| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:67418c20-e812-db7a-fa98-ed96541b0c34 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | D71E:380900:F5773:1687C3:6A573EB9 |
| html-safe-nonce | 74504174f5d161acaf937c523a44067e0d92b4dbc5c34e6081213cdef91fea75 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJENzFFOjM4MDkwMDpGNTc3MzoxNjg3QzM6NkE1NzNFQjkiLCJ2aXNpdG9yX2lkIjoiMzAyNjI4MTQ1MjI5NDA2MTc1MyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | de3e591c220470bc80506a5e5ec8180d8a030321d379b4244af37d6fd4727fe5 |
| hovercard-subject-tag | pull_request:2673857152 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/20079/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/c167b3d380838d52f2c1e7623e218dec685073e9ba53f6b40f62ba23c6707139/github/codeql/pull/20079 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/c167b3d380838d52f2c1e7623e218dec685073e9ba53f6b40f62ba23c6707139/github/codeql/pull/20079 |
| og:image:alt | This PR enables diff-informed mode on queries that select a location other than dataflow source or sink. This entails adding a non-trivial location override that returns the locations that are actu... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | d10c |
| hostname | github.com |
| expected-hostname | github.com |
| None | 4e7a7296a3830877cf21a6ad2a972c9e618a48915e03966cf0c53eb08e5aad98 |
| turbo-cache-control | no-cache |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 2576d1f0198cf1588faf2edf27f1ed120903be10 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/20079#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F20079 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F20079 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/20079 |
| Reload | https://github.com/github/codeql/pull/20079 |
| Reload | https://github.com/github/codeql/pull/20079 |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
992
| https://github.com/github/codeql/issues |
|
Pull requests
430
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| d10c | https://github.com/d10c |
| github:main | https://github.com/github/codeql/tree/main |
| d10c:d10c/diff-informed-phase-3-python | https://github.com/d10c/codeql/tree/d10c/diff-informed-phase-3-python |
| Conversation | https://github.com/github/codeql/pull/20079 |
| Commits2 (2) | https://github.com/github/codeql/pull/20079/commits |
| Checks | https://github.com/github/codeql/pull/20079/checks |
| Files changed | https://github.com/github/codeql/pull/20079/files |
| Python: Diff-informed queries: phase 3 (non-trivial locations) | https://github.com/github/codeql/pull/20079#top |
| d10c | https://github.com/d10c |
| github:main | https://github.com/github/codeql/tree/main |
| d10c:d10c/diff-informed-phase-3-python | https://github.com/d10c/codeql/tree/d10c/diff-informed-phase-3-python |
|
| https://github.com/d10c |
| d10c | https://github.com/d10c |
| Jul 17, 2025 | https://github.com/github/codeql/pull/20079#issue-3239457673 |
| #19663 | https://github.com/github/codeql/pull/19663 |
| #19759 | https://github.com/github/codeql/pull/19759 |
| #19817 | https://github.com/github/codeql/pull/19817 |
| Python TimingAttackAgainstHash test | https://github.com/github/codeql/pull/19957/commits/7f9570d9fa79d7fca7d3a270220c2aa0c4487005 |
| [TEST] Java: CWE-020/ExternalAPI | https://github.com/github/codeql/pull/19957/commits/999e74e6484c073474357ccbc119732fe58ee5ec |
| [TEST] C++: CleartextSqliteDatabase | https://github.com/github/codeql/pull/19957/commits/9fda6f5c86912cf41ae739271fb27b59de3fca13 |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| d10c | https://github.com/d10c |
| July 17, 2025 14:40 | https://github.com/github/codeql/pull/20079#commits-pushed-9408a96 |
|
| https://github.com/d10c |
| [TEST] Python: TimingAttackAgainstHash: add qlref test to existing so… | https://github.com/github/codeql/pull/20079/commits/9408a96ba53f62b9588e8c844946a908ad8ff146 |
| 9408a96 | https://github.com/github/codeql/pull/20079/commits/9408a96ba53f62b9588e8c844946a908ad8ff146 |
|
| https://github.com/d10c |
| [DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash | https://github.com/github/codeql/pull/20079/commits/20030d56a528757bca76b07589c11e46ef03271e |
| 20030d5 | https://github.com/github/codeql/pull/20079/commits/20030d56a528757bca76b07589c11e46ef03271e |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
|
Python
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython |
| Jul 17, 2025 | https://github.com/github/codeql/pull/20079#event-18679563938 |
| https://github.com/apps/github-advanced-security |
| github-advanced-security | https://github.com/apps/github-advanced-security |
