File tree
1,448 files changed
+11881
-25615
lines changed- .github/workflows
- config
- cpp/ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow
- dataflow
- internal
- tainttracking1
- tainttracking2
- new
- ir
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- implementation
- raw/internal
- models
- implementations
- interfaces
- src
- Best Practices
- Security/CWE
- CWE-078
- CWE-570
- change-notes
- released
- test
- experimental/library-tests/rangeanalysis/rangeanalysis
- library-tests
- controlflow
- guards-ir
- guards
- dataflow
- asExpr
- dataflow-tests
- external-models
- fields
- models-as-data
- parameters-without-defs
- smart-pointers-taint
- source-sink-tests
- taint-tests
- ir
- modulus-analysis
- range-analysis
- sign-analysis
- types
- query-tests
- Critical/MissingCheckScanf
- Security/CWE/CWE-193
- csharp
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp
- CodeAnalysisExtensions
- Entities
- Types
- Extractor
- Semmle.Util/Logging
- Testrunner
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- lib
- change-notes
- released
- experimental/code/csharp/Cryptography
- semmle/code/csharp
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- tainttracking5
- frameworks
- system
- security
- dataflow
- xml
- src
- Likely Bugs
- change-notes/released
- experimental/dataflow/flowsources
- test
- library-tests
- assemblies
- conversion
- operator
- reftype
- csharp9
- dataflow
- collections
- fields
- global
- frameworks/format
- generics
- tuples
- utils/modeleditor
- go
- actions/test
- extractor
- ql
- consistency-queries
- change-notes/released
- lib
- change-notes
- released
- semmle/go
- dataflow
- internal
- tainttracking1
- tainttracking2
- security
- src
- Security/CWE-640
- change-notes/released
- experimental
- CWE-090
- CWE-1004
- CWE-327
- CWE-74
- CWE-807
- CWE-918
- test
- experimental
- CWE-522-DecompressionBombs
- frameworks
- CleverGo
- Fiber
- library-tests/semmle/go
- Function
- Types
- pkg1
- pkg2
- concepts
- HTTP
- LoggerCall
- dataflow
- ExternalFlowInheritance
- vendor/github.com/nonexistent/test
- PromotedMethods
- flowsources/local
- environment
- file
- stdin
- frameworks
- Afero
- BeegoOrm
- CouchbaseV1
- ElazarlGoproxy
- Fasthttp
- Fiber
- GoKit
- GoMicro
- Iris
- K8sIoClientGo
- Macaron
- NoSQL
- Revel
- SQL
- Gorm
- Sqlx
- bun
- gogf
- gorqlite
- StdlibTaintFlow
- Yaml
- gqlgen
- query-tests/Security/CWE-681
- javascript/ql
- lib
- change-notes
- released
- semmle/javascript
- dataflow
- security
- dataflow
- src
- Security
- CWE-116
- CWE-178
- change-notes/released
- test
- library-tests
- EndpointNaming
- threat-models/sources
- query-tests/Security
- CWE-022/TaintedPath
- CWE-078/UnsafeShellCommandConstruction
- lib
- CWE-079/DomBasedXss
- CWE-116
- DoubleEscaping
- IncompleteSanitization
- CWE-178
- CWE-312
- CWE-400/ReDoS
- CWE-730
- CWE-915/PrototypePollutingAssignment
- java/ql
- automodel/src
- change-notes/released
- integration-tests/kotlin/all-platforms/default-parameter-mad-flow
- lib
- change-notes
- released
- semmle/code/java
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- frameworks
- security
- src
- change-notes
- released
- experimental
- Security/CWE
- CWE-208
- CWE-625
- semmle/code/java/security
- test
- library-tests
- dataflow
- callback-dispatch
- capture
- entrypoint-types
- flowfeature
- state
- taintsources
- frameworks
- JaxWs
- android
- intent
- notification
- taint-database
- guava/handwritten
- jms
- rabbitmq
- neutrals/neutralsinks
