René's URL Explorer Experiment


Title: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #19957 · github/codeql · GitHub

Open Graph Title: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #19957 · github/codeql

X Title: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #19957 · github/codeql

Description: This PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actually selected. Prior work includes PRs like #19663, #19759, and #19817. This PR uses the same patch script as those PRs to find candidate queries to convert to diff-enabled. This is the final step in mass-enabling diff-informed queries on all the languages. Commit-by-commit reviewing is recommended. I have split the commits that add/modify tests from the ones that enable/disable diff-informed queries. If the commit modifies a .qll file, in the commit message I've included links to the queries that depend on that .qll for easier reviewing. Feel free to delegate parts of the review to others who may be more specialized in certain languages. Potentially tricky cases: [TEST] C++: CWE-020/ExternalAPI: add tests based on qlhelp: I wasn't able to get alerts to show up for the qhelp-based tests; can someone from the language team chip in to what a useful test would look like? Similar case with the Python TimingAttackAgainstHash test. In contrast, in [TEST] Java: CWE-020/ExternalAPI I was able to get alerts just from the qhelp example, and in [TEST] C++: CleartextSqliteDatabase I was able to get alerts from a mostly Copilot-written test. [DIFF-INFORMED] C++: (IR) ExternalAPIs: config used in two queries, but one of them without a location; I guess that's fine? [DIFF-INFORMED] C++: SSLResultConflation: query uses a secondary config (i.e. calls the same config twice), but this does pass tests, unlike the other queries with secondary configs. Can I get a sanity check here? Let me know if you find other cases of secondary configs that are passing tests. [DIFF-INFORMED] Java: LogInjection: disabled because of mysterious OOM during --check-diff-informed locally and in CI. Should create a follow-up issue. I'm not sure how important it is to have the location overrides be as precise as possible by including all the clauses from the where, or if it's good enough to overapproximate and just pass the --check-diff-informed tests.

Open Graph Description: This PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actu...

X Description: This PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actu...

Opengraph URL: https://github.com/github/codeql/pull/19957

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:74037fa3-4bfa-7bd5-c3ec-4db5a69a0070
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id9226:10F22D:83F6FD:BF6704:6A575897
html-safe-noncec775d5ae9868afc8a1885409f0a1c7b99cd5b4458f758b07702d56be81ff43d8
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5MjI2OjEwRjIyRDo4M0Y2RkQ6QkY2NzA0OjZBNTc1ODk3IiwidmlzaXRvcl9pZCI6IjI1MDg5MzU4NzgyMzM1MTIwODciLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmaca2ca92dc27dcecee9d88bbd69023f24070ced8cfacbb000ac00a044b63935d82
hovercard-subject-tagpull_request:2635813515
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/19957/files
twitter:imagehttps://avatars.githubusercontent.com/u/9970661?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/9970661?s=400&v=4
og:image:altThis PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actu...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None4e7a7296a3830877cf21a6ad2a972c9e618a48915e03966cf0c53eb08e5aad98
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release602250ea3b6dd8302a7220ef98adb828dbc807e4
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/19957/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F19957%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F19957%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/19957/files
Reloadhttps://github.com/github/codeql/pull/19957/files
Reloadhttps://github.com/github/codeql/pull/19957/files
Please reload this pagehttps://github.com/github/codeql/pull/19957/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 990 https://github.com/github/codeql/issues
Pull requests 429 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
d10chttps://github.com/d10c
github:mainhttps://github.com/github/codeql/tree/main
d10c:d10c/diff-informed-phase-3https://github.com/d10c/codeql/tree/d10c/diff-informed-phase-3
Conversation 21 https://github.com/github/codeql/pull/19957
Findings https://github.com/github/codeql/pull/19957/findings
Commits 96 https://github.com/github/codeql/pull/19957/commits
Checks 36 https://github.com/github/codeql/pull/19957/checks
Files changed https://github.com/github/codeql/pull/19957/files
Please reload this pagehttps://github.com/github/codeql/pull/19957/files
Diff-informed queries: phase 3 (non-trivial locations) https://github.com/github/codeql/pull/19957/files#top
Show all changes 96 commits https://github.com/github/codeql/pull/19957/files
09daa56 [TEST] C++: CWE-020/ExternalAPI: add tests based on qlhelp (TODO: pro… d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/09daa567c71776a4c26b09cbc4ada628a0fae570
b3db51e [TEST] C++: CleartextSqliteDatabase: add new test d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/b3db51e4ead8be5e717d6f485b0eab092ee8edcf
87db121 [TEST] Java: CWE-020/ExternalAPI: new test based on qhelp d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/87db12123cb5755b6158af59eedbc33499a3d3fb
0bfc400 [TEST] Java: LogInjection: convert test to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/0bfc400e21ed013efbbdad11c4ed05341fae681d
e1cce4e [TEST] Java: UnsafeCertTrust: convert test to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/e1cce4e525ab5a1638430b0b502fc1fa2e6c2152
9fa5760 [TEST] Java: TrustBoundaryViolations: convert test to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/9fa57606f75062b407ae9bb17a39f44f9c3398dd
3247321 [TEST] Java: SensitiveLogInfo: convert to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/32473215e9e5b086c5cdcc7f2130bf2fae44d857
fd18b62 [TEST] Java: ConditionalBypass: convert to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/fd18b6294c32bc63903d73eac527b767d2b2179c
64689b2 [TEST] Java: SensitiveCommunication: convert to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/64689b2b8ba62aab867c9f672039b401d6f7f07c
