René's URL Explorer Experiment


Title: Java: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #20077 · github/codeql · GitHub

Open Graph Title: Java: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #20077 · github/codeql

X Title: Java: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #20077 · github/codeql

Description: This PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actually selected. Prior work includes PRs like #19663, #19759, and #19817. This PR uses the same patch script as those PRs to find candidate queries to convert to diff-enabled. This is the final step in mass-enabling diff-informed queries on all the languages. Commit-by-commit reviewing is recommended. I have split the commits that add/modify tests from the ones that enable/disable diff-informed queries. If the commit modifies a .qll file, in the commit message I've included links to the queries that depend on that .qll for easier reviewing. Feel free to delegate parts of the review to others who may be more specialized in certain languages. Potentially tricky cases: [DIFF-INFORMED] Java: LogInjection: disabled because of mysterious OOM during --check-diff-informed locally and in CI. Should create a follow-up issue.

Open Graph Description: This PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actu...

X Description: This PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actu...

Opengraph URL: https://github.com/github/codeql/pull/20077

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:e1e29d5f-acfe-8283-4834-a9b1dc455cd0
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id84D8:3FD8A:8C49C3:BE5E45:6A583663
html-safe-noncef9369c99bbfdc25509fea5b4bce96e51483c5b1b59560ecf4f89d27024377084
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4NEQ4OjNGRDhBOjhDNDlDMzpCRTVFNDU6NkE1ODM2NjMiLCJ2aXNpdG9yX2lkIjoiNDEwMDMzNDkxNDgyNjE1NTYyMCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacf59af34c0525cc3e48dfcd38f8ef9eafad0cf14c74d1ebf876b8529dc2d2e9cc
hovercard-subject-tagpull_request:2673819883
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/20077/files
twitter:imagehttps://avatars.githubusercontent.com/u/9970661?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/9970661?s=400&v=4
og:image:altThis PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actu...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None5f2a0c7865178af3d91dd9f13b0cdfc3c73a2529c873d2780bb4c01271a57ec6
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release8aae7b8d6caacacf5c66eaeb2702d8dc88d85b4a
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/20077/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F20077%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F20077%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/20077/files
Reloadhttps://github.com/github/codeql/pull/20077/files
Reloadhttps://github.com/github/codeql/pull/20077/files
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 991 https://github.com/github/codeql/issues
Pull requests 430 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
d10chttps://github.com/d10c
github:mainhttps://github.com/github/codeql/tree/main
d10c:d10c/diff-informed-phase-3-javahttps://github.com/d10c/codeql/tree/d10c/diff-informed-phase-3-java
Conversation 15 https://github.com/github/codeql/pull/20077
Findings https://github.com/github/codeql/pull/20077/findings
Commits 25 https://github.com/github/codeql/pull/20077/commits
Checks 11 https://github.com/github/codeql/pull/20077/checks
Files changed https://github.com/github/codeql/pull/20077/files
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
Java: Diff-informed queries: phase 3 (non-trivial locations) https://github.com/github/codeql/pull/20077/files#top
Show all changes 25 commits https://github.com/github/codeql/pull/20077/files
5c2cf79 [TEST] Java: CWE-020/ExternalAPI: new test based on qhelp d10c Jul 15, 2025 https://github.com/github/codeql/pull/20077/commits/5c2cf79785834f81bff467aef298851abd3dc9c3
7aced48 [TEST] Java: LogInjection: convert test to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/20077/commits/7aced484432e9ae4a5fafa1f66c04bd4ae185885
49e03b4 [TEST] Java: UnsafeCertTrust: convert test to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/20077/commits/49e03b4dfd4c35a55b4976ec49fa549e2fd33a44
94386f0 [TEST] Java: TrustBoundaryViolations: convert test to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/20077/commits/94386f05505450f6e59e7320c63c1ce75ea4c8e5
6134518 [TEST] Java: SensitiveLogInfo: convert to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/20077/commits/6134518d60888afa1ea4b382b45821a944099c33
44bb5e7 [TEST] Java: ConditionalBypass: convert to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/20077/commits/44bb5e722010e86ceb059d1e51f5b957989afea2
b33058c [TEST] Java: SensitiveCommunication: convert to qlref d10c Jul 15, 2025 https://github.com/github/codeql/pull/20077/commits/b33058c967667e0b7603893450f50fd259de97bf
8353fdd [DIFF-INFORMED] Java: (Android)SensitiveCommunication d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/8353fdd041222bb9d53666d9c5aeb666884ae81a
54546f6 [DIFF-INFORMED] Java: ArithmeticTainted d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/54546f6e997842ba74aef1b70f991edefe146139
0bcdb42 [DIFF-INFORMED] Java: ArithmeticUncontrolled d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/0bcdb421ed40cd862a340092bb20209783edd9fb
0cf1195 [DIFF-INFORMED] Java: ConditionalBypass d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/0cf1195678226bdb502834ef2e5907aeba1434b5
1c6ecf1 [DIFF-INFORMED] Java: UntrustedDataToExternalAPI d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/1c6ecf1216fdc3997b97ff499f85335fc06ba4e8
919fea5 [DIFF-INFORMED] Java: ExternallyControlledFormatString d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/919fea53f04f101eaf77e672292595294db9f48a
19e5c3d [DIFF-INFORMED] Java: ImproperValidationOfArray… d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/19e5c3d80537110638707b1d554db02fdaa846b0
74b37e7 [DIFF-INFORMED] Java: InsecureCookie d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/74b37e71a0b074d71e7751a4114ac7d58ba627b2
2d73405 [DIFF-INFORMED] Java: InsecureLdapAuth d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/2d734056b15735639e3f915ae452555cc5db00c6
b688df9 [DIFF-INFORMED] Java: LogInjection d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/b688df9dec0f9638db81a58eefb7067e28702df6
bc0b383 [DIFF-INFORMED] Java: MaybeBrokenCryptoAlgorithm d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/bc0b3835955cbeed911c8a8e69539aa36782601e
45b627d [DIFF-INFORMED] Java: SensitiveLogging d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/45b627df1d9bbe119389f7ae1b4e39f9f82c286d
b3b139b [DIFF-INFORMED] Java: SqlConcatenated d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/b3b139bb0285fd2896936a5778ca510d2befb57f
3785dbe [DIFF-INFORMED] Java: TaintedEnvironmentVariable d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/3785dbec9e9b7b2b9db8e212680e13fd914ceaa8
7888dcb [DIFF-INFORMED] Java: TempDirLocalInformationDisclosure d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/7888dcbce2d67e034617b59aaa02919a91777410
ea4af83 [DIFF-INFORMED] Java: TrustBoundaryViolation d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/ea4af8323c738f8fdce04361c3701ef591d22443
24c28ed [DIFF-INFORMED] Java: UnsafeCertTrust d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/24c28ed8738baac37f0ae2a72dca7435db7cec25