|
Jul 17, 2025
| https://github.com/github/codeql/pull/20079#pullrequestreview-3029390049 |
|
View reviewed changes
| https://github.com/github/codeql/pull/20079/files/20030d56a528757bca76b07589c11e46ef03271e |
| ...erimental/query-tests/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.qlref | https://github.com/github/codeql/pull/20079/files/20030d56a528757bca76b07589c11e46ef03271e#diff-66854620a0423d15c0efb9925cbb07d7d2f597c174fbc42b1929fc4b15fa75f2 |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/d10c |
| d10c | https://github.com/d10c |
|
no-change-note-required
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Ano-change-note-required |
| Jul 17, 2025 | https://github.com/github/codeql/pull/20079#event-18680001504 |
| https://github.com/d10c |
| d10c | https://github.com/d10c |
| July 17, 2025 14:27 | https://github.com/github/codeql/pull/20079#event-18681638015 |
| https://github.com/d10c |
| d10c | https://github.com/d10c |
| code owner | https://github.com/github/codeql/blob/1485d7072d3546251bb628e2c4a258073abefb4c/CODEOWNERS#L9 |
| July 17, 2025 14:27 | https://github.com/github/codeql/pull/20079#event-18681638218 |
| https://github.com/d10c |
| d10c | https://github.com/d10c |
| igfoo | https://github.com/igfoo |
| michaelnebel | https://github.com/michaelnebel |
| July 17, 2025 14:27 | https://github.com/github/codeql/pull/20079#event-18681641074 |
| https://github.com/michaelnebel |
| michaelnebel | https://github.com/michaelnebel |
|
Aug 13, 2025
| https://github.com/github/codeql/pull/20079#pullrequestreview-3116067487 |
|
View reviewed changes
| https://github.com/github/codeql/pull/20079/files/20030d56a528757bca76b07589c11e46ef03271e |
| michaelnebel | https://github.com/michaelnebel |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/github/codeql/pull/20079#pullrequestreview-3116067487 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| here | https://github.com/github/codeql/blob/main/python/ql/test/library-tests/frameworks/data/test.ext.yml#L7 |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/d10c |
| d10c | https://github.com/d10c |
| Aug 15, 2025 | https://github.com/github/codeql/pull/20079#issuecomment-3190794531 |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/michaelnebel |
| michaelnebel | https://github.com/michaelnebel |
| Aug 15, 2025 | https://github.com/github/codeql/pull/20079#issuecomment-3190806895 |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/michaelnebel |
| michaelnebel | https://github.com/michaelnebel |
|
Aug 15, 2025
| https://github.com/github/codeql/pull/20079#pullrequestreview-3123160510 |
|
View reviewed changes
| https://github.com/github/codeql/pull/20079/files/20030d56a528757bca76b07589c11e46ef03271e |
| michaelnebel | https://github.com/michaelnebel |
| https://github.com/github/codeql/pull/20079#pullrequestreview-3123160510 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/d10c |
| d10c | https://github.com/d10c |
| Aug 15, 2025 | https://github.com/github/codeql/pull/20079#issuecomment-3191571288 |
| slowdown | https://github.com/github/codeql-dca-main/blob/data/d10c/pr-20079-20030d__nightly__security-experi/reports/summaries/time.theme.md#stage-timings |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/michaelnebel |
| michaelnebel | https://github.com/michaelnebel |
| Aug 18, 2025 | https://github.com/github/codeql/pull/20079#issuecomment-3195372185 |
| slowdown | https://github.com/github/codeql-dca-main/blob/data/d10c/pr-20079-20030d__nightly__security-experi/reports/summaries/time.theme.md#stage-timings |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.com/d10c |
| d10c | https://github.com/d10c |
| 4199859 | https://github.com/github/codeql/commit/4199859eaa59862f5ae991f7e911845c01ebe8f3 |
| Aug 18, 2025 | https://github.com/github/codeql/pull/20079#event-19197506815 |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F20079 |
|
| https://github.com/michaelnebel |
|
michaelnebel
| https://github.com/michaelnebel |
|
| https://github.com/github/codeql/pull/20079/files/20030d56a528757bca76b07589c11e46ef03271e |
|
| https://github.com/igfoo |
|
igfoo
| https://github.com/igfoo |
|
no-change-note-required
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Ano-change-note-required |
|
Python
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython |
| Please reload this page | https://github.com/github/codeql/pull/20079 |
|
| https://github.com/d10c |
|
| https://github.com/michaelnebel |
|
| https://github.com/apps/github-advanced-security |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |