Skip to content
New pull request New
193 Open 6,408 Closed
193 Open 6,408 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
C++: Upgrade cpp/system-data-exposure to high precision
C++ documentation
#8358 opened Mar 7, 2022 by geoffw0 • Review required
1
Java: Add JDBC connection SSRF sinks
Java
#8357 opened Mar 7, 2022 by p0wn4j • Review required
1
Incomplete url string sanitization
documentation JS Ruby
#8354 opened Mar 7, 2022 by aibaars • Draft
16
QL: add query detecting inconsistent deprecations
QL-for-QL
#8351 opened Mar 7, 2022 by erik-krogh • Draft
Ruby: Cache TRegExpParent
Ruby
#8349 opened Mar 7, 2022 by hvitved • Draft
1
C#: ExternalAPI implementation for Telemetry.
C# Java
#8348 opened Mar 7, 2022 by michaelnebel • Draft
1
remove all deprecations that are over a year old
C# C++ documentation Java JS Python
#8347 opened Mar 7, 2022 by erik-krogh • Review required
13
Java: Add MyBatis's AbstractSQL sinks
Java
#8345 opened Mar 6, 2022 by jorgectf • Review required
9
python: minimal CSRF implementation
documentation Python
#8340 opened Mar 4, 2022 by yoff • Draft
Python: Fix a bunch of QL warnings
C# C++ Java no-change-note-required Python Ruby
#8336 opened Mar 4, 2022 by tausbn • Review required
JS: Use TypeTracker::continue when doing taint steps
JS
#8333 opened Mar 4, 2022 by hvitved • Draft
Ruby: Use taint tracking instead of type tracking to define regExpSource
Ruby
#8332 opened Mar 4, 2022 by hvitved • Draft
C#: Capture Summary models.
C# Java no-change-note-required
#8329 opened Mar 4, 2022 by michaelnebel • Changes requested
12
Enforcing consistent casing of acronyms
C# C++ documentation Java JS Python QL-for-QL Ruby
#8323 opened Mar 3, 2022 by erik-krogh • Review required
1
7
C#: Remove legacy odasa support
C# depends on internal PR documentation
#8322 opened Mar 3, 2022 by hvitved • Approved
1
3
C++: Handle initialization of structured bindings via bitwise copy in extractor
C++ depends on internal PR
#8320 opened Mar 3, 2022 by jketema • Review required
C++: New query cpp/potential-system-data-exposure
C++ depends on internal PR documentation
#8318 opened Mar 3, 2022 by geoffw0 • Review required
9
Java: Add query to detect clickjacking
documentation Java
#8308 opened Mar 2, 2022 by ahmed532009 • Review required
2
Start sharing Concepts across dynamic languages
documentation JS Python Ruby
#8307 opened Mar 1, 2022 by hmac • Review required
1 task
10
Ruby: add rb/clear-text-storage-sensitive-data query
documentation Ruby
#8306 opened Mar 1, 2022 by alexrford
JS: Refactor the XSS / Client-side-url queries
JS no-change-note-required
#8304 opened Mar 1, 2022 by erik-krogh • Review required
11
Data flow: Use parameterized module to share code between pruning stages
C# C++ Java Python Ruby
#8301 opened Mar 1, 2022 by hvitved • Draft
Fix MaD workflows to be more resilient to missing files
#8294 opened Feb 28, 2022 by tamasvajk • Review required
JS: configure MaD report generators to include javascript
JS
#8290 opened Feb 28, 2022 by tamasvajk • Draft
Python: Fix syntax error in with test output
depends on internal PR no-change-note-required Python
#8289 opened Feb 28, 2022 by tausbn • Review required
ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.