File tree
1,419 files changed
+125637
-61396
lines changed- actions/ql
- lib
- change-notes/released
- src
- change-notes/released
- codeql-suites
- config
- cpp
- downgrades
- 1a4bbe5ded083b9de87911c155fc99ca22ecb0ce
- 1aa71a4a687fc93f807d4dfeeef70feceeced242
- 7eeff19bf7c89a350d3e43516a33c98a270cb057
- a01d8f91b8d49259e509b574962dec90719f69a6
- dd32242a870867a532bb0b2a88a6a917a5b4c26f
- f786eb3f5dfddb0ac914ab09551bf1c5c64b47c0
- ql
- lib
- change-notes/released
- ext
- semmle/code/cpp
- controlflow
- internal
- dataflow
- internal
- internal
- ir
- dataflow/internal
- implementation
- aliased_ssa/internal
- raw/internal
- rangeanalysis
- new/internal/semantic
- analysis
- stmts
- upgrades
- 1a4bbe5ded083b9de87911c155fc99ca22ecb0ce
- 4813509d85b45ae17421c036905199f7324cf228
- 7eeff19bf7c89a350d3e43516a33c98a270cb057
- a01d8f91b8d49259e509b574962dec90719f69a6
- dd32242a870867a532bb0b2a88a6a917a5b4c26f
- f786eb3f5dfddb0ac914ab09551bf1c5c64b47c0
- src
- Architecture/Refactoring Opportunities
- Best Practices
- Critical
- Likely Bugs
- Arithmetic
- Likely Typos
- Underspecified Functions
- Security/CWE
- CWE-120
- CWE-732
- change-notes/released
- test
- experimental
- library-tests/rangeanalysis/signanalysis
- query-tests/Security/CWE/CWE-409/DecompressionBombs
- library-tests
- consteval_if
- controlflow
- guards-ir
- guards
- dataflow
- dataflow-tests
- external-models
- ir-barrier-guards
- models-as-data
- taint-tests
- functions/functions
- ir/ir
- preprocessor/preprocessor
- proxy_class
- rangeanalysis/SimpleRangeAnalysis
- syntax-zoo
- query-tests
- Likely Bugs/Likely Typos/ExprHasNoEffect/CMakeFiles/CMakeScratch/TryCompile-abcdef
- Security/CWE/CWE-119/semmle/tests
- jsf/4.13 Functions/AV Rule 114
- csharp
- documentation/library-coverage
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- SourceGenerators/DotnetSourceGeneratorWrapper
- Semmle.Extraction.CSharp
- CodeAnalysisExtensions
- Entities
- Expressions
- Types
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- examples/snippets
- integration-tests/all-platforms
- blazor_net_8
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- blazor
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- cshtml_standalone_net6
- cshtml_standalone
- lib
- change-notes/released
- ext
- semmle/code/csharp
- commons
- dataflow
- internal
- dispatch
- exprs
- src
- Bad Practices
- Likely Bugs
- Dynamic
- change-notes/released
- test
- library-tests
- async
- conversion/boxing
- csharp11
- csharp7.2
- dataflow
- global
- implicittostring
- library
- dispatch
- implements
- implicittostring
- iterators
- security/dataflow/flowsources
- typeparameterconstraints
- unification
- query-tests
- Bad Practices/VirtualCallInConstructorOrDestructor
- Nullness
- Useless Code/RedundantToStringCall
- docs/codeql
- codeql-language-guides
- ql-language-reference
- reusables
- go
- documentation/library-coverage
- extractor
- ql
- consistency-queries
- change-notes/released
- lib
- change-notes/released
- ext
- semmle/go/dataflow
- internal
- src
- change-notes/released
- test
- library-tests/semmle/go
- dataflow/flowsources/local/database
- vendor
- github.com
- astaxie/beego/orm
- beego/beego/v2/client/orm
- jmoiron/sqlx
- gorm.io/gorm
- frameworks/BeegoOrm
- query-tests/Security
- CWE-078
- CWE-079
- javascript
- extractor/src/com/semmle
- js/extractor
- ts/extractor
- ql
- examples/queries/dataflow
- BackendIdor
- DecodingAfterSanitization
- EvalTaint
- InformationDisclosure
- StoredXss