- xml
- query-tests/security
- CWE-023/semmle/tests
- CWE-074
- CWE-079/semmle/tests
- CWE-089/semmle/examples
- CWE-094
- CWE-1204
- CWE-200/semmle/tests
- SensitiveNotification
- SensitiveTextView
- CWE-273
- CWE-287
- InsecureKeys
- Test1
- Test2
- InsecureLocalAuth
- CWE-295
- AndroidMissingCertificatePinning
- Test1
- Test2
- Test3
- Test4
- Test5
- ImproperWebVeiwCertificateValidation
- InsecureTrustManager
- CWE-297
- CWE-312/android/CleartextStorage
- CWE-326
- CWE-330
- CWE-347
- CWE-352
- CWE-470
- CWE-489/debuggable-attribute
- CWE-502
- CWE-522
- CWE-524
- CWE-643
- CWE-730
- CWE-749
- CWE-798/semmle/tests
- CWE-807/semmle/tests
- CWE-917
- CWE-918
- CWE-925
- CWE-926
- incomplete_provider_permissions
- CWE-927
- misc
- bazel
- 3rdparty/tree_sitter_extractors_deps
- codegen
- generators
- lib
- loaders
- templates
- test
- suite-helpers
- change-notes/released
- python
- extractor
- ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- security/dataflow
- src
- Security/CWE-020-ExternalAPIs
- change-notes/released
- semmle/python/functions
- test
- TestUtilities/dataflow
- experimental
- import-resolution
- library-tests
- CallGraph-implicit-init
- CallGraph-imports
- CallGraph
- meta/inline-taint-test-demo
- query-tests/Security
- CWE-022-UnsafeUnpacking
- CWE-074-RemoteCommandExecution
- CWE-409
- library-tests
- ApiGraphs
- py2
- py3
- InlineExpectationsTest/missing-relevant-tag
- dataflow
- basic
- calls
- coverage-py2
- coverage-py3
- coverage
- exceptions
- fieldflow
- global-flow
- global-or-captured-vars
- match
- model-summaries
- module-initialization
- path-graph
- sensitive-data
- summaries
- tainttracking
- commonSanitizer
- customSanitizer
- defaultAdditionalTaintStep-py3
- defaultAdditionalTaintStep
- generator-flow
- isinstance
- unwanted-global-flow
- typetracking-summaries
- typetracking_imports
- typetracking
- variable-capture
- essa/ssa-compute
- frameworks
- aioch
- aiofiles
- aiofile
- aiohttp
- aiomysql
- aiopg
- aiosqlite
- anyio
- asyncpg
- baize
- bottle
- cassandra-driver
- cherrypy
- clickhouse_driver
- cryptodome
- cryptography
- crypto
- cx_Oracle
- dill
- django-orm
- django-v1
- django-v2-v3
- django
- fabric
- fastapi
- flask_admin
- flask_sqlalchemy
- flask
- gradio
- httpx
- idna
- internal-ql-helpers
- invoke
- jmespath
- joblib
- jsonpickle
- libtaxii
- lxml
- markupsafe
- multidict
- mysql-connector-python
- mysqldb
- numpy
- oracledb
- pandas
- paramiko
- peewee
- pexpect
- phoenixdb
- psycopg
- pycurl
- pymssql
- pymysql
- pyodbc
- pyramid
- requests
- rest_framework
- rsa
- ruamel.yaml
- sanic
- serverless
- simplejson
- sqlalchemy
- starlette
- stdlib-py2
- stdlib-py3
- stdlib
- streamlit
- toml
- torch
- tornado
- twisted
- ujson
- urllib3
- urllib
- xmltodict
- yaml
- yarl
- regexparser
- regex
- query-tests
- Functions/ModificationOfParameterWithDefault
- Security
- CWE-022-PathInjection
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- CWE-209-StackTraceExposure
- CWE-943-NoSqlInjection
- ruby/ql
- lib
- change-notes/released
- codeql/ruby
- dataflow/internal
- tainttracking1
- experimental
- security
- regexp
- src
- change-notes/released
- test
- library-tests
- concepts
- dataflow
- api-graphs
- array-flow
- barrier-guards
- global
- hash-flow
- query-tests
- experimental/improper-memoization
- security
- cwe-116/IncompleteMultiCharacterSanitization
- cwe-300
- cwe-829
- rust
- ast-generator/src
- extractor
- src
- generated
- translate
- ql