29c3916 [TEST] Python: TimingAttackAgainstHash: add qlref test to existing so… d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/29c3916f4d702d8fbc84f3c75139a36ff69d8fd5
0874f86 [DIFF-INFORMED] Actions: ArgumentInjection d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/0874f86e53d7eef12e9b81e494596df93bd13b58
96a39da [DIFF-INFORMED] Actions: ArtifactPoisoning d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/96a39da1beadccf98fc84c94aad9a4a7a1519b28
3f30cf0 [DIFF-INFORMED] Actions: CodeInjection d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/3f30cf08d89c6ca896a619d7ac8c764c347f726a
3eb1a87 [DIFF-INFORMED] Actions: CommandInjection d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/3eb1a8764d422bcd4581f122506d5a22add7a309
75b211f [DIFF-INFORMED] Actions: EnvPathInjection d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/75b211f5912b7108a559b5191614aa77d997f7e4
570e70d [DIFF-INFORMED] Actions: EnvVarInjection d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/570e70d0340d9d895484ac5a0b2dca22660ff3c5
8cc0537 [DIFF-INFORMED] C++: OverflowDestination d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/8cc0537abf8e97a62a77e5ea5e22215229b10934
fa15582 [DIFF-INFORMED] C++: ConstantSizeArrayOffByOne d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/fa155822ec5748e3c56abba415a904f7bcd954ea
698fbde [DIFF-INFORMED] C++: DecompressionBombs d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/698fbde03f2ed2c55cc3d224c97b253ec7a1f76d
56e6187 [DIFF-INFORMED] C++: NonConstantFormat d10c Jul 15, 2025 https://github.com/github/codeql/pull/19957/commits/56e6187e6b3749481827bb2e77a9ed9dd3669bd1
7044eb4 [DIFF-INFORMED] C++: LeapYear d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/7044eb4f77bee1d2b3c7d815e74bba8f0e9789af
d7ae55a [DIFF-INFORMED] C++: (IR) ExternalAPIs d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/d7ae55a2cb1cd6035d5f8dbbd77d5ea4e5780842
3a83961 [DIFF-INFORMED] C++: TaintedPath d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/3a83961fb4feac884c58afffc9343679f11a9064
1cc2793 [DIFF-INFORMED] C++: ExecTainted d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/1cc2793ad3d62be50d0d66bfa0bfbc1bd40ce326
db3df32 [DIFF-INFORMED] C++: CgiXss d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/db3df32865013f7559b88555356f0499b24b36de
803cfcf [DIFF-INFORMED] C++: SqlTainted d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/803cfcf38e0964544bfdb1956812aabee6424881
3b0cfc5 [DIFF-INFORMED] C++: UnboundedWrite d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/3b0cfc5d68f417c486a7e00b558a3529a31d9cc4
6ff8746 [DIFF-INFORMED] C++: ImproperNullTerminationTainted d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/6ff8746afe50a6f9fb5c442a37d2b4d668cbf4e6
905635b [DIFF-INFORMED] C++: CWE-190/ArithmeticTainted,etc. d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/905635b975e7a343f80132e05f5a774c3e47e73b
89cc942 [DIFF-INFORMED] C++: AuthenticationBypass d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/89cc9421cdc2c415c543e197208ced052e5956a5
858f4fd [DIFF-INFORMED] C++: SSLResultConflation (has secondary config but pa… d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/858f4fd13b268b53ec0358618e77739f34232651
c75b1f1 [DIFF-INFORMED] C++: CWE-311/Cleartext… d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/c75b1f171a0180afd4d85f0d4ec76f923a868cbe
dfc1ace [DIFF-INFORMED] C++: CleartextSqliteDatabase d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/dfc1ace45220d627f4619a27c63e1113f9d16264
1a24e5d [DIFF-INFORMED] C++: UseOfHttp d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/1a24e5d7a5de32a6d154380906c29b62e49546fd
5bb53d3 [DIFF-INFORMED] C++: InsufficientKeySize d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/5bb53d3c8cd1fd993ed27e5b4b0e8b835fae4fd0
d7710fc [DIFF-INFORMED] C++: IteratorToExpiredContainer d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/d7710fc0dc576b3804c837ad27d4877249efb9fd
382b482 [DIFF-INFORMED] C++: UnsafeCreateProcessCall d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/382b4826c355d012272a67d0413e53779c6e5d3a
233c015 [DIFF-INFORMED] C++: UnsafeDaclSecurityDescriptor d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/233c0158d906de8fb0fb7406dd17fe92e7faf644
94611b8 [DIFF-INFORMED] C++: TaintedCondition d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/94611b8b4f2a8b7bb2103f9bd777153082991c61
61a3495 [DIFF-INFORMED] C++: TypeConfusion d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/61a3495f1df5a58d93bef8c1f4f2031da99cd97c
f18fbf8 [DIFF-INFORMED] C#: ConditionalBypass d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/f18fbf8a36a311821dcdb069ca82c2a6b9344eaa
398ad9a [DIFF-INFORMED] C#: ExternalAPIs d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/398ad9a044917543e6b98d1f2ccbdf4c19498d72
0f5fc82 [DIFF-INFORMED] C#: UnsafeDeserializationQuery d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/0f5fc82432d5e3f6c9bd2c0fe89bfd20b475ad27
3b56f5b [DIFF-INFORMED] C#: ThreadUnsafeCryptoTransformLambda d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/3b56f5bfbf25762f6e0ef61b93e9c6509928595a
e3714a8 [DIFF-INFORMED] C#: HardcodedConnectionString d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/e3714a87dcdb8961d1e8aec2766ad6203d0ef7cf
f8ba5af [DIFF-INFORMED] Go: AllocationSizeOverflow d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/f8ba5af9827d395bd829d897f0e982bcdf36d25a
a6547a5 [DIFF-INFORMED] Go: CommandInjection d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/a6547a5a1cccc022de408e2c2e8d399c65f6abaa
dab97f3 [DIFF-INFORMED] Go: ExternalAPIs d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/dab97f3a4cb4abd334612d5452df3889c0503ac7
c1a5881 [DIFF-INFORMED] Go: HardcodedCredentials d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/c1a5881fd5c42349267e14c196cf39dfade87444
53f4c94 [DIFF-INFORMED] Go: IncorrectIntegerConversion d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/53f4c94aaeba1803733077698313ebffade1bc12
e7935b6 [DIFF-INFORMED] Go: InsecureRandomness d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/e7935b6f3c0b34d3431be86e3350c7e551bcf396
40f7a3b [DIFF-INFORMED] Go: ReflectedXss d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/40f7a3bb0b9a0aebab9fb17d0896158258ad94dd