- TemplateInjection
- lib
- change-notes/released
- semmle/javascript
- dataflow
- internal
- explore
- filters
- frameworks
- data/internal
- internal
- flow_summaries
- security
- dataflow
- internal
- regexp
- utils/test
- src
- Performance
- Security
- CWE-020
- CWE-022
- CWE-073
- CWE-078
- CWE-079
- CWE-089
- CWE-094
- CWE-116
- CWE-117
- CWE-134
- CWE-200
- CWE-201
- CWE-209
- CWE-312
- CWE-327
- CWE-338
- CWE-346
- CWE-377
- CWE-400
- CWE-502
- CWE-506
- CWE-601
- CWE-611
- CWE-640
- CWE-643
- CWE-730
- CWE-754
- CWE-770
- CWE-776
- CWE-798
- CWE-807
- CWE-829
- CWE-834
- CWE-843
- CWE-912
- CWE-915
- CWE-916
- CWE-918
- change-notes/released
- experimental
- Security
- CWE-094-dataURL
- CWE-099
- CWE-340
- CWE-347
- CWE-522-DecompressionBombs
- CWE-918
- CWE-942
- heuristics/ql/src/Security
- CWE-020
- CWE-078
- CWE-079
- CWE-089
- CWE-094
- CWE-117
- CWE-134
- CWE-346
- CWE-400
- CWE-502
- CWE-611
- CWE-643
- CWE-730
- CWE-770
- CWE-776
- CWE-807
- CWE-915
- poi
- meta
- alerts
- analysis-quality
- test
- experimental
- FormParsers
- PoI
- Security
- CWE-094-dataURL
- CWE-099
- EnvValueAndKeyInjection
- EnvValueInjection
- CWE-347
- localsource
- remotesource
- CWE-918
- CWE-942
- library-tests
- Arrays
- Barriers
- Classes
- CustomLoadStoreSteps
- DataFlow
- FlowLabels
- FlowSummary
- Generators
- InterProceduralFlow
- LabelledBarrierGuards
- Modules
- Promises
- PropWrite
- Routing
- Security/heuristics
- TaintBarriers
- TaintTracking
- TaintedUrlSuffix
- TripleDot
- TypeScript/ImportEquals
- TypeTracking2
- frameworks
- Angular2
- AsyncPackage
- Collections
- ComposedFunctions
- Immutable
- Nest
- Next
- PropertyProjection
- ReactJS
- Redux
- Restify2
- Spife
- Templating
- Vuex
- data
- threat-models/sources
- query-tests
- Security
- CWE-020
- IncompleteHostnameRegExp
- IncompleteUrlSchemeCheck
- IncompleteUrlSubstringSanitization
- UntrustedDataToExternalAPI
- CWE-022
- TaintedPath
- ZipSlip
- CWE-073
- CWE-078
- CommandInjection
- IndirectCommandInjection
- SecondOrderCommandInjection
- ShellCommandInjectionFromEnvironment
- UnsafeShellCommandConstruction
- lib
- CWE-079
- DomBasedXss
- ExceptionXss
- ReflectedXss
- StoredXss
- UnsafeHtmlConstruction
- UnsafeJQueryPlugin
- XssThroughDom
- CWE-089
- local-threat-source
- typed
- untyped
- CWE-094
- CodeInjection
- UnsafeDynamicMethodAccess
- CWE-116/IncompleteSanitization
- CWE-117
- CWE-134
- CWE-200
- CWE-201
- CWE-209
- CWE-312
- CWE-327
- CWE-338
- CWE-346
- CWE-377
- CWE-400
- DeepObjectResourceExhaustion
- ReDoS
- RemovePropertyInjection
- CWE-502
- CWE-506
- CWE-522-DecompressionBombs
- CWE-601
- ClientSideUrlRedirect
- ServerSideUrlRedirect
- CWE-611
- CWE-640
- CWE-643
- CWE-730
- CWE-754
- CWE-770/ResourceExhaustion
- CWE-776
- CWE-798
- CWE-807
- CWE-829
- CWE-834
- CWE-843
- CWE-912
- CWE-915
- PrototypePollutingAssignment
- PrototypePollutingFunction
- PrototypePollutingMergeCall
- CWE-916
- CWE-918
- filters/ClassifyFiles
- tutorials
- Analyzing data flow in JavaScript/Global data flow
- Introducing the JavaScript libraries
- java
- kotlin-extractor/src/main/java/com/semmle/util
- process
- trap/pathtransformers
- ql
- integration-tests/java
- android-8-sample
- android-sample-kotlin-build-script-no-wrapper
- android-sample-kotlin-build-script
- android-sample-no-wrapper
- android-sample-old-style-kotlin-build-script-no-wrapper
- android-sample-old-style-kotlin-build-script
- android-sample-old-style-no-wrapper
- android-sample-old-style
- android-sample