- integration-tests
- hello-project
- hello-workspace
- lib
- codeql
- files
- rust
- controlflow/internal
- generated
- dataflow
- internal
- elements
- internal
- generated
- frameworks
- stdlib
- src/queries
- diagnostics
- security/CWE-696
- summary
- test
- extractor-tests
- File
- canonical_path
- generated
- ArrayExpr
- ArrayListExpr
- ArrayRepeatExpr
- ArrayTypeRepr
- ArrayType
- AssocTypeArg
- BoxPat
- CastExpr
- ClosureExpr
- ConstParam
- Const
- DynTraitTypeRepr
- DynTraitType
- FnPtrTypeRepr
- FnPtrType
- ForTypeRepr
- ForType
- Function
- IdentPat
- ImplTraitTypeRepr
- ImplTraitType
- InferTypeRepr
- InferType
- LetExpr
- LetStmt
- MacroItems/CONSISTENCY
- MacroTypeRepr
- MacroType
- MatchArm
- NeverTypeRepr
- NeverType
- OffsetOfExpr
- OrPat
- Param
- ParenTypeRepr
- ParenType
- Path
- PtrTypeRepr
- PtrType
- RecordExpr
- RecordField
- RecordPat
- RefPat
- RefTypeRepr
- RefType
- RetTypeRepr
- RetType
- SelfParam
- SliceTypeRepr
- SliceType
- Static
- TupleField
- TupleStructPat
- TupleTypeRepr
- TupleType
- TypeAlias
- TypeArg
- TypeBound
- WherePred
- library-tests
- controlflow-unstable
- controlflow
- dataflow
- local
- models
- sources
- taint
- variables
- query-tests
- diagnostics
- security
- CWE-089
- CWE-696
- schema
- swift/ql
- lib
- change-notes/released
- codeql/swift/dataflow
- internal
- tainttracking1
- src
- change-notes/released
- test
- library-tests
- dataflow
- capture
- dataflow
- flowsources
- taint
- core
- libraries
- regex
- query-tests/Security
- CWE-022/PathInjection
- CWE-312
- CWE-611
- CWE-946
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,448 files changed
+11881
-25615
lines changedLines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
5 | 5 |
| |
6 | 6 |
| |
7 | 7 |
| |
| 8 | + | |
8 | 9 |
| |
9 | 10 |
| |
| 11 | + | |
10 | 12 |
| |
11 | 13 |
| |
12 | 14 |
| |
13 | 15 |
| |
14 | 16 |
| |
15 | 17 |
| |
16 | 18 |
| |
| 19 | + | |
17 | 20 |
| |
18 | 21 |
| |
19 | 22 |
| |
| 23 | + | |
20 | 24 |
| |
21 | 25 |
| |
22 | 26 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
72 | 72 |
| |
73 | 73 |
| |
74 | 74 |
| |
75 |
| - | |
| 75 | + | |
76 | 76 |
| |
77 | 77 |
| |
78 | 78 |
| |
|
Lines changed: 4 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
68 | 68 |
| |
69 | 69 |
| |
70 | 70 |
| |
71 |
| - | |
| 71 | + | |
72 | 72 |
| |
73 | 73 |
| |
74 | 74 |
| |
|
Lines changed: 0 additions & 54 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
3 |
| - | |
4 |
| - | |
5 |
| - | |
6 |
| - | |
7 |
| - | |
8 |
| - | |
9 |
| - | |
10 |
| - | |
11 |
| - | |
12 |
| - | |
13 |
| - | |
14 |
| - | |
15 |
| - | |
16 |
| - | |
17 |
| - | |
18 |
| - | |
19 |
| - | |
20 |
| - | |
21 |
| - | |
22 |
| - | |
23 |
| - | |
24 |
| - | |
25 |
| - | |
26 |
| - | |
27 |
| - | |
28 |
| - | |
29 |
| - | |
30 |
| - | |
31 |
| - | |
32 |
| - | |
33 |
| - | |
34 |
| - | |
35 |
| - | |
36 |
| - | |
37 |
| - | |
38 |
| - | |
39 |
| - | |
40 |
| - | |
41 |
| - | |
42 |
| - | |
43 |
| - | |
44 |
| - | |
45 |
| - | |
46 |
| - | |
47 |
| - | |
48 |
| - | |
49 |
| - | |
50 |
| - | |
51 |
| - | |
52 |
| - | |
53 |
| - | |
54 |
| - | |
55 |
| - | |
56 | 2 |
| |
57 | 3 |
| |
58 | 4 |
| |
|
Lines changed: 14 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
1 | 15 |
| |
2 | 16 |
| |
3 | 17 |
| |
|
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 3 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + |
Lines changed: 9 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + |
0 commit comments