security/CWE-099/EnvValueAndKeyInjection.qlhttps://github.com/github/codeql/pull/18574/files#diff-5b3698792000b0264ce0ce426651fdf3a9faef22e09369c8878cc6b0f6d8abd5
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/src/experimental/Security/CWE-099/EnvValueAndKeyInjection.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-5b3698792000b0264ce0ce426651fdf3a9faef22e09369c8878cc6b0f6d8abd5
https://github.com/github/codeql/pull/18574/files#diff-5b3698792000b0264ce0ce426651fdf3a9faef22e09369c8878cc6b0f6d8abd5
https://github.com/github/codeql/blob/main/CODEOWNERS#L17
javascript/ql/src/experimental/Security/CWE-347/decodeJwtWithoutVerification.qlhttps://github.com/github/codeql/pull/18574/files#diff-8b17c4937d1824177f151316f07747b8a3ef7118688adb5a7a72ca150c2a4ed4
View file https://github.com/asgerf/codeql/blob/6423033db62ba55018549f1f87859f5f737f0d43/javascript/ql/src/experimental/Security/CWE-347/decodeJwtWithoutVerification.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/18574/{{ revealButtonHref }}
https://github.com/github/codeql/pull/18574/files#diff-8b17c4937d1824177f151316f07747b8a3ef7118688adb5a7a72ca150c2a4ed4
https://github.com/github/codeql/pull/18574/files#diff-8b17c4937d1824177f151316f07747b8a3ef7118688adb5a7a72ca150c2a4ed4
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.