File tree
3,505 files changed
+239068
-162996
lines changed- config
- cpp
- change-notes
- ql
- examples
- lib
- experimental/semmle/code/cpp
- models/interfaces
- rangeanalysis
- extensions
- security
- external
- semmle
- code/cpp
- commons
- unix
- controlflow
- internal
- dataflow
- internal
- tainttracking1
- tainttracking2
- dispatch
- exprs
- headers
- internal
- ir
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- implementation
- aliased_ssa
- constant
- internal
- gvn
- internal
- internal
- internal
- raw
- constant
- internal
- gvn
- internal
- internal
- reachability
- unaliased_ssa
- constant
- internal
- gvn
- internal
- internal
- reachability
- internal
- metrics
- models
- implementations
- interfaces
- padding
- pointsto
- rangeanalysis
- security
- boostorg/asio
- stmts
- valuenumbering
- files
- src
- Likely Bugs
- Conversion
- Format
- Memory Management
- Microsoft
- Security/CWE
- CWE-190
- CWE-311
- CWE-367
- CWE-457
- CWE-570
- CWE-676
- codeql-suites
- experimental/Security/CWE
- CWE-561
- CWE-703
- CWE-758
- CWE-783
- semmle/code/cpp
- dataflow/internal
- ir
- dataflow/internal
- implementation
- aliased_ssa
- raw
- unaliased_ssa
- security
- test
- experimental/query-tests/Security/CWE
- CWE-561/semmle/tests
- CWE-703/semmle/tests
- CWE-758/semmle/tests
- CWE-783/semmle/tests
- library-tests
- clang_ms
- conditions
- dataflow
- dataflow-tests
- fields
- taint-tests
- rangeanalysis/SimpleRangeAnalysis
- specifiers2
- templates/instantiations_functions
- unnamed
- query-tests
- Critical/MemoryFreed
- Likely Bugs
- Conversion/ImplicitDowncastFromBitfield
- Format/WrongTypeFormatArguments
- Linux_mixed_byte_wprintf
- Linux_two_byte_wprintf
- Linux_unsigned_chars
- Microsoft
- Memory Management/ImproperNullTermination
- Security/CWE
- CWE-119/semmle/tests
- CWE-190/semmle
- ArithmeticUncontrolled
- ArithmeticWithExtremeValues
- tainted
- uncontrolled
- CWE-311/semmle/tests
- CWE-367/semmle
- CWE-570
- upgrades
- csharp
- change-notes
- extractor
- Semmle.Extraction.CIL/Entities
- Semmle.Extraction.CSharp
- Semmle.Util
- ql
- examples
- lib
- semmle
- code
- asp
- cil
- internal
- csharp
- commons
- controlflow
- internal
- pressa
- dataflow
- flowsources
- internal
- basessa
- rangeanalysis
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- tainttracking5
- dispatch
- exprs
- frameworks
- microsoft
- system
- codedom
- collections
- data
- diagnostics
- directoryservices
- io
- linq
- net
- runtime
- security
- cryptography
- text
- threading
- web
- ui
- windows
- xml
- test
- metrics
- security
- cryptography
- dataflow
- flowsinks
- flowsources
- xml
- serialization
- dotnet
- files
- src
- Bad Practices
- Dead Code
- Input Validation
- Language Abuse
- Likely Bugs
- Linq
- Security Features
- CWE-327
- CWE-502
- CWE-614
- Stubs
- codeql-suites
- experimental
- Security Features
- CWE-1004
- CWE-614
- dataflow/flowsources
- ir/implementation
- raw
- unaliased_ssa
- semmle/code
- asp
- cil
- internal
- csharp
- controlflow
- internal
- pressa
- dataflow
- internal
- basessa
- security
- dataflow
- serialization
- dotnet
- test
- experimental
- Security Features
- CWE-1004
- CookieHttpOnlyFalseAspNetCore
- CookieBuilder
- NoPolicy
- UseCookiePolicyCallback
- CookieHttpOnlyFalseSystemWeb
- CookieWithoutHttpOnlyAspNetCore
- NoPolicy
- UseCookiePolicyAlways
- UseCookiePolicyCallback
- UseCookiePolicyNone
- CookieWithoutHttpOnlySystemWeb
- ConfigEmpty
- ConfigFalse
- HttpCookiesTrue
- CWE-614
- RequireSSLAspNetCore
- NoPolicy
- UseCookiePolicyAlways
- UseCookiePolicyCallback
- UseCookiePolicyNone
- RequireSSLFalseAspNetCore
- CookieBuilder
- NoPolicy
- UseCookiePolicyCallback
- RequireSSLFalseSystemWeb
- RequireSSLSystemWeb
- ConfigEmpty
- ConfigFalse