5527221 [DIFF-INFORMED] Go: RequestForgery, SafeUrlFlow d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/5527221be23d3bc3865a6868b4f095ba136991a8
cccf6e6 [DIFF-INFORMED] Go: SensitiveConditionBypass d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/cccf6e644b6a37558c0700fbed21eff172aafb52
e94b492 [DIFF-INFORMED] Go: ConditionalBypass d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/e94b4924b6dfe26a850dc6cfa20aa81a6a19e86d
f3453c7 [DIFF-INFORMED] Go: SSRF d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/f3453c740440bc429ae3eee7045e560346d1b7e9
8594d31 [DIFF-INFORMED] Go: AuthCookie d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/8594d31f9b6bd6d72d307f69ef199a2c81638a2b
9ec0d13 [DIFF-INFORMED] Go: UnhandledCloseWritableHandle d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/9ec0d13a873610df0dbad9648de0f1f3746ccf4d
9ecf0f2 [DIFF-INFORMED] Go: InsecureHostKeyCallback d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/9ecf0f2c0c330e812d1e4adac107a4fb2c71da3f
a2b8db8 [DIFF-INFORMED] Go: BadRedirectCheck d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/a2b8db8e110ddb36a0336c363d8696a9323397e9
03d4adc [DIFF-INFORMED] Java: (Android)SensitiveCommunication d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/03d4adc92d424a6eb4d582f1229e1b52a83601d9
f6e7f63 [DIFF-INFORMED] Java: ArithmeticTainted d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/f6e7f6346a430b77850e555a152a24d2345903fc
d837355 [DIFF-INFORMED] Java: ArithmeticUncontrolled d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/d8373551abf86ee35228e6adf10002201fc211cf
e84c8bd [DIFF-INFORMED] Java: ConditionalBypass d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/e84c8bd12b921a25f96c63db6a60b2c4ab7485bc
dbcb1fb [DIFF-INFORMED] Java: UntrustedDataToExternalAPI d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/dbcb1fb36f8ee358481b28bdcacec40e2f05fe90
d7258a9 [DIFF-INFORMED] Java: ExternallyControlledFormatString d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/d7258a9908bf79f3afe555bc8070fe6a79a16e45
94de00b [DIFF-INFORMED] Java: ImproperValidationOfArray… d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/94de00b888b72d0cc478b24e8b84a69736391585
52c0d62 [DIFF-INFORMED] Java: InsecureCookie d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/52c0d628c51eafaa4e832debbb636ea4921472d3
4a985bf [DIFF-INFORMED] Java: InsecureLdapAuth d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/4a985bf9d867093049b6343528c0fc04159deed9
650a5dd [DIFF-INFORMED] Java: LogInjection d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/650a5dd5ce9b17612a9484cca130a2f89c4b32f8
0b9d638 [DIFF-INFORMED] Java: MaybeBrokenCryptoAlgorithm d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/0b9d6381f3d8c6bbc4eb8205e4ade53e8d40e5cc
9cb55f3 [DIFF-INFORMED] Java: SensitiveLogging d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/9cb55f3e135526f4757772307a9ba0e8100dd60e
5228767 [DIFF-INFORMED] Java: SqlConcatenated d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/52287672d65403b287b344e56d41848235933f52
3197508 [DIFF-INFORMED] Java: TaintedEnvironmentVariable d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/3197508af17dceae99a4edff6d1ad0cddcd940c0
69e93eb [DIFF-INFORMED] Java: TempDirLocalInformationDisclosure d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/69e93eb68bca9b34c01881c4d3f0709b8364d209
f10210c [DIFF-INFORMED] Java: TrustBoundaryViolation d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/f10210cff04b7604973b7182400ef3544d2d9f55
5e05aeb [DIFF-INFORMED] Java: UnsafeCertTrust d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/5e05aebdae838267152a4167d496f83523aaa8c8
06add01 [DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/06add01b305f64d18aaa3e3abc2326b9113a2555
89dd8a8 [DIFF-INFORMED] JS: IndirectCommandInjection d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/89dd8a8008fa455875ee04980b345ae3348dc117
2a5eae2 [DIFF-INFORMED] JS: ShellCommandInjectionFromEnvironment d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/2a5eae2b362d1cbe8ae128c603f302a53df0834f
81bbcda [DIFF-INFORMED] JS: EnvValueAndKeyInjection d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/81bbcda44df5d740778c78e57ddc72b04651cfa1
272a97d [DIFF-INFORMED] JS: decodeJwtWithoutVerification d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/272a97d3b6065600010bb08a13b4bc4d85a6d3e9
e7b6ad2 [DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/e7b6ad29ef6de3b0beba145310da5275d404a92e
9f72a2f [DIFF-INFORMED] Ruby: MissingFullAnchor d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/9f72a2f2fc75f590d977de6543f773ab1ee6dca8
2ba8234 [DIFF-INFORMED] Rust: RegexInjection d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/2ba823481c70eee66f373feae73232a7b75775ca
2afffd3 [DIFF-INFORMED] Rust: TaintedPath d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/2afffd3dab69e2e9b98d20939d13ecf21b55b29a
7e4f37f [DIFF-INFORMED] Rust: SqlInjection d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/7e4f37fc4adf796707a4676cb3df6e654715a5d6
b3f76ce [DIFF-INFORMED] Rust: CleartextTransmission d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/b3f76ce1ade4d791770b21085030c9fca86291ad
d25c8cd [DIFF-INFORMED] Rust: CleartextLogging d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/d25c8cdaec94aab0b0269f5cccc19a833eb7435d
ca1848e [DIFF-INFORMED] Rust: UncontrolledAllocationSize d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/ca1848e67985e21980a4ad7d95bc7b16271ecc83
ab6be38 [DIFF-INFORMED] Rust: AccessAfterLifetime d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/ab6be383fda2b13ba97dc7b448b93426d385af29
a0215ae [DIFF-INFORMED] Rust: AccessInvalidPointer d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/a0215ae195ae31ce0dc6d42bc15eabb400bbeb12
162781d [DIFF-INFORMED] Swift: CleartextStorageDatabase d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/162781d48d3afd6fde0cd00fad81ba97030a094c
37e6e2c [DIFF-INFORMED] Swift: CleartextStoragePreferences d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/37e6e2cf1d321952d9e043ac9aad1afc46a2a10d
649df5b [DIFF-INFORMED] Swift: InsecureTLS d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/649df5b754783de249b2e5012e9cb4c1fc44e75f
085720a [DIFF-INFORMED] Swift: UnsafeWebViewFetch d10c Jul 16, 2025 https://github.com/github/codeql/pull/19957/commits/085720a6d57642a1053653d3ec2177d322fa8a95
