Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
igfoo
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
on
master
User selector
All users
Datepicker
All time
Commit history
Commits on Feb 25, 2020
Merge pull request #2723 from esbena/js/support-path-is-inside
Show description for 03b8823
semmle-qlci
authored
03b8823
View commit details
Copy full SHA for 03b8823
View code at this point
Browse repository at this point
Merge pull request #2896 from asger-semmle/typescript-3.8
Show description for 160fc48
asgerf
authored
160fc48
View commit details
Copy full SHA for 160fc48
View code at this point
Browse repository at this point
Commits on Feb 24, 2020
JS: model `path-is-inside`+`is-path-inside` for `js/path-injection`
esbena
committed
5baba62
View commit details
Copy full SHA for 5baba62
View code at this point
Browse repository at this point
JS: add tests for js/path-injection
esbena
committed
86b836c
View commit details
Copy full SHA for 86b836c
View code at this point
Browse repository at this point
Merge pull request #2855 from asger-semmle/js/returned-partial-call
Show description for aadb148
semmle-qlci
authored
aadb148
View commit details
Copy full SHA for aadb148
View code at this point
Browse repository at this point
Merge pull request #2898 from asger-semmle/js/prototype-pollution-isobject-sanitizers
Show description for 317356e
semmle-qlci
authored
317356e
View commit details
Copy full SHA for 317356e
View code at this point
Browse repository at this point
TS: Add test for named re-export and exportsAs
asgerf
committed
01309d7
View commit details
Copy full SHA for 01309d7
View code at this point
Browse repository at this point
TS: Fix expected output
asgerf
committed
7895448
View commit details
Copy full SHA for 7895448
View code at this point
Browse repository at this point
TS: Fix javadoc
asgerf
committed
4e1bd90
View commit details
Copy full SHA for 4e1bd90
View code at this point
Browse repository at this point
TS: Add upgrade script and stats
asgerf
committed
18974ba
View commit details
Copy full SHA for 18974ba
View code at this point
Browse repository at this point
TS: Disable export analysis for type-only exports
asgerf
committed
47673c6
View commit details
Copy full SHA for 47673c6
View code at this point
Browse repository at this point
TS: Add test case for import type * as ns
asgerf
committed
16c909b
View commit details
Copy full SHA for 16c909b
View code at this point
Browse repository at this point
TS: Add test case to DeclBeforeUse
asgerf
committed
260b243
View commit details
Copy full SHA for 260b243
View code at this point
Browse repository at this point
TS: Support type-only import/export
asgerf
committed
8d58aad
View commit details
Copy full SHA for 8d58aad
View code at this point
Browse repository at this point
TS: Add test and documentation for private fields
asgerf
committed
0351f0b
View commit details
Copy full SHA for 0351f0b
View code at this point
Browse repository at this point
TS: Fix imports
asgerf
committed
8531c11
View commit details
Copy full SHA for 8531c11
View code at this point
Browse repository at this point
TS: Handle export * as ns
asgerf
committed
9b52acc
View commit details
Copy full SHA for 9b52acc
View code at this point
Browse repository at this point
TS: Update to TypeScript 3.8.2
asgerf
committed
7f939fe
View commit details
Copy full SHA for 7f939fe
View code at this point
Browse repository at this point
Merge pull request #2810 from erik-krogh/CVE74
Show description for 94aa777
semmle-qlci
authored
94aa777
View commit details
Copy full SHA for 94aa777
View code at this point
Browse repository at this point
JS: Fix test
asgerf
committed
f923b24
View commit details
Copy full SHA for f923b24
View code at this point
Browse repository at this point
Commits on Feb 21, 2020
JS: Proto pollution: Add is-plain-object sanitizer
asgerf
committed
d1df251
View commit details
Copy full SHA for d1df251
View code at this point
Browse repository at this point
JS: Update expected output
asgerf
committed
a673539
View commit details
Copy full SHA for a673539
View code at this point
Browse repository at this point
JS: Also track into callbacks
asgerf
committed
b780bc4
View commit details
Copy full SHA for b780bc4
View code at this point
Browse repository at this point
JS: Also propagate out of returns
asgerf
committed
e8e6491
View commit details
Copy full SHA for e8e6491
View code at this point
Browse repository at this point
JS: Track flow into calls to bound functions
asgerf
committed
8c36b99
View commit details
Copy full SHA for 8c36b99
View code at this point
Browse repository at this point
Merge pull request #2892 from asger-semmle/js/field-methods
Show description for ee5cf95
semmle-qlci
authored
ee5cf95
View commit details
Copy full SHA for ee5cf95
View code at this point
Browse repository at this point
Merge pull request #2796 from asger-semmle/js/partial-invoke-receiver
Show description for e163d8d
semmle-qlci
authored
e163d8d
View commit details
Copy full SHA for e163d8d
View code at this point
Browse repository at this point
Merge pull request #2895 from max-schaefer/js/improve-param-qldoc
Show description for 382e4bc
semmle-qlci
authored
382e4bc
View commit details
Copy full SHA for 382e4bc
View code at this point
Browse repository at this point
Update javascript/ql/src/semmle/javascript/Variables.qll
Show description for 75495d7
max-schaefer
and
asgerf
authored
75495d7
View commit details
Copy full SHA for 75495d7
View code at this point
Browse repository at this point
JavaScript: Improve qldoc for `Parameter` to clarify that it also contains catch-clause parameters.
Max Schaefer
committed
fc4afe6
View commit details
Copy full SHA for fc4afe6
View code at this point
Browse repository at this point
Commits on Feb 20, 2020
Merge pull request #2883 from asger-semmle/typescript-3.7.5
Show description for 2df3fe8
semmle-qlci
authored
2df3fe8
View commit details
Copy full SHA for 2df3fe8
View code at this point
Browse repository at this point
Merge branch 'master' of git.semmle.com:Semmle/ql into CVE74
erik-krogh
committed
03e295e
View commit details
Copy full SHA for 03e295e
View code at this point
Browse repository at this point
Merge pull request #2778 from erik-krogh/FalsySanitizer
Show description for f6af5da
semmle-qlci
authored
f6af5da
View commit details
Copy full SHA for f6af5da
View code at this point
Browse repository at this point
Merge branch 'master' of git.semmle.com:Semmle/ql into CVE74
erik-krogh
committed
63036aa
View commit details
Copy full SHA for 63036aa
View code at this point
Browse repository at this point
Merge pull request #2868 from asger-semmle/js/missing-await-void
Show description for 8b277f7
semmle-qlci
authored
8b277f7
View commit details
Copy full SHA for 8b277f7
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.