File tree
2,619 files changed
+75767
-45387
lines changed- .github/workflows
- config
- cpp/ql
- lib
- change-notes/released
- semmle/code/cpp
- dataflow/internal
- ir/dataflow/internal
- models/interfaces
- security
- InvalidPointerDereference
- flowafterfree
- src
- Best Practices/Unused Entities
- Likely Bugs/Memory Management
- Security/CWE/CWE-704
- change-notes
- released
- experimental/Security/CWE/CWE-295
- jsf/4.13 Functions
- test
- experimental/query-tests/Security/CWE/CWE-295
- library-tests
- dataflow/external-models
- files
- macros/inmacroexpansion
- query-tests
- Diagnostics
- Documentation/DocumentApi
- Likely Bugs/Format/WrongNumberOfFormatArguments
- Metrics/Dependencies
- Security/CWE
- CWE-457/semmle/tests
- CWE-704
- csharp
- extractor/Semmle.Extraction.CSharp/Entities
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- consistency-queries
- lib
- change-notes
- released
- semmle/code/csharp
- controlflow/internal
- dataflow/internal
- security
- auth
- dataflow
- flowsinks
- flowsources
- src
- Security Features
- CWE-091
- CWE-114
- CWE-134
- change-notes/released
- experimental
- CWE-099
- CWE-918
- utils/modelgenerator
- internal
- test
- library-tests
- controlflow/graph
- dataflow
- external-models
- flowsources
- local
- commandargs
- registry
- stored
- database/dapper
- file
- library
- threat-models
- query-tests/Security Features
- CWE-020
- CWE-079
- StoredXSS
- XSSAsp
- CWE-089
- CWE-201/ExposureInTransmittedData
- CWE-321/HardcodedSymmetricEncryptionKey
- CWE-838
- utils/modelgenerator/dataflow
- docs/codeql
- _templates
- codeql-language-guides
- codeql-overview/codeql-changelog
- reusables
- go
- extractor
- cli/go-extractor
- configurebaseline
- toolchain
- util
- ql
- consistency-queries
- change-notes/released
- integration-tests
- extract-vendor
- go-mod-sample/src
- test-extraction
- src
- pkg1
- pkg2
- traced-extraction
- src
- lib
- change-notes/released
- semmle/go
- dataflow/internal
- security
- src
- Security
- CWE-640
- CWE-681
- change-notes/released
- experimental
- CWE-090
- CWE-203
- CWE-287
- CWE-369
- CWE-74
- CWE-79
- CWE-807
- CWE-840
- CWE-918
- CWE-942
- frameworks
- test
- experimental
- CWE-090
- CWE-1004
- library-tests/semmle/go
- PrintAst
- dataflow
- ExternalFlowInheritance
- vendor
- github.com/nonexistent/test
- ThreatModels
- flowsources/local
- environment
- file
- frameworks
- Beego
- Echo
- Encoding
- Gin
- Gorestful
- XNetHtml
- query-tests
- Diagnostics
- Security
- CWE-020/IncompleteHostnameRegexp
- CWE-022
- CWE-078
- CWE-347
- CWE-601
- BadRedirectCheck
- OpenUrlRedirect
- CWE-643
- javascript/ql
- lib
- change-notes/released
- src
- change-notes/released
- test
- library-tests
- Files
- Modules
- NodeJS
- TypeScript
- EmbeddedInScript
- HasQualifiedNameFallback
- PathMapping
- QualifiedNameResolution
- RegressionTests
- EmptyName
- ExportEqualsExpr
- SemicolonInName
- SyntaxErrors
- Types
- query-tests
- Metrics/ExternalDependencies
- NodeJS/CyclicImport
- Security
- CWE-079/DomBasedXss
- CWE-200
- tutorials/Introducing the JavaScript libraries
- java
- documentation/library-coverage
- downgrades/876cabc76c5c83912271db331481f8cba2749643
- kotlin-extractor
- deps
- src/main/kotlin
- utils
- versions
- v_1_5_0
- v_1_6_20
- v_2_1_0-Beta1
- ql
- automodel/src
- change-notes/released
- integration-tests/kotlin/all-platforms/diagnostics/kotlin-version-too-new
- lib
- change-notes
- released
- config
- ext
- semmle/code
- java
- dataflow
- internal
- frameworks/android
- security
- regexp
- upgrades/376ce7dad79375c0772b8edb938da82ca5271ba1
- src
- Advisory/Declarations
- Metrics/Summaries
- Violations of Best Practice
- Dead Code
- Naming Conventions
- change-notes/released
- experimental/Security/CWE
- CWE-020
- CWE-036
- CWE-073
- CWE-078
- CWE-089
- CWE-094
- CWE-200
- CWE-208
- CWE-346
- CWE-352
- CWE-400
- CWE-470
- CWE-600
- CWE-601
- CWE-652
- CWE-755
- utils
- modeleditor
- modelgenerator
- internal
- test-kotlin1/library-tests
- classes
- methods
- test-kotlin2/library-tests
- classes
- methods
- test
- experimental/query-tests/security
- CWE-020
- CWE-073
- CWE-078
- CWE-1004
- CWE-200
- CWE-346
- CWE-352
- CWE-400
- ext/TopJdkApis
- library-tests
- MemberRefExpr
- dataflow
- collections
- entrypoint-types
- external-models
- stubs
- threat-models
- frameworks
- JaxWs
- android
- content-provider
- external-storage
- slice
- sources
- apache-commons-lang3
- apache-http
- guice
- jms
- netty/manual
- rabbitmq
- ratpack
- spring
- controller
- webmultipart
- query-tests/security
- CWE-022/semmle/tests
- CWE-078
- CWE-089/semmle/examples
- CWE-090
- CWE-094
- CWE-113/semmle/tests
- CWE-134/semmle/tests
- CWE-200/semmle/tests/TempDirLocalInformationDisclosure
- CWE-297
- CWE-311/CWE-319
- CWE-601/semmle/tests
- utils/modelgenerator/dataflow
- p
- misc
- codegen
- generators
- lib
- loaders
- templates
- test
- scripts/models-as-data
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- ext
- semmle/python
- dataflow/new
- internal
- frameworks
- data
- security/dataflow
- src
- change-notes/released
- experimental
- Security
- CWE-074
- CWE-091
- CWE-094
- CWE-942
- semmle/python/security
- dataflow
- injection
- semmle/python/functions
- test
- experimental
- library-tests/CallGraph
- meta
- query-tests/Security
- CWE-022-TarSlip
- CWE-022-UnsafeUnpacking
- CWE-409
- library-tests
- dataflow
- coverage
- enclosing-callable
- regression
- tainttracking
- commonSanitizer
- defaultAdditionalTaintStep
- frameworks
- django-v2-v3
- testproj
- fastapi
- psycopg
- rest_framework
- starlette
- stdlib-py3
- stdlib
- urllib
- threat-models/default
- query-tests/Security
- CWE-022-TarSlip
- CWE-089-SqlInjection-local-threat-model
- CWE-942-CorsMisconfigurationMiddleware
- ql
- ruby
- ql
- consistency-queries
- lib
- change-notes/released
- codeql/ruby
- dataflow/internal
- src
- change-notes/released
- test
- library-tests
- controlflow/graph
- dataflow
- flow-summaries
- summaries
- frameworks
- action_controller
- sinatra
- query-tests
- experimental/LdapInjection
- security
- cwe-078/CommandInjection
- cwe-079
- cwe-089
- cwe-094/CodeInjection
- cwe-117
- cwe-1333-regexp-injection
- cwe-134
- rust
- extractor
- src
- generated
- translate
- generate-schema
- src
- codegen
- grammar
- integration-tests
- hello-project
- manifests
- src
- directory_module
- hello-workspace
- exe
- src
- lib
- src
- a_module
- manifests
- ql
- consistency-queries
- lib
- codeql
- files
- rust
- controlflow
- internal
- elements
- internal
- generated
- src/queries
- diagnostics
- summary
- unusedentities
- test
- extractor-tests
- generated
- Abi
- ArgList
- ArrayExpr
- ArrayType
- AsmExpr
- AssocItemList
- AssocTypeArg
- AsyncBlockExpr
- Attr
- AwaitExpr
- BecomeExpr
- BinaryExpr
- BlockExpr
- BoxExpr
- BoxPat
- BreakExpr
- CallExpr
- CastExpr
- ClosureBinder
- ClosureExpr
- Comment
- ConstArg
- ConstBlockPat
- ConstExpr
- ConstParam
- Const
- ContinueExpr
- DynTraitType
- ElementListExpr
- Enum
- ExprStmt
- ExternBlock
- ExternCrate
- ExternItemList
- FieldExpr
- FnPtrType
- ForExpr
- ForType
- FormatArgsArg
- FormatArgsExpr
- Function
- GenericArgList
- GenericParamList
- IdentPat
- IfExpr
- ImplTraitType
- Impl
- IndexExpr
- InferType
- ItemList
- Label
- LetElse
- LetExpr
- LetStmt
