The Wayback Machine - http://web.archive.org/web/20220304205853/https://github.com/github/codeql/pulls
Skip to content
New pull request New
192 Open 6,400 Closed
192 Open 6,400 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Python: Fix a bunch of QL warnings
C# C++ Java no-change-note-required Python Ruby
#8336 opened Mar 4, 2022 by tausbn • Draft
JS: Add query that maps queries to sink type
JS
#8334 opened Mar 4, 2022 by TomBolton • Review required
JS: Use TypeTracker::continue when doing taint steps
JS
#8333 opened Mar 4, 2022 by hvitved • Draft
Ruby: Use taint tracking instead of type tracking to define regExpSource
Ruby
#8332 opened Mar 4, 2022 by hvitved • Draft
C#: Capture Summary models.
C# Java no-change-note-required
#8329 opened Mar 4, 2022 by michaelnebel • Review required
1
[Java] Add CharacterLiteral to CompileTimeConstantExpr.getStringValue
documentation Java
#8325 opened Mar 3, 2022 by JLLeitschuh • Approved
6
Enforcing consistent casing of acronyms
C# C++ Java JS no-change-note-required Python QL-for-QL Ruby
#8323 opened Mar 3, 2022 by erik-krogh • Review required
5
C#: Remove legacy odasa support
C# depends on internal PR
#8322 opened Mar 3, 2022 by hvitved • Draft
C++: Handle initialization of structured bindings via bitwise copy in extractor
C++ depends on internal PR
#8320 opened Mar 3, 2022 by jketema • Review required
C#: Add change note about recursive codeql test run extraction
C# documentation
#8319 opened Mar 3, 2022 by hvitved • Approved
5
C++: New query cpp/potential-system-data-exposure
C++ depends on internal PR documentation
#8318 opened Mar 3, 2022 by geoffw0 • Review required
7
Ruby/Python: Clear call contexts after jump steps in type tracking
no-change-note-required Python Ruby
#8317 opened Mar 3, 2022 by hvitved • Approved
7
C++: Update the DB scheme stats file
C++ no-change-note-required
#8310 opened Mar 2, 2022 by jketema • Review required
5
Java: Add query to detect clickjacking
documentation Java
#8308 opened Mar 2, 2022 by ahmed532009 • Review required
2
Start sharing Concepts across dynamic languages
documentation JS Python Ruby
#8307 opened Mar 1, 2022 by hmac • Review required
1 task
8
Ruby: add rb/clear-text-storage-sensitive-data query
documentation Ruby
#8306 opened Mar 1, 2022 by alexrford • Draft
JS: Refactor the XSS / Client-side-url queries
JS no-change-note-required
#8304 opened Mar 1, 2022 by erik-krogh • Review required
11
Ruby: TypeTracker: add smallstep for functions that return their arguments
no-change-note-required Python Ruby
#8302 opened Mar 1, 2022 by aibaars • Draft
15
Data flow: Use parameterized module to share code between pruning stages
C# C++ Java Python Ruby
#8301 opened Mar 1, 2022 by hvitved • Draft
Fix MaD workflows to be more resilient to missing files
#8294 opened Feb 28, 2022 by tamasvajk • Review required
JS: configure MaD report generators to include javascript
JS
#8290 opened Feb 28, 2022 by tamasvajk • Draft
Python: Fix syntax error in with test output
depends on internal PR no-change-note-required Python
#8289 opened Feb 28, 2022 by tausbn • Review required
C#: Extensive use of stubs in testcases.
C#
#8279 opened Feb 28, 2022 by michaelnebel • Draft
1
Python: Add Server-side Request Forgery sinks
documentation Python
#8275 opened Feb 28, 2022 by haby0 • Changes requested
@RasmusWL
8
Ruby: Add rb/tainted-format-string query
documentation Ruby
#8272 opened Feb 28, 2022 by hmac • Draft
5
ProTip! Adding no:label will show everything without a label.