- buildless-erroneous
- buildless-gradle-classifiers
- buildless-gradle-timeout
- buildless-gradle
- buildless-maven-executable-war
- buildless-maven-existing-settings-xml
- buildless-maven-multimodule
- buildless-maven-timeout
- buildless-maven
- buildless-proxy-gradle
- buildless-proxy-maven
- buildless-sibling-projects
- buildless
- ecj-sample-noexit
- ecj-sample
- gradle-sample-kotlin-script
- gradle-sample
- javac-tool-custom-file
- maven-enforcer
- maven-sample-extract-properties
- maven-sample-large-xml-files
- maven-sample-small-xml-files
- maven-sample-xml-mode-all
- maven-sample-xml-mode-byname
- maven-sample-xml-mode-disabled
- maven-sample-xml-mode-smart
- maven-sample
- maven-wrapper-script-only
- maven-wrapper-source-only
- maven-wrapper
- multi-release-jar-java11
- multi-release-jar-java17
- partial-gradle-sample-without-gradle
- partial-gradle-sample
- spring-boot-sample
- lib
- change-notes/released
- semmle/code/java
- dataflow
- internal
- dispatch
- security
- src
- Likely Bugs/Serialization
- Security/CWE/CWE-327
- change-notes/released
- test
- library-tests/Encryption
- query-tests
- MissingVoidConstructorsOnSerializable
- security/CWE-327/semmle/tests
- misc
- bazel/3rdparty/tree_sitter_extractors_deps
- scripts
- suite-helpers
- change-notes/released
- powershell/ql/lib/semmle/code/powershell
- dataflow/internal
- typetracking
- internal
- python/ql
- lib
- change-notes/released
- semmle/python
- dataflow/new
- internal
- frameworks
- security/internal
- src
- change-notes/released
- test
- library-tests/frameworks/lxml
- query-tests
- Functions/return_values
- Statements/unreachable
- ruby
- extractor
- ql
- consistency-queries
- lib
- change-notes/released
- codeql/ruby
- dataflow/internal
- experimental
- frameworks
- http_clients
- stdlib
- security
- internal
- regexp
- typetracking
- internal
- src
- change-notes/released
- experimental
- CWE-522-DecompressionBombs
- decompression-api
- manually-check-http-verb
- weak-params
- queries
- meta
- security
- cwe-611
- cwe-732
- cwe-798
- test
- library-tests
- dataflow
- array-flow
- call-sensitivity
- erb
- flow-summaries
- global
- hash-flow
- params
- ssa-flow
- summaries
- type-flow
- frameworks
- action_controller
- active_support
- pathname
- sinatra
- query-tests
- experimental/TemplateInjection
- security
- cwe-022
- cwe-078/UnsafeShellCommandConstruction
- cwe-079
- cwe-089
- cwe-094
- CodeInjection
- UnsafeCodeConstruction
- cwe-117
- cwe-312
- cwe-506
- cwe-732
- cwe-798
- cwe-829
- rust
- ast-generator
- patches
- src
- templates
- extractor
- macros
- src
- generated
- translate
- ql
- integration-tests
- hello-project
- hello-workspace
- options
- cfg
- features
- target
- lib
- change-notes/released
- codeql/rust
- controlflow
- dataflow
- internal
- elements/internal
- generated
- frameworks/rustcrypto
- security
- internal
- utils/test
- src
- change-notes/released
- queries
- security/CWE-328
- summary
- test
- extractor-tests
- File
- nested
- generated
- FormatArgsExpr
- library-tests
- dataflow
- models
- strings
- taint
- sensitivedata
- variables
- query-tests
- diagnostics
- security/CWE-328
- unusedentities
- schema
- swift
- extractor
- ql
- lib
- change-notes/released
- codeql/swift
- dataflow/internal
- security
- internal
- src
- change-notes/released
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,419 files changed
+125637
-61396
lines changedLines changed: 0 additions & 4 deletions
This file was deleted.
0 commit comments