Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
attackgithub
/
ql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
ql
python
on
master
User selector
All users
All time
Commit history
Commits on May 29, 2019
Improve query help
alexey
committed
9377638
View commit details
Copy full SHA for 9377638
View code at this point
Browse repository at this point
Rename files by style guide and change query metadata
alexey
committed
86ec047
View commit details
Copy full SHA for 86ec047
View code at this point
Browse repository at this point
Edit query metadata and help and add new entry to the change-notes 1.21
alexey
committed
96380f6
View commit details
Copy full SHA for 96380f6
View code at this point
Browse repository at this point
Commits on May 23, 2019
Fix typo in test for the query
alexey
committed
8168c0e
View commit details
Copy full SHA for 8168c0e
View code at this point
Browse repository at this point
Commits on May 22, 2019
add return-or-yield-outside-of-function Python query
alexey
committed
e214174
View commit details
Copy full SHA for e214174
View code at this point
Browse repository at this point
Commits on May 16, 2019
Merge pull request #1296 from RasmusSemmle/master
Show description for d1a711e
Mark Shannon
authored
d1a711e
View commit details
Copy full SHA for d1a711e
View code at this point
Browse repository at this point
Commits on May 15, 2019
Merge pull request #1323 from markshannon/hotfix-path-fix
Show description for 1076c03
taus-semmle
authored
1076c03
View commit details
Copy full SHA for 1076c03
View code at this point
Browse repository at this point
Python QL: Use Module.getPath() to implement ModuleObject.getPath()
markshannon
committed
0035dc2
View commit details
Copy full SHA for 0035dc2
View code at this point
Browse repository at this point
Commits on May 1, 2019
Add pythagorean query
RasmusSemmle
committed
b5b2d56
View commit details
Copy full SHA for b5b2d56
View code at this point
Browse repository at this point
Commits on Apr 26, 2019
Merge pull request #1271 from markshannon/python-fix-fp-http-prefix
Show description for 7d2c17f
taus-semmle
authored
7d2c17f
View commit details
Copy full SHA for 7d2c17f
View code at this point
Browse repository at this point
Commits on Apr 25, 2019
Python: Fix false positive in 'Incomplete URL substring sanitization' query.
markshannon
committed
2879944
View commit details
Copy full SHA for 2879944
View code at this point
Browse repository at this point
Python: Add missing `override` annotations.
taus-semmle
committed
c8cbae3
View commit details
Copy full SHA for c8cbae3
View code at this point
Browse repository at this point
Commits on Apr 23, 2019
Add test confirming correct handling of zope.interface.Interface in query.
markshannon
committed
6a9bb5c
View commit details
Copy full SHA for 6a9bb5c
View code at this point
Browse repository at this point
Commits on Apr 16, 2019
Mergeback: rc/1.20 into Semmle/master
Esben Sparre Andreasen
committed
c80ee3d
View commit details
Copy full SHA for c80ee3d
View code at this point
Browse repository at this point
Commits on Apr 12, 2019
Python: Fix semantic merge conflict between #1206 and #1240.
markshannon
committed
d6ba729
View commit details
Copy full SHA for d6ba729
View code at this point
Browse repository at this point
Merge pull request #1240 from markshannon/python-avoid-ssa-defns-in-tests
Show description for 707b73c
taus-semmle
authored
707b73c
View commit details
Copy full SHA for 707b73c
View code at this point
Browse repository at this point
Merge pull request #1206 from markshannon/python-taint-flow-classless
Show description for 607b5fb
taus-semmle
authored
607b5fb
View commit details
Copy full SHA for 607b5fb
View code at this point
Browse repository at this point
Commits on Apr 11, 2019
Python: Remove callsite refinement ESSA definition when call in a test defining a pi-node.
markshannon
committed
ca6e03f
View commit details
Copy full SHA for ca6e03f
View code at this point
Browse repository at this point
Commits on Apr 9, 2019
Merge pull request #1222 from taus-semmle/python-unify-old-and-new-query-suites
Show description for 97a9954
markshannon
authored
97a9954
View commit details
Copy full SHA for 97a9954
View code at this point
Browse repository at this point
Merge pull request #1203 from markshannon/python-taint-tracking-configuration-2
Show description for adf8cdc
taus-semmle
authored
adf8cdc
View commit details
Copy full SHA for adf8cdc
View code at this point
Browse repository at this point
Commits on Apr 8, 2019
Delete unnecessary files.
taus-semmle
committed
98e9edc
View commit details
Copy full SHA for 98e9edc
View code at this point
Browse repository at this point
Add note about backwards compatibility.
taus-semmle
committed
e227078
View commit details
Copy full SHA for e227078
View code at this point
Browse repository at this point
Fix typo.
markshannon
committed
52b3f77
View commit details
Copy full SHA for 52b3f77
View code at this point
Browse repository at this point
Python: Make old query suites point to new.
taus-semmle
committed
2e62912
View commit details
Copy full SHA for 2e62912
View code at this point
Browse repository at this point
Commits on Apr 5, 2019
Python: Fix up dataflow configuration to act as expected. Keep undocumented for now.
markshannon
committed
df2000e
View commit details
Copy full SHA for df2000e
View code at this point
Browse repository at this point
Commits on Apr 4, 2019
Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation
Show description for 2ba1223
markshannon
authored
2ba1223
View commit details
Copy full SHA for 2ba1223
View code at this point
Browse repository at this point
Fix CWE tag for Code injection query.
markshannon
committed
c2e814a
View commit details
Copy full SHA for c2e814a
View code at this point
Browse repository at this point
Python change 'SimpleHttpResponseTaintSink' to 'HttpResponseTaintSink'.
markshannon
committed
3bcd445
View commit details
Copy full SHA for 3bcd445
View code at this point
Browse repository at this point
Python taint-tracking: If taint has no class allow it flow through both branches of isinstance test.
markshannon
committed
e2a3d91
View commit details
Copy full SHA for e2a3d91
View code at this point
Browse repository at this point
Python: make sure unsafe deserialization query is using correct sources and that pickle is included in sinks.
markshannon
committed
8b01bac
View commit details
Copy full SHA for 8b01bac
View code at this point
Browse repository at this point
Python: make sure code injection query is using correct sources.
markshannon
committed
bc19769
View commit details
Copy full SHA for bc19769
View code at this point
Browse repository at this point
Python revert .getNode() to .getSink()/.getSource() to keep expected test output the same.
markshannon
committed
35e82dc
View commit details
Copy full SHA for 35e82dc
View code at this point
Browse repository at this point
Python: make sure all django and flask request sources conform to interface.
markshannon
committed
f8c43ca
View commit details
Copy full SHA for f8c43ca
View code at this point
Browse repository at this point
Python: Use new taint-tracking query in unsafe deserialization query.
markshannon
committed
61e6ae7
View commit details
Copy full SHA for 61e6ae7
View code at this point
Browse repository at this point
Python: Use new taint-tracking query in code-injection query.
markshannon
committed
3c1a5bb
View commit details
Copy full SHA for 3c1a5bb
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.