05df1d3 [DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess d10c Jul 16, 2025 https://github.com/github/codeql/pull/20077/commits/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd
Clear filters https://github.com/github/codeql/pull/20077/files
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
AndroidSensitiveCommunicationQuery.qll https://github.com/github/codeql/pull/20077/files#diff-579a6bb5881d11fe83ed4c1bbdad3aafe2df6ae583cc7b545fe69a9a6b9779a6
ArithmeticTaintedQuery.qll https://github.com/github/codeql/pull/20077/files#diff-cedf772a8097fb0b866dd017457d51a4d9e4d381d8c5e344d4196ed5516fb94a
ArithmeticUncontrolledQuery.qll https://github.com/github/codeql/pull/20077/files#diff-a2e8be67820205c5ef87c84f7bc8097243a8ecdf0eeb9b94ebc4dd998fe07a25
ConditionalBypassQuery.qll https://github.com/github/codeql/pull/20077/files#diff-1d429c62373c200b63bfc8ec87ec77d0b531faa920d7721d549c62df54ad1979
ExternalAPIs.qll https://github.com/github/codeql/pull/20077/files#diff-cdb1a6b592a8c924b3502f965a25137ea15342ad9dc62cd47103e37339cf6b0e
ImproperValidationOfArrayConstructionCodeSpecifiedQuery.qll https://github.com/github/codeql/pull/20077/files#diff-8552aaea88b5c8cf8f4f816a80b2caec13aecfdcf1a0d87c9779df5b1c6a4d2d
ImproperValidationOfArrayConstructionQuery.qll https://github.com/github/codeql/pull/20077/files#diff-1ab7665c18c7fe2ad9f62b1668b91e9ccd00defe4d5014520297f892bfbbc932
ImproperValidationOfArrayIndexCodeSpecifiedQuery.qll https://github.com/github/codeql/pull/20077/files#diff-26f3008b0128fde11bea7ff303bd3ef99c9437c5b5bf5abbc922602fa80faf8c
ImproperValidationOfArrayIndexQuery.qll https://github.com/github/codeql/pull/20077/files#diff-9ffca1fb12623f33432e2f65140908aae463bc0a91b84594e9d4062cbe3867d3
InsecureCookieQuery.qll https://github.com/github/codeql/pull/20077/files#diff-5d50528b37d829127222c271fb9e4948fd9839e81ac8dea32929fc1c60ec952e
InsecureLdapAuthQuery.qll https://github.com/github/codeql/pull/20077/files#diff-14263142900161a9b3e2b5e14e994fe934b6ce2b75c2355bb6d9f8f8bbafc140
LogInjectionQuery.qll https://github.com/github/codeql/pull/20077/files#diff-c71925eb5a14c0486ced01af8c210a5de1ed4db43c504e2adc2a9a4c0eddf4e2
MaybeBrokenCryptoAlgorithmQuery.qll https://github.com/github/codeql/pull/20077/files#diff-b763072a679fb9949df5aa2519d5411db4df861076dff66fdba037aa844a27e7
SensitiveLoggingQuery.qll https://github.com/github/codeql/pull/20077/files#diff-222963f97b3f981596c8306b97500ff14caee29ad9c3059e42481540d347403e
SqlConcatenatedQuery.qll https://github.com/github/codeql/pull/20077/files#diff-f9fe1260701efcea4c7aa8338ccd8767d5e616a366ed4003f5057f2bef048cf1
TaintedEnvironmentVariableQuery.qll https://github.com/github/codeql/pull/20077/files#diff-a8cb5eb14fcd29359c36197c11815816cd5f64294c7c495d903a5b8777f72bb9
TempDirLocalInformationDisclosureQuery.qll https://github.com/github/codeql/pull/20077/files#diff-7a12444a72bccef619ef075261c4d46ce1c2c4ad3b693fd8665aaa4cda28048a
TrustBoundaryViolationQuery.qll https://github.com/github/codeql/pull/20077/files#diff-c754ecfb249c7be38db5bd4c6db080fe845b1895cbe1a65e925f57239dae31b6
UnsafeCertTrustQuery.qll https://github.com/github/codeql/pull/20077/files#diff-ea07b8795f3b7fca186feff6b392aea6f97fe280786255b9dd5264a804470d92
AndroidWebViewSettingsAllowsContentAccess.ql https://github.com/github/codeql/pull/20077/files#diff-f05c0ffe0e1754fada8776bbf2806ca86384d6a29b930f99514ef88e5b7dd9b0
ExternalAPISinkExample.java https://github.com/github/codeql/pull/20077/files#diff-be1e339ebcf7b67dddf731d2f4712bc336a15b5cfa54e6522caae007daa9bfe8
ExternalAPITaintStepExample.java https://github.com/github/codeql/pull/20077/files#diff-48bc1d616b70e35b9b385ba292a69b23eb83dfae9b0750bff2e865610d840989
ExternalAPIsUsedWithUntrustedData.expected https://github.com/github/codeql/pull/20077/files#diff-1762e7e72c469558113039dfba092c202762d5f82dcad079dc821ba436e2efe9