- LifetimeArg
- LifetimeParam
- Lifetime
- LiteralExpr
- LiteralPat
- LoopExpr
- MacroCall
- MacroDef
- MacroExpr
- MacroPat
- MacroRules
- MacroType
- MatchArmList
- MatchArm
- MatchExpr
- MatchGuard
- Meta
- MethodCallExpr
- MissingExpr
- MissingPat
- Module
- NameRef
- Name
- NeverType
- OffsetOfExpr
- OrPat
- ParamList
- Param
- ParenExpr
- ParenPat
- ParenType
- PathExpr
- PathPat
- PathSegment
- PathType
- Path
- PrefixExpr
- PtrType
- RangeExpr
- RangePat
- RecordExprFieldList
- RecordExprField
- RecordExpr
- RecordFieldList
- RecordField
- RecordPatFieldList
- RecordPatField
- RecordPat
- RefExpr
- RefPat
- RefType
- Rename
- RepeatExpr
- RestPat
- RetType
- ReturnExpr
- ReturnTypeSyntax
- SelfParam
- SlicePat
- SliceType
- SourceFile
- Static
- StmtList
- Struct
- TokenTree
- TraitAlias
- Trait
- TryExpr
- TupleExpr
- TupleFieldList
- TupleField
- TuplePat
- TupleStructPat
- TupleType
- TypeAlias
- TypeArg
- TypeBoundList
- TypeBound
- TypeParam
- TypeRef
- UnderscoreExpr
- Union
- UnsafeBlockExpr
- UseTreeList
- UseTree
- Use
- VariantList
- Variant
- Visibility
- WhereClause
- WherePred
- WhileExpr
- YeetExpr
- YieldExpr
- utf8
- CONSISTENCY
- library-tests
- controlflow
- variables
- query-tests
- diagnostics
- CONSISTENCY
- unusedentities
- utils
- internal
- schema
- swift/ql
- lib
- change-notes
- released
- codeql/swift
- dataflow/internal
- generated
- src
- change-notes/released
- test
- library-tests
- controlflow/graph
- dataflow/taint/core
- query-tests
- Diagnostics
- Security
- CWE-078
- CWE-311
- CWE-321
- CWE-757
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
2,619 files changed
+75767
-45387
lines changedLines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
3 | 3 |
| |
4 | 4 |
| |
5 | 5 |
| |
| 6 | + | |
6 | 7 |
| |
7 | 8 |
| |
8 | 9 |
| |
| |||
12 | 13 |
| |
13 | 14 |
| |
14 | 15 |
| |
| 16 | + | |
15 | 17 |
| |
16 | 18 |
| |
17 | 19 |
| |
|
Lines changed: 48 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
7 | 7 |
| |
8 | 8 |
| |
9 | 9 |
| |
| 10 | + | |
10 | 11 |
| |
11 | 12 |
| |
12 | 13 |
| |
|
Lines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
61 | 61 |
| |
62 | 62 |
| |
63 | 63 |
| |
| 64 | + | |
64 | 65 |
| |
65 | 66 |
| |
66 | 67 |
| |
| |||
127 | 128 |
| |
128 | 129 |
| |
129 | 130 |
| |
| 131 | + | |
130 | 132 |
| |
131 | 133 |
| |
132 | 134 |
| |
| |||
140 | 142 |
| |
141 | 143 |
| |
142 | 144 |
| |
| 145 | + | |
143 | 146 |
| |
144 | 147 |
| |
145 | 148 |
| |
| |||
153 | 156 |
| |
154 | 157 |
| |
155 | 158 |
| |
| 159 | + | |
156 | 160 |
| |
157 | 161 |
| |
158 | 162 |
| |
|
Lines changed: 4 additions & 4 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
57 | 57 |
| |
58 | 58 |
| |
59 | 59 |
| |
60 |
| - | |
61 |
| - | |
62 |
| - | |
63 |
| - | |
64 | 60 |
| |
65 | 61 |
| |
66 | 62 |
| |
| |||
355 | 351 |
| |
356 | 352 |
| |
357 | 353 |
| |
| 354 | + | |
| 355 | + | |
| 356 | + | |
| 357 | + | |
358 | 358 |
| |
359 | 359 |
|
Lines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
1 | 5 |
| |
2 | 6 |
| |
3 | 7 |
| |
|
Lines changed: 3 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + | |
3 | 3 |
| |
4 | 4 |
| |
5 | 5 |
| |
|
Lines changed: 13 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
500 | 500 |
| |
501 | 501 |
| |
502 | 502 |
| |
| 503 | + | |
| 504 | + | |
| 505 | + | |
| 506 | + | |
| 507 | + | |
| 508 | + | |
| 509 | + | |
| 510 | + | |
| 511 | + | |
| 512 | + | |
| 513 | + | |
503 | 514 |
| |
504 | 515 |
| |
505 | 516 |
| |
| |||
651 | 662 |
| |
652 | 663 |
| |
653 | 664 |
| |
654 |
| - | |
| 665 | + | |
| 666 | + | |
655 | 667 |
| |
656 | 668 |
| |
657 | 669 |
| |
|
0 commit comments