github / codeql Public

5 Pull requests merged by 4 people

• C#: Fix bad join-order in dispatch library

  #7470 merged Dec 22, 2021

• Ruby: add CryptoAlgorithms library

  #7273 merged Dec 22, 2021

• [Ruby] Bugfix: ConstantWriteAccess::getQualifiedName() returns wrong value in some cases

  #7446 merged Dec 22, 2021

• Ruby: Data flow for keyword arguments/parameters

  #7442 merged Dec 22, 2021

• Update CSV framework coverage reports

  #7466 merged Dec 22, 2021

6 Pull requests opened by 6 people

• C#: Re-factor the ForEachCapture query to use MaD flow summaries.

  #7468 opened Dec 22, 2021

• C#: Promote existing ad-hoc consistency checks to consistency queries

  #7469 opened Dec 22, 2021

• Adding a codeql script to find PendingIntent Vulnerbilies to new_branch

  #7471 opened Dec 22, 2021

• QL-for-QL: Add a redundant aggregate query

  #7472 opened Dec 22, 2021

• [draft] DB reads as taint sources

  #7474 opened Dec 22, 2021

• JS: Improve performance of ATM queries on large databases

  #7475 opened Dec 22, 2021

4 Issues closed by 4 people

• General issue

  #7482 closed Dec 27, 2021

• LGTM.com - false positive - The value assigned to local variable 'xsrf_token' is never used.

  #7478 closed Dec 26, 2021

• SinkModelCsv

  #7476 closed Dec 23, 2021

• Java: Potentially duplicated results and paths from a custom data flow query

  #7449 closed Dec 23, 2021

5 Issues opened by 4 people

• Unsafe Jquery Plugin - Potential False Negative

  #7485 opened Dec 28, 2021

• Broken link to query in documentation

  #7484 opened Dec 28, 2021

• Query improvement: Include IO.popen as a command execution sink in Ruby's standard library

  #7483 opened Dec 27, 2021

• Infinite loop when executing DataFlow queries

  #7481 opened Dec 26, 2021

• LGTM.com - false positive

  #7477 opened Dec 24, 2021

7 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• C#: Introduce flow summaries for StringValues.

  #7465 commented on Dec 22, 2021 • 12 new comments

• C++: split `cpp/overrunning-write` into two

  #7386 commented on Dec 28, 2021 • 4 new comments

• Ruby: Add `rb/weak-cookie-configuration` query

  #7313 commented on Dec 22, 2021 • 2 new comments

• LGTM.com - false positive - For loop variable is not used in the loop body

  #7461 commented on Dec 27, 2021 • 1 new comment

• Ruby: Flow through arrays/enumerables

  #7198 commented on Dec 22, 2021 • 1 new comment

• Ruby: Add support for GraphQL

  #7126 commented on Dec 22, 2021 • 0 new comments

• C#: Shared extraction

  #7456 commented on Dec 22, 2021 • 0 new comments