ExternalAPIsUsedWithUntrustedData.qlref https://github.com/github/codeql/pull/20077/files#diff-ef5f062c279d21995c84e600110fc63c101a6140347ba272cadca87842a1ff03
UntrustedDataToExternalAPI.expected https://github.com/github/codeql/pull/20077/files#diff-5bc04f6cc444c1e9d271e84752362e39ef6dfd155b5862851f4c80ac9b8f0a8f
UntrustedDataToExternalAPI.qlref https://github.com/github/codeql/pull/20077/files#diff-23ce5b88a918c00dbdbec28162dae76dc650679d7ad8cf75186707f764cb72fa
LogInjectionTest.expected https://github.com/github/codeql/pull/20077/files#diff-8ce094d28173e1ca68d311f6636aa073a8dfb3ea3036fce94e9e9ed846f68653
LogInjectionTest.ext.yml https://github.com/github/codeql/pull/20077/files#diff-b133bcff3c3947b9077b2c84974cc2eed1a625fef72f8470aff030e39461407e
LogInjectionTest.java https://github.com/github/codeql/pull/20077/files#diff-7823ae77af6d698aa021174ff0dacc3bf464b9c225fed29c6d90ba3d7b5312cc
LogInjectionTest.ql https://github.com/github/codeql/pull/20077/files#diff-92f3140eaab88ed539c93216f9dc011eb49fa8d4db945ca391a9a62dd9c30f34
LogInjectionTest.qlref https://github.com/github/codeql/pull/20077/files#diff-5008964156692d0af2b45d3e6efba01807843a25c659d10ac53b2172c36032d0
UnsafeCertTrustTest.expected https://github.com/github/codeql/pull/20077/files#diff-82d7596038d9af4e068adb1dbe643f82e661978b6c297b5dc4c7e2905ddf90ea
UnsafeCertTrustTest.java https://github.com/github/codeql/pull/20077/files#diff-09f0fdd8d61d6fb58fe1519fc4dfd9b75c44237dbb911d17cbda53f885e5370c
UnsafeCertTrustTest.ql https://github.com/github/codeql/pull/20077/files#diff-1ea9fe4d88a95da62ee87f6d31ea0d9aff6b271729123a79487a44183d8bd644
UnsafeCertTrustTest.qlref https://github.com/github/codeql/pull/20077/files#diff-9e1cf48d4968a511540582a9ac653a6e4bb2b9e5090af95cc789d307605f75fe
TrustBoundaryViolations.expected https://github.com/github/codeql/pull/20077/files#diff-7fd6d7f9b8517f75d1f8dbfce5f5f440418ca84dcd5d6ab2237a414af0a956a5
TrustBoundaryViolations.java https://github.com/github/codeql/pull/20077/files#diff-8864dcc01a954a7a79dcafbf4101d94ff71b139c5ba41a7320e1d762447f8b39
TrustBoundaryViolations.ql https://github.com/github/codeql/pull/20077/files#diff-96418167ff62d31c79dcb85bd771496b5963f96c6d1aae3edb2fc7805ae4d1e7
TrustBoundaryViolations.qlref https://github.com/github/codeql/pull/20077/files#diff-36e4a845f13a95123015e8732437b4ce3d094b02d50c7544e4258ce679ba6d08
SensitiveLogInfo.expected https://github.com/github/codeql/pull/20077/files#diff-4e34531ad7109332845056a8990cce81f9e4e95bf68691d4f20b527a651afa5f
SensitiveLogInfo.ql https://github.com/github/codeql/pull/20077/files#diff-154b406ba031ba971c07f2b212d908aa9d03c8d90fb70db1b65b4a890b85deb9
SensitiveLogInfo.qlref https://github.com/github/codeql/pull/20077/files#diff-6d0eee41756c433749af436cec2f92dc84b2651f5a3f2f846b18b487322ae832
Test.java https://github.com/github/codeql/pull/20077/files#diff-bfa722898d8232975ca5525013b2d8501572681fc668c93cdc2881a6233fa53b
ConditionalBypassTest.expected https://github.com/github/codeql/pull/20077/files#diff-383daebfd0441e5a61a6897218fb17f163a877f75be1613f6c58010857597650
ConditionalBypassTest.java https://github.com/github/codeql/pull/20077/files#diff-a9d4875b3155e815cd18baefe8569f7b1693366ea0103417559452f7e3bf6624
ConditionalBypassTest.ql https://github.com/github/codeql/pull/20077/files#diff-7e45670eee9b455e923d3d6b91878b8adc3c77d6c419d745dee5a98768d4c8f9
ConditionalBypassTest.qlref https://github.com/github/codeql/pull/20077/files#diff-641a4b848854a8f79f547c9fc9f17a3ce0b72666deb6fa10eef098e1d5312c6e
SensitiveCommunication.expected https://github.com/github/codeql/pull/20077/files#diff-5a8a02b4643853ad8dbc3bf088e724f338808a77212135c051b19a386fdb9ba0