Clear filters https://github.com/github/codeql/pull/19957/files
Please reload this pagehttps://github.com/github/codeql/pull/19957/files
Please reload this pagehttps://github.com/github/codeql/pull/19957/files
ArgumentInjectionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-574ecea5dd2271918452e4e1240d184a232116a42faf46a44da68dd4960d58d1
ArtifactPoisoningQuery.qll https://github.com/github/codeql/pull/19957/files#diff-991db119f04dff06b769d072548001b1ffdb1efc233bc2aa81c7bb4c145f7406
CodeInjectionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-91f17027a5f5b9ebe6b1cc3f47ef480e8a892fd883b2fc6cf921cb30a1a2f4e5
CommandInjectionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-569474a475cc0fa517b3c71a2f2f1d38850447aeee821ac0869f8a09a44f1a6d
EnvPathInjectionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-3ea53b68aca4cd59cb498ac86fbdaac3a48b3f92a5a78bdfc4f215b31e70c881
EnvVarInjectionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-9af83eb41b385c998878c21d7a4e072f4d9a82934894751ca5000f231f678e52
OverflowDestination.ql https://github.com/github/codeql/pull/19957/files#diff-0de8a8073654dde3734d023553049ba714f2aede3ce41aac692963eb7ca9f2af
NonConstantFormat.ql https://github.com/github/codeql/pull/19957/files#diff-f189f68b46da00948a7521081807f6b1008228768e7499b20fbecdf932109b18
LeapYear.qll https://github.com/github/codeql/pull/19957/files#diff-e2dde82143f8277aaf3baf0d8a7ea5f4edd3ae4c3a8846ddb842620d0b58efe5
ExternalAPIsSpecific.qll https://github.com/github/codeql/pull/19957/files#diff-04c0dccfc1c4ff2f817a631ad7afed0c99550cb8878fa9788e8a92300271b0fc
ExternalAPIsSpecific.qll https://github.com/github/codeql/pull/19957/files#diff-4bdaa4b554dfd001c2333719bfe7a4dc474830c16cbf4ed44ebc83935bd9d93b
TaintedPath.ql https://github.com/github/codeql/pull/19957/files#diff-fb3a98853c6ff35d6652b33e8b6fd99217e0d95bbb2fcda2f9532ca961e97c9f
ExecTainted.ql https://github.com/github/codeql/pull/19957/files#diff-deb2c72b1b5d29895384e41f6c077f10085f43af68be368bf33c85112bc0a4c1
CgiXss.ql https://github.com/github/codeql/pull/19957/files#diff-2837f3f1e7082fba0f6b63e5cff72238c22faa96d2f044e38eb99dd86207a4e4
SqlTainted.ql https://github.com/github/codeql/pull/19957/files#diff-8f5bb27630fa420fb4d199c60b1334ad4d56b5b37837e82413c6381ea4b23ee3
UnboundedWrite.ql https://github.com/github/codeql/pull/19957/files#diff-4babd10a0ccb9bdc06643f2c918aee60966bc25f6bf081153cf9c1e7a30f6480
ImproperNullTerminationTainted.ql https://github.com/github/codeql/pull/19957/files#diff-374ed4f463ea94313086348a7f241925ae0698df078745e65f5a3161bc1890a7
ArithmeticTainted.ql https://github.com/github/codeql/pull/19957/files#diff-6659098746be150a26dcb4f6677d331cbea3ac76fa9945220113d2f6c624adc8
ArithmeticUncontrolled.ql https://github.com/github/codeql/pull/19957/files#diff-9a996677be64c4d9db8caac638ed73b8266b0ee5b1beadbb85601f4c83f4d8f1
ArithmeticWithExtremeValues.ql https://github.com/github/codeql/pull/19957/files#diff-92ecf959db06740d816cac13ce7134892d003d276094b6e2356a912f443ae7ef
TaintedAllocationSize.ql https://github.com/github/codeql/pull/19957/files#diff-f42cace455cc8359baa304d678d87697c0037361da474d2e9ccebd71b7054edc
AuthenticationBypass.ql https://github.com/github/codeql/pull/19957/files#diff-3d064b6a3b68f285c3a7ad3750151a071e3e9c5974bcf794f90324b79edfe9da
SSLResultConflation.ql https://github.com/github/codeql/pull/19957/files#diff-89fa819d4d38a9c360a296cf47bb2cebce9a67c6a3895081f05bd6383da12e52
CleartextBufferWrite.ql https://github.com/github/codeql/pull/19957/files#diff-ca44cfdc07b9e3a2864efca79075aef59c8aab706bfbf9c77566ca380ad06ca5
CleartextFileWrite.ql https://github.com/github/codeql/pull/19957/files#diff-3d3c22a5cae637f2b10330631f568f78241c01d92726cd7b39c11055cf980d42
CleartextTransmission.ql https://github.com/github/codeql/pull/19957/files#diff-2131961afc9674bdfcd7ed8b59cfffbb826d395634bc90e103c9827dd5e12de1
CleartextSqliteDatabase.ql https://github.com/github/codeql/pull/19957/files#diff-c0cffbd260a06e50dd769b382f9a1cdd7ca6a24e74f1f6b11188d17104ffd246
UseOfHttp.ql https://github.com/github/codeql/pull/19957/files#diff-09ecd4a2d357453e24f5c7ed3aa7fb2cee0d16b025bd6a31471af843f9b6ad14
InsufficientKeySize.ql https://github.com/github/codeql/pull/19957/files#diff-ff8d036ac5c76d12162bddc3f23bdd2d062819d4e13c5d4b5379022088b8ce8b
IteratorToExpiredContainer.ql https://github.com/github/codeql/pull/19957/files#diff-1d0c4b06c0a4f304ab8c298ebee733c60f72261a8205bd50dece4574556e088b
UnsafeCreateProcessCall.ql https://github.com/github/codeql/pull/19957/files#diff-860d4c1026817db5473064de90fd38579cd78e93645d21128c6601ce6a3f7e91
UnsafeDaclSecurityDescriptor.ql https://github.com/github/codeql/pull/19957/files#diff-ad4c0278b0699f4555a470e4be2db4d0802153ff4d9b54870326679f76588421
TaintedCondition.ql https://github.com/github/codeql/pull/19957/files#diff-40e2016a464c1cf96ccb2a7469f1d6d2da1768ab2f355c8beb3bd0050ecd6a18
TypeConfusion.ql https://github.com/github/codeql/pull/19957/files#diff-4ade0a26a394dd9e2019c404becf13a32884866a9d6fbfbd79da931ac19a9510
ConstantSizeArrayOffByOne.ql https://github.com/github/codeql/pull/19957/files#diff-5b185aabf66b82e6267edbcc197ca49efe273065639fd5d8d8634af5f0b066ed
DecompressionBombs.ql https://github.com/github/codeql/pull/19957/files#diff-b3f52e04cfb1b6cfcee79f74863b5e835f965c53df8adeeee9c3d8fabea3c5c6
CountUntrustedDataToExternalAPI.expected https://github.com/github/codeql/pull/19957/files#diff-ed819afd40376c21c0155fe7e6c4faaefa9f065e3f1bfac2d79ec4bcb93bf7bd
CountUntrustedDataToExternalAPI.qlref https://github.com/github/codeql/pull/19957/files#diff-2b26ee6257a3ef4e330ae4a9e82896d11a4a4105a6c820dcb5505880eef1df37
ExternalAPISinkExample.cpp https://github.com/github/codeql/pull/19957/files#diff-f9aaa97a7bf5d08840e733075bd004176fb411d77fd5cebff7dc83135fc0eeca
ExternalAPITaintStepExample.cpp https://github.com/github/codeql/pull/19957/files#diff-dea6a5c6bc5400368e1e0218782a6c7c7a45b1fd27db109f2b01ac4416e25c59
IRCountUntrustedDataToExternalAPI.expected https://github.com/github/codeql/pull/19957/files#diff-03ce39c8498af0040ccebdd25e95d6d9c628872e8339e41fca9585c118a8e7d8
IRCountUntrustedDataToExternalAPI.qlref https://github.com/github/codeql/pull/19957/files#diff-3fb671e3d4fd82d74c9a578b4cdb731dbab33a2a6daa89e45d6cb02f9938611b
