Popular repositories
-
-
vscode-codeql-starter Public
Forked from github/vscode-codeql-starter
Starter workspace to use with the CodeQL extension for Visual Studio Code.
CodeQL 1
-
codeql-coding-standards Public
Forked from github/codeql-coding-standards
This repository contains CodeQL queries and libraries which support various Coding Standards.
CodeQL
602 contributions in the last year
Contribution activity
May 2023
Created 10 commits in 1 repository
Created a pull request in github/codeql that received 19 comments
Dataflow: Strengthen tracked types.
This adds support for type strengthening in the data flow library. Resolves github/codeql-team#1773. Initial tests indicated that strengthening typ…
+1,137
−671
•
19
comments
Opened 4 other pull requests in 1 repository
Reviewed 12 pull requests in 1 repository
github/codeql
12 pull requests
- Java: Add TemplateEngine.createTemplate as a Groovy injection sink
- Enable implicit this warnings for shared packs
-
Java: Add
XPath.evaluateas XXE sink - C++: Speedup product dataflow
- Dataflow: Strengthen tracked types.
- Java: Enable implicit this receiver warnings
- Java: Add pragma[only_bind_out] to Top::toString() calls
- C++: Synchronize product dataflow paths on function entry points
-
Java: Model
io.jsonwebtoken.SigningKeyResolverAdapterandio.jsonwebtoken.JwsHeader - Dataflow: Replace "extends Node" with "instanceof Node".
- Dataflow: Refactor access paths to split TypedContent into an explicit pair
-
Type tracking: Use
noopt+inline_lateinTypeTracker::[small]step