SensitiveCommunication.ql https://github.com/github/codeql/pull/20077/files#diff-8337c5ae2d451156d3c7e5164a8b4279272e14dc0627f328921f1eea29819869
SensitiveCommunication.expected https://github.com/github/codeql/pull/20077/files#diff-c649f84f4c1e1551f739b7eabc8772e9e47dda7e1d693f033bac4ea3aef3cede
SensitiveCommunication.java https://github.com/github/codeql/pull/20077/files#diff-1e3f27e60c3f55a9d08ac943df62108f5d428743ffb57762b5461aadbfac5a24
SensitiveCommunication.qlref https://github.com/github/codeql/pull/20077/files#diff-71f4d854ca88fac863904923b08ef338a4f8ab81551d91cfed6bdf431ed5775c
options https://github.com/github/codeql/pull/20077/files#diff-7eace9739ce3e387c275d9367fe9af04045e2199f4c30e4c727310aaf461d4a7
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/AndroidSensitiveCommunicationQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-579a6bb5881d11fe83ed4c1bbdad3aafe2df6ae583cc7b545fe69a9a6b9779a6
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/AndroidSensitiveCommunicationQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-579a6bb5881d11fe83ed4c1bbdad3aafe2df6ae583cc7b545fe69a9a6b9779a6
https://github.com/github/codeql/pull/20077/files#diff-579a6bb5881d11fe83ed4c1bbdad3aafe2df6ae583cc7b545fe69a9a6b9779a6
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/ArithmeticTaintedQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-cedf772a8097fb0b866dd017457d51a4d9e4d381d8c5e344d4196ed5516fb94a
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ArithmeticTaintedQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-cedf772a8097fb0b866dd017457d51a4d9e4d381d8c5e344d4196ed5516fb94a
https://github.com/github/codeql/pull/20077/files#diff-cedf772a8097fb0b866dd017457d51a4d9e4d381d8c5e344d4196ed5516fb94a
https://github.com/github/codeql/pull/20077/files#diff-cedf772a8097fb0b866dd017457d51a4d9e4d381d8c5e344d4196ed5516fb94a
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/ArithmeticUncontrolledQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-a2e8be67820205c5ef87c84f7bc8097243a8ecdf0eeb9b94ebc4dd998fe07a25
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ArithmeticUncontrolledQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-a2e8be67820205c5ef87c84f7bc8097243a8ecdf0eeb9b94ebc4dd998fe07a25
https://github.com/github/codeql/pull/20077/files#diff-a2e8be67820205c5ef87c84f7bc8097243a8ecdf0eeb9b94ebc4dd998fe07a25
https://github.com/github/codeql/pull/20077/files#diff-a2e8be67820205c5ef87c84f7bc8097243a8ecdf0eeb9b94ebc4dd998fe07a25
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/ConditionalBypassQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-1d429c62373c200b63bfc8ec87ec77d0b531faa920d7721d549c62df54ad1979
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ConditionalBypassQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-1d429c62373c200b63bfc8ec87ec77d0b531faa920d7721d549c62df54ad1979
https://github.com/github/codeql/pull/20077/files#diff-1d429c62373c200b63bfc8ec87ec77d0b531faa920d7721d549c62df54ad1979
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/ExternalAPIs.qllhttps://github.com/github/codeql/pull/20077/files#diff-cdb1a6b592a8c924b3502f965a25137ea15342ad9dc62cd47103e37339cf6b0e
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-cdb1a6b592a8c924b3502f965a25137ea15342ad9dc62cd47103e37339cf6b0e
https://github.com/github/codeql/pull/20077/files#diff-cdb1a6b592a8c924b3502f965a25137ea15342ad9dc62cd47103e37339cf6b0e
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
...lib/semmle/code/java/security/ImproperValidationOfArrayConstructionCodeSpecifiedQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-8552aaea88b5c8cf8f4f816a80b2caec13aecfdcf1a0d87c9779df5b1c6a4d2d