IRUntrustedDataToExternalAPI.expected https://github.com/github/codeql/pull/19957/files#diff-4697bb06548e3fcc0e3b8f194407c7b839a13a27f3c6b71b0efbcd877af3916d
IRUntrustedDataToExternalAPI.qlref https://github.com/github/codeql/pull/19957/files#diff-54f59321439f6955931ac917f4e42f1fbf845a124b3ac78a70b867ef38e44057
UntrustedDataToExternalAPI.expected https://github.com/github/codeql/pull/19957/files#diff-29dafc236473a49ecd1c5b53fc379c3573ca8f48bee29530cc60c8929b9b2d56
UntrustedDataToExternalAPI.qlref https://github.com/github/codeql/pull/19957/files#diff-fceab3036fbffc3a973e15142ecac2b4d1b9b6251ab926f92959f064c8a3652e
CleartextSqliteDatabase.cpp https://github.com/github/codeql/pull/19957/files#diff-f07b911f9025d16b0ff8318ff12176f774c47672c0fc6cdac9b869124faf1655
CleartextSqliteDatabase.expected https://github.com/github/codeql/pull/19957/files#diff-bb6029b3234193a19b6eb7bfe12b25ddac32227db7d2fa5c5df5b174878ec17d
CleartextSqliteDatabase.qlref https://github.com/github/codeql/pull/19957/files#diff-296583a4b507256a489e8005dc382ae1b2492d8a9e7dc943ad3ede125ff39cc0
ConditionalBypassQuery.qll https://github.com/github/codeql/pull/19957/files#diff-62198c25bd0f5301343a63d661c8f9c19ea6e97e6335171ed92d2dd7681c23ef
ExternalAPIsQuery.qll https://github.com/github/codeql/pull/19957/files#diff-75e04d7dda7bd086b5f22a2da59f5ceb020250eb5a0ec89bd3406b5c106094bc
UnsafeDeserializationQuery.qll https://github.com/github/codeql/pull/19957/files#diff-ebee30c9c3982a4f2e62a57aebdf47615437d88b928b492a5bdb5c0c555426d8
ThreadUnsafeICryptoTransformLambda.ql https://github.com/github/codeql/pull/19957/files#diff-ea5563f7be2a89e5eac72b62f912edca49933add608aa26584bfb6d98e3b597f
HardcodedConnectionString.ql https://github.com/github/codeql/pull/19957/files#diff-f7b18d77689ab11a78fc8fe3c963a989b66c3130ee0db0cd630f33b9a59abf69
AllocationSizeOverflow.qll https://github.com/github/codeql/pull/19957/files#diff-93ccc51a500075111c34990ac20b406b7c7cbcd88080e051af486bf49e8dab48
CommandInjection.qll https://github.com/github/codeql/pull/19957/files#diff-f3e8d4b32c01424e4e18474e59eb83b1231aaa03b306eb37152c704db698741f
ExternalAPIs.qll https://github.com/github/codeql/pull/19957/files#diff-b052c3f98fd311d345425258b372cae0574013d699eb2d981b7b118a78341612
HardcodedCredentials.qll https://github.com/github/codeql/pull/19957/files#diff-36628f62fdc1e6d7cbeeb745204968eae7a5c6507f92000ff44eb861dca8818e
IncorrectIntegerConversionLib.qll https://github.com/github/codeql/pull/19957/files#diff-d2e322ab0ee24b7dff7a878b290c20f5b5b42bee80c3b8f3232391710f382a29
InsecureRandomness.qll https://github.com/github/codeql/pull/19957/files#diff-908f65b5479cad146384b550a27d545b7b1f44032fd5991b066109bebbeedff7
ReflectedXss.qll https://github.com/github/codeql/pull/19957/files#diff-0f061c554b3bae213de55aa3fcccf14d05d2cecfcdfcced98a491d54a86b54aa
RequestForgery.qll https://github.com/github/codeql/pull/19957/files#diff-1609d98543ac42b4015ff63d9e8381524e28e0a3a1238d45e04cd7716107c11e
SafeUrlFlow.qll https://github.com/github/codeql/pull/19957/files#diff-529537f304145de9d3da31b80144f7363dc83de538329d40e72c451aefe64707
UnhandledCloseWritableHandle.ql https://github.com/github/codeql/pull/19957/files#diff-b403b6af0dcfbbfaf6c75e147a9efb751296651822784f0fce72bb7f0a3542f5
InsecureHostKeyCallback.ql https://github.com/github/codeql/pull/19957/files#diff-525480f26c08318d82118334655db3c30b235d43998aa0c2d8cf16a057a9b571
BadRedirectCheck.ql https://github.com/github/codeql/pull/19957/files#diff-1ed2df1702ca661c7702e7577b4d5414cccbe9dab8035c1865a724b9c749e345
AuthCookie.qll https://github.com/github/codeql/pull/19957/files#diff-2a3f02d501b75af3d97a5e8412749bf9a230b4df186b79a501ec6da40a28c90c
SensitiveConditionBypass.qll https://github.com/github/codeql/pull/19957/files#diff-d7f17f9a6bc3a7dcd162247c8920ecb2dfdc430696d97b00c618f779ad126c70
ConditionalBypass.ql https://github.com/github/codeql/pull/19957/files#diff-4e14949951673544164b098f8e1485116b13740b338c0dbff9ff983c9f236b01
SSRF.qll https://github.com/github/codeql/pull/19957/files#diff-3bcfafb07e5be0b57e83fc98a0a3652ca87233f4ca09fb805b98075bae70719a
AndroidSensitiveCommunicationQuery.qll https://github.com/github/codeql/pull/19957/files#diff-579a6bb5881d11fe83ed4c1bbdad3aafe2df6ae583cc7b545fe69a9a6b9779a6
ArithmeticTaintedQuery.qll https://github.com/github/codeql/pull/19957/files#diff-cedf772a8097fb0b866dd017457d51a4d9e4d381d8c5e344d4196ed5516fb94a
ArithmeticUncontrolledQuery.qll https://github.com/github/codeql/pull/19957/files#diff-a2e8be67820205c5ef87c84f7bc8097243a8ecdf0eeb9b94ebc4dd998fe07a25
ConditionalBypassQuery.qll https://github.com/github/codeql/pull/19957/files#diff-1d429c62373c200b63bfc8ec87ec77d0b531faa920d7721d549c62df54ad1979
ExternalAPIs.qll https://github.com/github/codeql/pull/19957/files#diff-cdb1a6b592a8c924b3502f965a25137ea15342ad9dc62cd47103e37339cf6b0e
ExternallyControlledFormatStringQuery.qll https://github.com/github/codeql/pull/19957/files#diff-df520fe63795fedf8ff365956c8c0e25e8c7bccac19ef856188cb01ffc399498
ImproperValidationOfArrayConstructionCodeSpecifiedQuery.qll https://github.com/github/codeql/pull/19957/files#diff-8552aaea88b5c8cf8f4f816a80b2caec13aecfdcf1a0d87c9779df5b1c6a4d2d
ImproperValidationOfArrayConstructionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-1ab7665c18c7fe2ad9f62b1668b91e9ccd00defe4d5014520297f892bfbbc932
ImproperValidationOfArrayIndexCodeSpecifiedQuery.qll https://github.com/github/codeql/pull/19957/files#diff-26f3008b0128fde11bea7ff303bd3ef99c9437c5b5bf5abbc922602fa80faf8c
ImproperValidationOfArrayIndexQuery.qll https://github.com/github/codeql/pull/19957/files#diff-9ffca1fb12623f33432e2f65140908aae463bc0a91b84594e9d4062cbe3867d3
InsecureCookieQuery.qll https://github.com/github/codeql/pull/19957/files#diff-5d50528b37d829127222c271fb9e4948fd9839e81ac8dea32929fc1c60ec952e
InsecureLdapAuthQuery.qll https://github.com/github/codeql/pull/19957/files#diff-14263142900161a9b3e2b5e14e994fe934b6ce2b75c2355bb6d9f8f8bbafc140
LogInjectionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-c71925eb5a14c0486ced01af8c210a5de1ed4db43c504e2adc2a9a4c0eddf4e2
MaybeBrokenCryptoAlgorithmQuery.qll https://github.com/github/codeql/pull/19957/files#diff-b763072a679fb9949df5aa2519d5411db4df861076dff66fdba037aa844a27e7
SensitiveLoggingQuery.qll https://github.com/github/codeql/pull/19957/files#diff-222963f97b3f981596c8306b97500ff14caee29ad9c3059e42481540d347403e
