Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
ramdcoder
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Nov 1, 2021
Merge pull request #7003 from asgerf/js/mixed-this-fp
Show description for dde4932
codeql-ci
authored
dde4932
View commit details
Copy full SHA for dde4932
View code at this point
Browse repository at this point
Commits on Oct 29, 2021
JS: Fix FP in ˚MixedStaticInstanceThisAccess
asgerf
committed
d52b2bd
View commit details
Copy full SHA for d52b2bd
View code at this point
Browse repository at this point
JS: Add test with FP
asgerf
committed
afa6424
View commit details
Copy full SHA for afa6424
View code at this point
Browse repository at this point
Merge pull request #6855 from erik-krogh/secCookie
Show description for 6fffdf6
erik-krogh
authored
6fffdf6
View commit details
Copy full SHA for 6fffdf6
View code at this point
Browse repository at this point
Commits on Oct 28, 2021
apply all doc fixes
Show description for cfc5629
erik-krogh
and
hubwriter
authored
cfc5629
View commit details
Copy full SHA for cfc5629
View code at this point
Browse repository at this point
autoformat
erik-krogh
committed
c34b089
View commit details
Copy full SHA for c34b089
View code at this point
Browse repository at this point
Commits on Oct 27, 2021
simplify regexp
Show description for 0372ccc
erik-krogh
and
esbena
authored
0372ccc
View commit details
Copy full SHA for 0372ccc
View code at this point
Browse repository at this point
update documentation strings
Show description for af64b31
erik-krogh
and
esbena
authored
af64b31
View commit details
Copy full SHA for af64b31
View code at this point
Browse repository at this point
Commits on Oct 26, 2021
Merge pull request #6962 from asgerf/js/template-db-constraint-err
Show description for e5e1046
codeql-ci
authored
e5e1046
View commit details
Copy full SHA for e5e1046
View code at this point
Browse repository at this point
add change-note
erik-krogh
committed
8ba5459
View commit details
Copy full SHA for 8ba5459
View code at this point
Browse repository at this point
Merge pull request #6960 from erik-krogh/useSetLiteral
Show description for 90bebaa
aschackmull
authored
90bebaa
View commit details
Copy full SHA for 90bebaa
View code at this point
Browse repository at this point
Merge pull request #6857 from erik-krogh/fixPipes
Show description for 090fb2d
erik-krogh
authored
090fb2d
View commit details
Copy full SHA for 090fb2d
View code at this point
Browse repository at this point
cache `SensitiveExpr`
erik-krogh
committed
9c8a51b
View commit details
Copy full SHA for 9c8a51b
View code at this point
Browse repository at this point
assume that setting the secure/httpOnly flag to some unknown value is good
erik-krogh
committed
038438e
View commit details
Copy full SHA for 038438e
View code at this point
Browse repository at this point
fix typos and update docs
erik-krogh
committed
5228196
View commit details
Copy full SHA for 5228196
View code at this point
Browse repository at this point
add test for the `cookie` npm package
erik-krogh
committed
311df4d
View commit details
Copy full SHA for 311df4d
View code at this point
Browse repository at this point
refactor most of the `isSensitive` predicates into a common helper predicate
erik-krogh
committed
92d59aa
View commit details
Copy full SHA for 92d59aa
View code at this point
Browse repository at this point
add session{key,id} as sensitive info
erik-krogh
committed
834d5ec
View commit details
Copy full SHA for 834d5ec
View code at this point
Browse repository at this point
update tests so it's clear which cookies are insecure
erik-krogh
committed
1e1e549
View commit details
Copy full SHA for 1e1e549
View code at this point
Browse repository at this point
add more cookie models
erik-krogh
committed
283b823
View commit details
Copy full SHA for 283b823
View code at this point
Browse repository at this point
documentation overhaul on client-exposed-cookie (and restricting it to server-side)
erik-krogh
committed
2cb3d2c
View commit details
Copy full SHA for 2cb3d2c
View code at this point
Browse repository at this point
documentation overhaul for clear-text-cookie
erik-krogh
committed
ab23fff
View commit details
Copy full SHA for ab23fff
View code at this point
Browse repository at this point
only report clear-text cookies for sensitive cookies
erik-krogh
committed
f36accf
View commit details
Copy full SHA for f36accf
View code at this point
Browse repository at this point
combine test files
erik-krogh
committed
53b4337
View commit details
Copy full SHA for 53b4337
View code at this point
Browse repository at this point
delete the experimental query library for cookie queries
erik-krogh
committed
9193984
View commit details
Copy full SHA for 9193984
View code at this point
Browse repository at this point
port experimental cookie models to non-experimental
erik-krogh
committed
6858acc
View commit details
Copy full SHA for 6858acc
View code at this point
Browse repository at this point
prepare move to non-experimental
erik-krogh
committed
26a24a3
View commit details
Copy full SHA for 26a24a3
View code at this point
Browse repository at this point
refactor, cleanup, and improvements in experimental cookie queries
erik-krogh
committed
44db920
View commit details
Copy full SHA for 44db920
View code at this point
Browse repository at this point
use set literal instead of big disjunction of literals
erik-krogh
committed
a3c55c2
View commit details
Copy full SHA for a3c55c2
View code at this point
Browse repository at this point
Commits on Oct 25, 2021
Rename ATM query pack for consistency with other packs
henrymercer
committed
7e0e35f
View commit details
Copy full SHA for 7e0e35f
View code at this point
Browse repository at this point
Merge pull request #6924 from asgerf/js/skip-files-with-unsupported-encoding
Show description for b5554da
codeql-ci
authored
b5554da
View commit details
Copy full SHA for b5554da
View code at this point
Browse repository at this point
JS: Bump extractor version string
asgerf
committed
bfb1da5
View commit details
Copy full SHA for bfb1da5
View code at this point
Browse repository at this point
JS: Avoid using non-existent attribute as parent
asgerf
committed
f3e2b0b
View commit details
Copy full SHA for f3e2b0b
View code at this point
Browse repository at this point
JS: Add TRAP test
asgerf
committed
ac62379
View commit details
Copy full SHA for ac62379
View code at this point
Browse repository at this point
Commits on Oct 22, 2021
Merge pull request #6907 from github/henrymercer/add-experimental-atm-libraries
Show description for 02b1fe2
henrymercer
authored
02b1fe2
View commit details
Copy full SHA for 02b1fe2
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.