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ImproperValidationOfArrayConstructionCodeSpecifiedQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-8552aaea88b5c8cf8f4f816a80b2caec13aecfdcf1a0d87c9779df5b1c6a4d2d
https://github.com/github/codeql/pull/20077/files#diff-8552aaea88b5c8cf8f4f816a80b2caec13aecfdcf1a0d87c9779df5b1c6a4d2d
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/ImproperValidationOfArrayConstructionQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-1ab7665c18c7fe2ad9f62b1668b91e9ccd00defe4d5014520297f892bfbbc932
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ImproperValidationOfArrayConstructionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-1ab7665c18c7fe2ad9f62b1668b91e9ccd00defe4d5014520297f892bfbbc932
https://github.com/github/codeql/pull/20077/files#diff-1ab7665c18c7fe2ad9f62b1668b91e9ccd00defe4d5014520297f892bfbbc932
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/ImproperValidationOfArrayIndexCodeSpecifiedQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-26f3008b0128fde11bea7ff303bd3ef99c9437c5b5bf5abbc922602fa80faf8c
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ImproperValidationOfArrayIndexCodeSpecifiedQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-26f3008b0128fde11bea7ff303bd3ef99c9437c5b5bf5abbc922602fa80faf8c
https://github.com/github/codeql/pull/20077/files#diff-26f3008b0128fde11bea7ff303bd3ef99c9437c5b5bf5abbc922602fa80faf8c
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/ImproperValidationOfArrayIndexQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-9ffca1fb12623f33432e2f65140908aae463bc0a91b84594e9d4062cbe3867d3
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/ImproperValidationOfArrayIndexQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-9ffca1fb12623f33432e2f65140908aae463bc0a91b84594e9d4062cbe3867d3
https://github.com/github/codeql/pull/20077/files#diff-9ffca1fb12623f33432e2f65140908aae463bc0a91b84594e9d4062cbe3867d3
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/InsecureCookieQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-5d50528b37d829127222c271fb9e4948fd9839e81ac8dea32929fc1c60ec952e
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/InsecureCookieQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-5d50528b37d829127222c271fb9e4948fd9839e81ac8dea32929fc1c60ec952e
https://github.com/github/codeql/pull/20077/files#diff-5d50528b37d829127222c271fb9e4948fd9839e81ac8dea32929fc1c60ec952e
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/InsecureLdapAuthQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-14263142900161a9b3e2b5e14e994fe934b6ce2b75c2355bb6d9f8f8bbafc140
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/InsecureLdapAuthQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-14263142900161a9b3e2b5e14e994fe934b6ce2b75c2355bb6d9f8f8bbafc140
https://github.com/github/codeql/pull/20077/files#diff-14263142900161a9b3e2b5e14e994fe934b6ce2b75c2355bb6d9f8f8bbafc140
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/LogInjectionQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-c71925eb5a14c0486ced01af8c210a5de1ed4db43c504e2adc2a9a4c0eddf4e2
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/LogInjectionQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-c71925eb5a14c0486ced01af8c210a5de1ed4db43c504e2adc2a9a4c0eddf4e2
Copilothttps://github.com/apps/copilot-pull-request-reviewer
Jul 17, 2025https://github.com/github/codeql/pull/20077/files#r2213443243
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
Copilothttps://docs.github.com/copilot/responsible-use-of-github-copilot-features/responsible-use-of-github-copilot-code-review
https://github.com/github/codeql/pull/20077/files#diff-c71925eb5a14c0486ced01af8c210a5de1ed4db43c504e2adc2a9a4c0eddf4e2