- FormsTrue
- HttpCookiesTrue
- ir/ir
- library-tests
- assignables
- comments
- commons/Assertions
- controlflow
- graph
- guards
- csharp6
- csharp7.3
- csharp7
- csharp8
- csharp9
- dataflow
- async
- call-sensitivity
- callablereturnsarg
- collections
- external-models
- global
- library
- local
- signanalysis
- ssa
- tuples
- types
- definitions
- delegates
- dispatch
- dynamic
- expressions
- extension-method-call
- fields
- frameworks
- EntityFramework
- JsonNET
- generics
- linq
- members
- methods
- nestedtypes
- overrides
- parameters
- properties
- security/dataflow/flowsources
- statements
- tostringwithtypes
- tuples
- types
- unification
- query-tests
- API Abuse
- NonOverridingMethod
- UncheckedReturnValue
- Dead Code/Tests
- Documentation
- Nullness
- Security Features
- CWE-079
- StoredXSS
- XSS
- CWE-327/InsecureSQLConnection
- CWE-338
- CWE-502
- UnsafeDeserializationUntrustedInput
- UnsafeDeserialization
- Stubs
- All
- Minimal
- Useless Code/PointlessForwardingMethod
- resources/stubs
- tools
- upgrades
- 770f844243d5a2282861b33fd201d0a02e3528d9
- docs
- codeql
- _templates
- codeql-cli
- codeql-for-visual-studio-code
- codeql-language-guides
- ql-language-reference
- query-help
- reusables
- support/reusables
- writing-codeql-queries
- javascript
- change-notes
- extractor
- src/com/semmle
- jcorn
- jsx
- js
- ast
- extractor
- tests
- es2021/output/trap
- excludes
- input
- baz
- f
- output/trap
- generatedcode
- input
- output/trap
- html/output/trap
- ng-templates/output/trap
- node/output/trap
- shebang/output/trap
- ql
- examples
- queries/dataflow/StoredXss
- lib
- semmle
- files
- javascript
- dataflow
- internal
- dependencies
- explore
- frameworks
- AngularJS
- heuristics
- internal
- linters
- meta
- security
- dataflow
- internal
- performance
- src
- DOM
- Declarations
- Security
- CWE-020
- CWE-022
- CWE-073
- CWE-078
- CWE-079
- CWE-089
- CWE-094
- CWE-116
- CWE-117
- CWE-134
- CWE-200
- CWE-201
- CWE-209
- CWE-312
- CWE-327
- CWE-338
- CWE-346
- CWE-400
- CWE-502
- CWE-506
- CWE-601
- CWE-611
- CWE-640
- CWE-643
- CWE-730
- CWE-754
- CWE-776
- CWE-798
- CWE-807
- CWE-829
- CWE-834
- CWE-843
- CWE-912
- CWE-915
- CWE-916
- CWE-918
- Vue
- codeql-suites
- experimental/Security/CWE-079
- examples
- semmle/javascript
- dataflow/internal
- frameworks
- security
- dataflow
- performance
- test
- ApiGraphs/spread
- library-tests
- Arrays
- Security/CWE-338
- StringConcatenation
- TaintTracking
- frameworks
- Angular2
- AngularJS/expressions
- lexing
- parsing
- Templating
- projectA
- src
- views
- subfolder
- subsub
- projectB
- src
- views
- subfolder
- views
- Vuex
- Vue
- connect
- src
- query-tests
- DOM
- HTML
- TargetBlank
- Performance/ReDoS
- lib
- moduleLib
- otherLib
- js/src
- Security
- CWE-022/TaintedPath
- CWE-078
- lib
- CWE-079
- DomBasedXss
- ReflectedXss
- XssThroughDom
- CWE-094/CodeInjection
- CWE-116/IncompleteSanitization
- CWE-117
- CWE-798
- CWE-915/PrototypePollutingAssignment
- Statements/UselessConditional
- upgrades
- fbd45f6b3c6f79d732d0e30a92ea5cee438a1a3e
- java
- change-notes
- documentation/library-coverage
- ql
- examples
- lib
- config
- external
- semmle
- code
- configfiles
- java
- arithmetic
- comparison
- controlflow
- internal
- unreachableblocks
- dataflow
- internal
- rangeanalysis
- tainttracking1
- tainttracking2
- deadcode
- frameworks
- dispatch
- frameworks
- android
- apache
- camel
- gigaspaces
- google
- guava
- gwt
- j2objc
- jackson
- javaee
- ejb
- jsf
- javase
- play
- spring
- metrics
- struts
- metrics
- security
- xml
- files
- src
- DeadCode
- Language Abuse
- Likely Bugs
- Comparison
- Concurrency
- Likely Typos
- Statements
- Performance
- Security/CWE
- CWE-074
- CWE-079
- CWE-089
- CWE-094