SqlConcatenatedQuery.qll https://github.com/github/codeql/pull/19957/files#diff-f9fe1260701efcea4c7aa8338ccd8767d5e616a366ed4003f5057f2bef048cf1
TaintedEnvironmentVariableQuery.qll https://github.com/github/codeql/pull/19957/files#diff-a8cb5eb14fcd29359c36197c11815816cd5f64294c7c495d903a5b8777f72bb9
TempDirLocalInformationDisclosureQuery.qll https://github.com/github/codeql/pull/19957/files#diff-7a12444a72bccef619ef075261c4d46ce1c2c4ad3b693fd8665aaa4cda28048a
TrustBoundaryViolationQuery.qll https://github.com/github/codeql/pull/19957/files#diff-c754ecfb249c7be38db5bd4c6db080fe845b1895cbe1a65e925f57239dae31b6
UnsafeCertTrustQuery.qll https://github.com/github/codeql/pull/19957/files#diff-ea07b8795f3b7fca186feff6b392aea6f97fe280786255b9dd5264a804470d92
AndroidWebViewSettingsAllowsContentAccess.ql https://github.com/github/codeql/pull/19957/files#diff-f05c0ffe0e1754fada8776bbf2806ca86384d6a29b930f99514ef88e5b7dd9b0
ExternalAPISinkExample.java https://github.com/github/codeql/pull/19957/files#diff-be1e339ebcf7b67dddf731d2f4712bc336a15b5cfa54e6522caae007daa9bfe8
ExternalAPITaintStepExample.java https://github.com/github/codeql/pull/19957/files#diff-48bc1d616b70e35b9b385ba292a69b23eb83dfae9b0750bff2e865610d840989
ExternalAPIsUsedWithUntrustedData.expected https://github.com/github/codeql/pull/19957/files#diff-1762e7e72c469558113039dfba092c202762d5f82dcad079dc821ba436e2efe9
ExternalAPIsUsedWithUntrustedData.qlref https://github.com/github/codeql/pull/19957/files#diff-ef5f062c279d21995c84e600110fc63c101a6140347ba272cadca87842a1ff03
UntrustedDataToExternalAPI.expected https://github.com/github/codeql/pull/19957/files#diff-5bc04f6cc444c1e9d271e84752362e39ef6dfd155b5862851f4c80ac9b8f0a8f
UntrustedDataToExternalAPI.qlref https://github.com/github/codeql/pull/19957/files#diff-23ce5b88a918c00dbdbec28162dae76dc650679d7ad8cf75186707f764cb72fa
LogInjectionTest.expected https://github.com/github/codeql/pull/19957/files#diff-8ce094d28173e1ca68d311f6636aa073a8dfb3ea3036fce94e9e9ed846f68653
LogInjectionTest.ext.yml https://github.com/github/codeql/pull/19957/files#diff-b133bcff3c3947b9077b2c84974cc2eed1a625fef72f8470aff030e39461407e
LogInjectionTest.java https://github.com/github/codeql/pull/19957/files#diff-7823ae77af6d698aa021174ff0dacc3bf464b9c225fed29c6d90ba3d7b5312cc
LogInjectionTest.ql https://github.com/github/codeql/pull/19957/files#diff-92f3140eaab88ed539c93216f9dc011eb49fa8d4db945ca391a9a62dd9c30f34
LogInjectionTest.qlref https://github.com/github/codeql/pull/19957/files#diff-5008964156692d0af2b45d3e6efba01807843a25c659d10ac53b2172c36032d0
UnsafeCertTrustTest.expected https://github.com/github/codeql/pull/19957/files#diff-82d7596038d9af4e068adb1dbe643f82e661978b6c297b5dc4c7e2905ddf90ea
UnsafeCertTrustTest.java https://github.com/github/codeql/pull/19957/files#diff-09f0fdd8d61d6fb58fe1519fc4dfd9b75c44237dbb911d17cbda53f885e5370c
UnsafeCertTrustTest.ql https://github.com/github/codeql/pull/19957/files#diff-1ea9fe4d88a95da62ee87f6d31ea0d9aff6b271729123a79487a44183d8bd644
UnsafeCertTrustTest.qlref https://github.com/github/codeql/pull/19957/files#diff-9e1cf48d4968a511540582a9ac653a6e4bb2b9e5090af95cc789d307605f75fe
TrustBoundaryViolations.expected https://github.com/github/codeql/pull/19957/files#diff-7fd6d7f9b8517f75d1f8dbfce5f5f440418ca84dcd5d6ab2237a414af0a956a5
TrustBoundaryViolations.java https://github.com/github/codeql/pull/19957/files#diff-8864dcc01a954a7a79dcafbf4101d94ff71b139c5ba41a7320e1d762447f8b39
TrustBoundaryViolations.ql https://github.com/github/codeql/pull/19957/files#diff-96418167ff62d31c79dcb85bd771496b5963f96c6d1aae3edb2fc7805ae4d1e7
TrustBoundaryViolations.qlref https://github.com/github/codeql/pull/19957/files#diff-36e4a845f13a95123015e8732437b4ce3d094b02d50c7544e4258ce679ba6d08
SensitiveLogInfo.expected https://github.com/github/codeql/pull/19957/files#diff-4e34531ad7109332845056a8990cce81f9e4e95bf68691d4f20b527a651afa5f
SensitiveLogInfo.ql https://github.com/github/codeql/pull/19957/files#diff-154b406ba031ba971c07f2b212d908aa9d03c8d90fb70db1b65b4a890b85deb9
SensitiveLogInfo.qlref https://github.com/github/codeql/pull/19957/files#diff-6d0eee41756c433749af436cec2f92dc84b2651f5a3f2f846b18b487322ae832
Test.java https://github.com/github/codeql/pull/19957/files#diff-bfa722898d8232975ca5525013b2d8501572681fc668c93cdc2881a6233fa53b
ConditionalBypassTest.expected https://github.com/github/codeql/pull/19957/files#diff-383daebfd0441e5a61a6897218fb17f163a877f75be1613f6c58010857597650
ConditionalBypassTest.java https://github.com/github/codeql/pull/19957/files#diff-a9d4875b3155e815cd18baefe8569f7b1693366ea0103417559452f7e3bf6624
ConditionalBypassTest.ql https://github.com/github/codeql/pull/19957/files#diff-7e45670eee9b455e923d3d6b91878b8adc3c77d6c419d745dee5a98768d4c8f9
ConditionalBypassTest.qlref https://github.com/github/codeql/pull/19957/files#diff-641a4b848854a8f79f547c9fc9f17a3ce0b72666deb6fa10eef098e1d5312c6e
SensitiveCommunication.ql https://github.com/github/codeql/pull/19957/files#diff-8337c5ae2d451156d3c7e5164a8b4279272e14dc0627f328921f1eea29819869
SensitiveCommunication.expected https://github.com/github/codeql/pull/19957/files#diff-c649f84f4c1e1551f739b7eabc8772e9e47dda7e1d693f033bac4ea3aef3cede
SensitiveCommunication.java https://github.com/github/codeql/pull/19957/files#diff-1e3f27e60c3f55a9d08ac943df62108f5d428743ffb57762b5461aadbfac5a24
SensitiveCommunication.qlref https://github.com/github/codeql/pull/19957/files#diff-71f4d854ca88fac863904923b08ef338a4f8ab81551d91cfed6bdf431ed5775c
options https://github.com/github/codeql/pull/19957/files#diff-7eace9739ce3e387c275d9367fe9af04045e2199f4c30e4c727310aaf461d4a7
IndirectCommandInjectionQuery.qll https://github.com/github/codeql/pull/19957/files#diff-2a8084279cb040ea8d0b95ee61f2dadac4dc8540a9b8d4020429ca6e8b1a4701
ShellCommandInjectionFromEnvironmentQuery.qll https://github.com/github/codeql/pull/19957/files#diff-f7327eb0e824a3200b476734ac1582ed39289cde256cabaecfc45f3387048e48
EnvValueAndKeyInjection.ql https://github.com/github/codeql/pull/19957/files#diff-5b3698792000b0264ce0ce426651fdf3a9faef22e09369c8878cc6b0f6d8abd5
decodeJwtWithoutVerification.ql https://github.com/github/codeql/pull/19957/files#diff-8b17c4937d1824177f151316f07747b8a3ef7118688adb5a7a72ca150c2a4ed4