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/MaybeBrokenCryptoAlgorithmQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-b763072a679fb9949df5aa2519d5411db4df861076dff66fdba037aa844a27e7
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/MaybeBrokenCryptoAlgorithmQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-b763072a679fb9949df5aa2519d5411db4df861076dff66fdba037aa844a27e7
https://github.com/github/codeql/pull/20077/files#diff-b763072a679fb9949df5aa2519d5411db4df861076dff66fdba037aa844a27e7
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-222963f97b3f981596c8306b97500ff14caee29ad9c3059e42481540d347403e
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-222963f97b3f981596c8306b97500ff14caee29ad9c3059e42481540d347403e
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/SqlConcatenatedQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-f9fe1260701efcea4c7aa8338ccd8767d5e616a366ed4003f5057f2bef048cf1
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/SqlConcatenatedQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-f9fe1260701efcea4c7aa8338ccd8767d5e616a366ed4003f5057f2bef048cf1
https://github.com/github/codeql/pull/20077/files#diff-f9fe1260701efcea4c7aa8338ccd8767d5e616a366ed4003f5057f2bef048cf1
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-a8cb5eb14fcd29359c36197c11815816cd5f64294c7c495d903a5b8777f72bb9
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-a8cb5eb14fcd29359c36197c11815816cd5f64294c7c495d903a5b8777f72bb9
aschackmullhttps://github.com/aschackmull
Jul 17, 2025https://github.com/github/codeql/pull/20077/files#r2213554097
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
d10chttps://github.com/d10c
Jul 17, 2025https://github.com/github/codeql/pull/20077/files#r2213789542
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
WebviewDebuggingEnabled.qlhttps://github.com/github/codeql/blob/52aa7e3c7d38bc045e7715d042eaadf814fcb1e6/java/ql/src/Security/CWE/CWE-489/WebviewDebuggingEnabled.ql
WebviewDebuggingEnabledQuery.qllhttps://github.com/github/codeql/blob/52aa7e3c7d38bc045e7715d042eaadf814fcb1e6/java/ql/lib/semmle/code/java/security/WebviewDebuggingEnabledQuery.qll
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
aschackmullhttps://github.com/aschackmull
Jul 18, 2025https://github.com/github/codeql/pull/20077/files#r2215100954
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
michaelnebelhttps://github.com/michaelnebel
Jul 18, 2025https://github.com/github/codeql/pull/20077/files#r2215215782
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
documentationhttps://github.com/github/codeql-core/blob/main/wiki/diff-informed-queries.md
relevanthttps://github.com/github/codeql/blob/main/shared/dataflow/codeql/dataflow/internal/DataFlowImplStage1.qll#L162
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
michaelnebelhttps://github.com/michaelnebel
Jul 18, 2025https://github.com/github/codeql/pull/20077/files#r2215316367
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
https://github.com/github/codeql/pull/20077/files#diff-a8cb5eb14fcd29359c36197c11815816cd5f64294c7c495d903a5b8777f72bb9
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/TempDirLocalInformationDisclosureQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-7a12444a72bccef619ef075261c4d46ce1c2c4ad3b693fd8665aaa4cda28048a
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/TempDirLocalInformationDisclosureQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-7a12444a72bccef619ef075261c4d46ce1c2c4ad3b693fd8665aaa4cda28048a
aschackmullhttps://github.com/aschackmull
Jul 17, 2025https://github.com/github/codeql/pull/20077/files#r2213556981
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
https://github.com/github/codeql/pull/20077/files#diff-7a12444a72bccef619ef075261c4d46ce1c2c4ad3b693fd8665aaa4cda28048a
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-c754ecfb249c7be38db5bd4c6db080fe845b1895cbe1a65e925f57239dae31b6
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-c754ecfb249c7be38db5bd4c6db080fe845b1895cbe1a65e925f57239dae31b6
https://github.com/github/codeql/pull/20077/files#diff-c754ecfb249c7be38db5bd4c6db080fe845b1895cbe1a65e925f57239dae31b6
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/UnsafeCertTrustQuery.qllhttps://github.com/github/codeql/pull/20077/files#diff-ea07b8795f3b7fca186feff6b392aea6f97fe280786255b9dd5264a804470d92
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/lib/semmle/code/java/security/UnsafeCertTrustQuery.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-ea07b8795f3b7fca186feff6b392aea6f97fe280786255b9dd5264a804470d92
https://github.com/github/codeql/pull/20077/files#diff-ea07b8795f3b7fca186feff6b392aea6f97fe280786255b9dd5264a804470d92
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.qlhttps://github.com/github/codeql/pull/20077/files#diff-f05c0ffe0e1754fada8776bbf2806ca86384d6a29b930f99514ef88e5b7dd9b0
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/pull/20077/files#diff-f05c0ffe0e1754fada8776bbf2806ca86384d6a29b930f99514ef88e5b7dd9b0
https://github.com/github/codeql/pull/20077/files#diff-f05c0ffe0e1754fada8776bbf2806ca86384d6a29b930f99514ef88e5b7dd9b0
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/test/query-tests/security/CWE-020/ExternalAPISinkExample.javahttps://github.com/github/codeql/pull/20077/files#diff-be1e339ebcf7b67dddf731d2f4712bc336a15b5cfa54e6522caae007daa9bfe8
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/test/query-tests/security/CWE-020/ExternalAPISinkExample.java
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/test/query-tests/security/CWE-020/ExternalAPITaintStepExample.javahttps://github.com/github/codeql/pull/20077/files#diff-48bc1d616b70e35b9b385ba292a69b23eb83dfae9b0750bff2e865610d840989
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/test/query-tests/security/CWE-020/ExternalAPITaintStepExample.java
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/test/query-tests/security/CWE-020/ExternalAPIsUsedWithUntrustedData.expectedhttps://github.com/github/codeql/pull/20077/files#diff-1762e7e72c469558113039dfba092c202762d5f82dcad079dc821ba436e2efe9
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/test/query-tests/security/CWE-020/ExternalAPIsUsedWithUntrustedData.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/test/query-tests/security/CWE-020/ExternalAPIsUsedWithUntrustedData.qlrefhttps://github.com/github/codeql/pull/20077/files#diff-ef5f062c279d21995c84e600110fc63c101a6140347ba272cadca87842a1ff03
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/test/query-tests/security/CWE-020/ExternalAPIsUsedWithUntrustedData.qlref
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/test/query-tests/security/CWE-020/UntrustedDataToExternalAPI.expectedhttps://github.com/github/codeql/pull/20077/files#diff-5bc04f6cc444c1e9d271e84752362e39ef6dfd155b5862851f4c80ac9b8f0a8f
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/test/query-tests/security/CWE-020/UntrustedDataToExternalAPI.expected
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/test/query-tests/security/CWE-020/UntrustedDataToExternalAPI.qlrefhttps://github.com/github/codeql/pull/20077/files#diff-23ce5b88a918c00dbdbec28162dae76dc650679d7ad8cf75186707f764cb72fa
View file https://github.com/d10c/codeql/blob/05df1d3cb9f0da121c8cdbdab6b1b2fc0b2ce3fd/java/ql/test/query-tests/security/CWE-020/UntrustedDataToExternalAPI.qlref
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/20077/{{ revealButtonHref }}
Please reload this pagehttps://github.com/github/codeql/pull/20077/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.