- CWE-347
- CWE-502
- CWE-749
- CWE-917
- CWE-918
- Violations of Best Practice/Implementation Hiding
- codeql-suites
- experimental
- Security/CWE
- CWE-016
- CWE-074
- CWE-094
- CWE-1004
- CWE-1204
- CWE-208
- CWE-295
- CWE-347
- CWE-470
- CWE-522
- CWE-555
- CWE-601
- CWE-749
- CWE-917
- semmle/code/java
- frameworks
- spring
- security
- semmle/code/java
- dataflow
- internal
- frameworks
- android
- apache
- spring
- security
- utils
- test
- experimental
- query-tests/security
- CWE-074-JndiInjection
- CWE-094
- CWE-1204
- CWE-208
- NotConstantTimeCheckOnSignature
- TimingAttackAgainstSignagure
- CWE-347
- CWE-352
- CWE-470
- CWE-522
- CWE-601
- CWE-749
- CWE-917
- stubs
- groovy-all-3.0.7/groovy
- lang
- util
- ognl-3.2.14/ognl
- library-tests
- UnsafeDeserialization
- dataflow
- collections
- taint-jackson
- taintsources
- taint
- fields
- fields
- frameworks
- JaxWs
- android/taint-database
- apache-collections
- apache-commons-lang3
- guava
- generated/cache
- jackson
- javax-json
- json-java
- play
- spring
- cache
- http
- ui
- webmultipart
- webutil
- record-classes
- query-tests/security
- CWE-074
- CWE-079/semmle/tests
- CWE-089/semmle/examples
- CWE-094
- CWE-311/CWE-319
- CWE-347
- CWE-502
- com
- example
- thirdparty
- CWE-749
- CWE-917
- stubs
- android
- android
- app
- content
- os
- util
- webkit
- com/android/internal
- apache-commons-collections4-4.4/org
- apache/commons/collections4
- bag
- bidimap
- iterators
- keyvalue
- map
- multimap
- multiset
- trie
- w3c/dom
- apache-commons-lang3-3.7/org/apache/commons/lang3/mutable
- groovy-all-3.0.7
- groovy
- lang
- util
- org/codehaus/groovy
- ast
- control
- io
- tools/javac
- guava-30.0/com/google/common
- base
- cache
- collect
- util/concurrent
- jabsorb-1.3.2/org/jabsorb
- serializer
- jackson-core-2.12/com/fasterxml/jackson/core
- type
- jackson-databind-2.10/com/fasterxml/jackson
- core
- databind
- jackson-databind-2.12
- com/fasterxml/jackson
- annotation
- core
- databind
- cfg
- jsontype
- json
- jakarta-json-2.0.1/jakarta/json
- stream
- javax-json-api-1.1.4/javax/json
- stream
- javax-servlet-2.5/javax/servlet
- annotation
- descriptor
- http
- joddjson-6.0.3/jodd/json
- json-java-20210307/org/json
- jsr311-api-1.1.1/javax/ws/rs/core
- jwtk-jjwt-0.11.2
- io/jsonwebtoken
- impl
- security
- mvel2-2.4.7/org/mvel2/jsr223
- ognl-3.2.14/ognl
- enhance
- shiro-core-1.5.2/org/apache/shiro/jndi
- spring-data-commons-2.5.1/org/springframework/data
- domain
- repository
- util
- spring-ldap-2.3.2/org/springframework/ldap/core
- springframework-5.3.8/org/springframework
- cache
- core
- io
- support
- dao
- http
- server
- jdbc
- core
- namedparam
- object
- support
- rowset
- stereotype
- ui
- util
- web
- bind/annotation
- multipart
- reactive/function/client
- util
- struts2-core-2.5.22/com/opensymphony/xwork2/ognl
- upgrades
- b4e689c90426b017ad550e30a439cab2763ff424
- misc
- legacy-support
- cpp
- csharp
- java
- python
- scripts
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
3,505 files changed
+239068
-162996
lines changedLines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
| 2 | + | |
2 | 3 |
| |
3 | 4 |
| |
4 | 5 |
| |
|
Lines changed: 3 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
48 | 48 |
| |
49 | 49 |
| |
50 | 50 |
| |
| 51 | + | |
| 52 | + | |
| 53 | + |
Lines changed: 6 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + |
Lines changed: 189 additions & 188 deletions
Large diffs are not rendered by default.
Lines changed: 2 additions & 0 deletions
Lines changed: 3 additions & 0 deletions
Lines changed: 2 additions & 0 deletions
Lines changed: 2 additions & 0 deletions
Lines changed: 2 additions & 0 deletions
Lines changed: 2 additions & 0 deletions
0 commit comments