PossibleTimingAttackAgainstHash.ql https://github.com/github/codeql/pull/19957/files#diff-8bcb2eb5c21f9015f402fff5437a61ab7483dedb21f955a66c2ca79579f98a4d
TimingAttackAgainstHash.ql https://github.com/github/codeql/pull/19957/files#diff-c14fb36deb34aaa8e56904310a0056039446a7a67af4ece5bbe158e34eacf9ab
PossibleTimingAttackAgainstHash.expected https://github.com/github/codeql/pull/19957/files#diff-4d73f238438a4baf6fb3f52561ec1c0f47bd6a353ff0cffe27a5eb88334fdd56
TimingAttackAgainstHash.expected https://github.com/github/codeql/pull/19957/files#diff-b5fb9ee943ca1d2173b92a418a27cbb980319d121183861ff19f5a44f504dccc
TimingAttackAgainstHash.qlref https://github.com/github/codeql/pull/19957/files#diff-66854620a0423d15c0efb9925cbb07d7d2f597c174fbc42b1929fc4b15fa75f2
MissingFullAnchorQuery.qll https://github.com/github/codeql/pull/19957/files#diff-d979c07ebc382c0d06de2720c7475d80ffd092c1fb51d2fa7041678e4e9c850c
RegexInjection.ql https://github.com/github/codeql/pull/19957/files#diff-fe7a2831f8dccd2add2d92384f49895d83e4ffdb7d4c1360f2ae8d4de775f1bb
TaintedPath.ql https://github.com/github/codeql/pull/19957/files#diff-5960e87c2c73bd70c975adc4d8e90ce2ddda4392c950fe0fdef7d1ae44afc47a
SqlInjection.ql https://github.com/github/codeql/pull/19957/files#diff-4441cd872f7fa0ee79359f9b95a3529c7be416fd77c40453a63a5a2e4b7287ed
CleartextTransmission.ql https://github.com/github/codeql/pull/19957/files#diff-dd1964e0860b42488fdd4583685c53c84736cab517f3eab2432118f49f457337
CleartextLogging.ql https://github.com/github/codeql/pull/19957/files#diff-dec2fb09691ccdf7d776e2d4f8e02b2f485729603d2bd58cbe4c72e75b3afd45
UncontrolledAllocationSize.ql https://github.com/github/codeql/pull/19957/files#diff-948c68eaf73185e896231630bce73b4ce6e22ee172bb7880a152d8351ae61b08
AccessAfterLifetime.ql https://github.com/github/codeql/pull/19957/files#diff-f44c6ea539f73e77266c218ee96cafb5a556550570cbe7677602d80a2773052c
AccessInvalidPointer.ql https://github.com/github/codeql/pull/19957/files#diff-a038c81cb1738145485060dc6d8acb9890032d9df48748af3e7a1867c1a13e58
CleartextStorageDatabaseQuery.qll https://github.com/github/codeql/pull/19957/files#diff-a3b765e18905dc521bc9b2c016149ad7411c1a4f343847b2622cbb3402de1c5c
CleartextStoragePreferencesQuery.qll https://github.com/github/codeql/pull/19957/files#diff-b57ea093b8b785bab86e9fbe961a3c476494bd2087c8b5bedafbcefea559bec2
InsecureTLSQuery.qll https://github.com/github/codeql/pull/19957/files#diff-1ede93da633bea9c9530bd9bff3bd8c485ec8c79f1372d4f64b730f6ebd85389
UnsafeWebViewFetchQuery.qll https://github.com/github/codeql/pull/19957/files#diff-327c69ce7b80a9e1e8a0fd1d37dc32f282984d7f66a557a44aa76eb98e8a105f
https://github.com/github/codeql/blob/main/CODEOWNERS#L5
actions/ql/lib/codeql/actions/security/ArgumentInjectionQuery.qllhttps://github.com/github/codeql/pull/19957/files#diff-574ecea5dd2271918452e4e1240d184a232116a42faf46a44da68dd4960d58d1
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/actions/ql/lib/codeql/actions/security/ArgumentInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-574ecea5dd2271918452e4e1240d184a232116a42faf46a44da68dd4960d58d1
https://github.com/github/codeql/pull/19957/files#diff-574ecea5dd2271918452e4e1240d184a232116a42faf46a44da68dd4960d58d1
https://github.com/github/codeql/pull/19957/files#diff-574ecea5dd2271918452e4e1240d184a232116a42faf46a44da68dd4960d58d1
https://github.com/github/codeql/blob/main/CODEOWNERS#L5
actions/ql/lib/codeql/actions/security/ArtifactPoisoningQuery.qllhttps://github.com/github/codeql/pull/19957/files#diff-991db119f04dff06b769d072548001b1ffdb1efc233bc2aa81c7bb4c145f7406
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/actions/ql/lib/codeql/actions/security/ArtifactPoisoningQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-991db119f04dff06b769d072548001b1ffdb1efc233bc2aa81c7bb4c145f7406
https://github.com/github/codeql/pull/19957/files#diff-991db119f04dff06b769d072548001b1ffdb1efc233bc2aa81c7bb4c145f7406
https://github.com/github/codeql/pull/19957/files#diff-991db119f04dff06b769d072548001b1ffdb1efc233bc2aa81c7bb4c145f7406
https://github.com/github/codeql/pull/19957/files#diff-991db119f04dff06b769d072548001b1ffdb1efc233bc2aa81c7bb4c145f7406
https://github.com/github/codeql/blob/main/CODEOWNERS#L5
actions/ql/lib/codeql/actions/security/CodeInjectionQuery.qllhttps://github.com/github/codeql/pull/19957/files#diff-91f17027a5f5b9ebe6b1cc3f47ef480e8a892fd883b2fc6cf921cb30a1a2f4e5
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/actions/ql/lib/codeql/actions/security/CodeInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-91f17027a5f5b9ebe6b1cc3f47ef480e8a892fd883b2fc6cf921cb30a1a2f4e5
https://github.com/github/codeql/pull/19957/files#diff-91f17027a5f5b9ebe6b1cc3f47ef480e8a892fd883b2fc6cf921cb30a1a2f4e5
https://github.com/github/codeql/pull/19957/files#diff-91f17027a5f5b9ebe6b1cc3f47ef480e8a892fd883b2fc6cf921cb30a1a2f4e5
https://github.com/github/codeql/pull/19957/files#diff-91f17027a5f5b9ebe6b1cc3f47ef480e8a892fd883b2fc6cf921cb30a1a2f4e5
https://github.com/github/codeql/blob/main/CODEOWNERS#L5
actions/ql/lib/codeql/actions/security/CommandInjectionQuery.qllhttps://github.com/github/codeql/pull/19957/files#diff-569474a475cc0fa517b3c71a2f2f1d38850447aeee821ac0869f8a09a44f1a6d
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/actions/ql/lib/codeql/actions/security/CommandInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-569474a475cc0fa517b3c71a2f2f1d38850447aeee821ac0869f8a09a44f1a6d
https://github.com/github/codeql/pull/19957/files#diff-569474a475cc0fa517b3c71a2f2f1d38850447aeee821ac0869f8a09a44f1a6d
https://github.com/github/codeql/pull/19957/files#diff-569474a475cc0fa517b3c71a2f2f1d38850447aeee821ac0869f8a09a44f1a6d
https://github.com/github/codeql/blob/main/CODEOWNERS#L5
actions/ql/lib/codeql/actions/security/EnvPathInjectionQuery.qllhttps://github.com/github/codeql/pull/19957/files#diff-3ea53b68aca4cd59cb498ac86fbdaac3a48b3f92a5a78bdfc4f215b31e70c881
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/actions/ql/lib/codeql/actions/security/EnvPathInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-3ea53b68aca4cd59cb498ac86fbdaac3a48b3f92a5a78bdfc4f215b31e70c881
https://github.com/github/codeql/pull/19957/files#diff-3ea53b68aca4cd59cb498ac86fbdaac3a48b3f92a5a78bdfc4f215b31e70c881
https://github.com/github/codeql/blob/main/CODEOWNERS#L5
actions/ql/lib/codeql/actions/security/EnvVarInjectionQuery.qllhttps://github.com/github/codeql/pull/19957/files#diff-9af83eb41b385c998878c21d7a4e072f4d9a82934894751ca5000f231f678e52
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/actions/ql/lib/codeql/actions/security/EnvVarInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-9af83eb41b385c998878c21d7a4e072f4d9a82934894751ca5000f231f678e52
https://github.com/github/codeql/pull/19957/files#diff-9af83eb41b385c998878c21d7a4e072f4d9a82934894751ca5000f231f678e52
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Critical/OverflowDestination.qlhttps://github.com/github/codeql/pull/19957/files#diff-0de8a8073654dde3734d023553049ba714f2aede3ce41aac692963eb7ca9f2af
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Critical/OverflowDestination.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-0de8a8073654dde3734d023553049ba714f2aede3ce41aac692963eb7ca9f2af
https://github.com/github/codeql/pull/19957/files#diff-0de8a8073654dde3734d023553049ba714f2aede3ce41aac692963eb7ca9f2af
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Likely Bugs/Format/NonConstantFormat.qlhttps://github.com/github/codeql/pull/19957/files#diff-f189f68b46da00948a7521081807f6b1008228768e7499b20fbecdf932109b18
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Likely%20Bugs/Format/NonConstantFormat.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-f189f68b46da00948a7521081807f6b1008228768e7499b20fbecdf932109b18
https://github.com/github/codeql/pull/19957/files#diff-f189f68b46da00948a7521081807f6b1008228768e7499b20fbecdf932109b18
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Likely Bugs/Leap Year/LeapYear.qllhttps://github.com/github/codeql/pull/19957/files#diff-e2dde82143f8277aaf3baf0d8a7ea5f4edd3ae4c3a8846ddb842620d0b58efe5
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Likely%20Bugs/Leap%20Year/LeapYear.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-e2dde82143f8277aaf3baf0d8a7ea5f4edd3ae4c3a8846ddb842620d0b58efe5
https://github.com/github/codeql/pull/19957/files#diff-e2dde82143f8277aaf3baf0d8a7ea5f4edd3ae4c3a8846ddb842620d0b58efe5
https://github.com/github/codeql/pull/19957/files#diff-e2dde82143f8277aaf3baf0d8a7ea5f4edd3ae4c3a8846ddb842620d0b58efe5
https://github.com/github/codeql/pull/19957/files#diff-e2dde82143f8277aaf3baf0d8a7ea5f4edd3ae4c3a8846ddb842620d0b58efe5
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-020/ExternalAPIsSpecific.qllhttps://github.com/github/codeql/pull/19957/files#diff-04c0dccfc1c4ff2f817a631ad7afed0c99550cb8878fa9788e8a92300271b0fc
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-020/ExternalAPIsSpecific.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-04c0dccfc1c4ff2f817a631ad7afed0c99550cb8878fa9788e8a92300271b0fc
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-020/ir/ExternalAPIsSpecific.qllhttps://github.com/github/codeql/pull/19957/files#diff-4bdaa4b554dfd001c2333719bfe7a4dc474830c16cbf4ed44ebc83935bd9d93b
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-020/ir/ExternalAPIsSpecific.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-4bdaa4b554dfd001c2333719bfe7a4dc474830c16cbf4ed44ebc83935bd9d93b
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-022/TaintedPath.qlhttps://github.com/github/codeql/pull/19957/files#diff-fb3a98853c6ff35d6652b33e8b6fd99217e0d95bbb2fcda2f9532ca961e97c9f
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-fb3a98853c6ff35d6652b33e8b6fd99217e0d95bbb2fcda2f9532ca961e97c9f
https://github.com/github/codeql/pull/19957/files#diff-fb3a98853c6ff35d6652b33e8b6fd99217e0d95bbb2fcda2f9532ca961e97c9f
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-078/ExecTainted.qlhttps://github.com/github/codeql/pull/19957/files#diff-deb2c72b1b5d29895384e41f6c077f10085f43af68be368bf33c85112bc0a4c1
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-078/ExecTainted.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-deb2c72b1b5d29895384e41f6c077f10085f43af68be368bf33c85112bc0a4c1
https://github.com/github/codeql/pull/19957/files#diff-deb2c72b1b5d29895384e41f6c077f10085f43af68be368bf33c85112bc0a4c1
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-079/CgiXss.qlhttps://github.com/github/codeql/pull/19957/files#diff-2837f3f1e7082fba0f6b63e5cff72238c22faa96d2f044e38eb99dd86207a4e4
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-079/CgiXss.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-2837f3f1e7082fba0f6b63e5cff72238c22faa96d2f044e38eb99dd86207a4e4
https://github.com/github/codeql/pull/19957/files#diff-2837f3f1e7082fba0f6b63e5cff72238c22faa96d2f044e38eb99dd86207a4e4
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-089/SqlTainted.qlhttps://github.com/github/codeql/pull/19957/files#diff-8f5bb27630fa420fb4d199c60b1334ad4d56b5b37837e82413c6381ea4b23ee3
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-089/SqlTainted.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-8f5bb27630fa420fb4d199c60b1334ad4d56b5b37837e82413c6381ea4b23ee3
https://github.com/github/codeql/pull/19957/files#diff-8f5bb27630fa420fb4d199c60b1334ad4d56b5b37837e82413c6381ea4b23ee3
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.qlhttps://github.com/github/codeql/pull/19957/files#diff-4babd10a0ccb9bdc06643f2c918aee60966bc25f6bf081153cf9c1e7a30f6480
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-4babd10a0ccb9bdc06643f2c918aee60966bc25f6bf081153cf9c1e7a30f6480
https://github.com/github/codeql/pull/19957/files#diff-4babd10a0ccb9bdc06643f2c918aee60966bc25f6bf081153cf9c1e7a30f6480
https://github.com/github/codeql/blob/main/CODEOWNERS#L6
cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.qlhttps://github.com/github/codeql/pull/19957/files#diff-374ed4f463ea94313086348a7f241925ae0698df078745e65f5a3161bc1890a7
View file https://github.com/d10c/codeql/blob/085720a6d57642a1053653d3ec2177d322fa8a95/cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/19957/{{ revealButtonHref }}
https://github.com/github/codeql/pull/19957/files#diff-374ed4f463ea94313086348a7f241925ae0698df078745e65f5a3161bc1890a7
https://github.com/github/codeql/pull/19957/files#diff-374ed4f463ea94313086348a7f241925ae0698df078745e65f5a3161bc1890a7
Please reload this pagehttps://github.com/github/codeql/pull/19957/files
Please reload this pagehttps://github.com/github/codeql/pull/19957/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.