File tree
1,726 files changed
+156894
-64119
lines changed- .devcontainer/swift
- .github
- codeql
- workflows
- actions
- extractor/tools
- ql
- lib
- change-notes/released
- src
- change-notes/released
- codeql-suites
- test/query-tests
- Security
- CWE-094/.github/workflows
- CWE-829/.github/workflows
- Violations Of Best Practice/CodeQL/.github/workflows
- config
- cpp
- downgrades
- 1a4bbe5ded083b9de87911c155fc99ca22ecb0ce
- 1aa71a4a687fc93f807d4dfeeef70feceeced242
- 4813509d85b45ae17421c036905199f7324cf228
- 59cb96ca699929b63941e81905f9b8de7eed59a6
- 7eeff19bf7c89a350d3e43516a33c98a270cb057
- a01d8f91b8d49259e509b574962dec90719f69a6
- dd32242a870867a532bb0b2a88a6a917a5b4c26f
- f786eb3f5dfddb0ac914ab09551bf1c5c64b47c0
- ql
- lib
- change-notes
- released
- ext
- semmle/code/cpp
- controlflow
- internal
- dataflow
- internal
- headers
- internal
- ir
- dataflow/internal
- implementation
- aliased_ssa/internal
- raw/internal
- models/implementations
- rangeanalysis
- new/internal/semantic
- analysis
- stmts
- upgrades
- 1a4bbe5ded083b9de87911c155fc99ca22ecb0ce
- 1aa71a4a687fc93f807d4dfeeef70feceeced242
- 4813509d85b45ae17421c036905199f7324cf228
- 7eeff19bf7c89a350d3e43516a33c98a270cb057
- a01d8f91b8d49259e509b574962dec90719f69a6
- c3881af7e5b247d126aea68a1901b4497adf3d83
- dd32242a870867a532bb0b2a88a6a917a5b4c26f
- f786eb3f5dfddb0ac914ab09551bf1c5c64b47c0
- src
- Architecture/Refactoring Opportunities
- Best Practices
- Critical
- Likely Bugs
- Arithmetic
- Likely Typos
- Underspecified Functions
- Security/CWE
- CWE-120
- CWE-190
- CWE-732
- change-notes
- released
- test
- experimental
- library-tests/rangeanalysis/signanalysis
- query-tests/Security/CWE/CWE-409/DecompressionBombs
- library-tests
- consteval_if
- controlflow
- guards
- guards-ir
- dataflow
- dataflow-tests
- external-models
- ir-barrier-guards
- models-as-data
- taint-tests
- functions/functions
- headers/preprocBlock
- ir/ir
- preprocessor/preprocessor
- proxy_class
- rangeanalysis/SimpleRangeAnalysis
- syntax-zoo
- query-tests
- Likely Bugs/Likely Typos/ExprHasNoEffect/CMakeFiles/CMakeScratch/TryCompile-abcdef
- Security/CWE/CWE-119/semmle/tests
- jsf/4.13 Functions/AV Rule 114
- csharp
- documentation/library-coverage
- extractor
- Semmle.Extraction.CSharp
- CodeAnalysisExtensions
- Entities
- Expressions
- Types
- Semmle.Extraction.CSharp.DependencyFetching
- SourceGenerators/DotnetSourceGeneratorWrapper
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- examples/snippets
- integration-tests/all-platforms
- autobuild
- blazor
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- blazor_build_mode_none
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- blazor_net_8
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- cshtml_standalone
- cshtml_standalone_net6
- lib
- change-notes
- released
- ext
- semmle/code/csharp
- commons
- dataflow
- internal
- dispatch
- exprs
- src
- Bad Practices
- Likely Bugs
- Dynamic
- change-notes
- released
- experimental
- CWE-099
- CWE-918
- Security Features
- CWE-1004
- CWE-327/Azure
- CWE-614
- CWE-759
- JsonWebTokenHandler
- Serialization
- backdoor
- dataflow/flowsources
- test
- experimental
- CWE-918
- Security Features
- CWE-759
- backdoor
- library-tests
- async
- conversion/boxing
- csharp11
- csharp7.2
- dataflow
- collections
- global
- implicittostring
- library
- dispatch
- implements
- implicittostring
- index
- iterators
- security/dataflow/flowsources
- typeparameterconstraints
- unification
- query-tests
- Bad Practices/VirtualCallInConstructorOrDestructor
- Nullness
- Useless Code/RedundantToStringCall
- docs/codeql
- codeql-language-guides
- ql-language-reference
- reusables
- go
- documentation/library-coverage
- extractor
- ql
- consistency-queries
- change-notes/released
- lib
- change-notes
- released
- ext
- semmle/go
- dataflow
- internal
- frameworks
- stdlib
- src
- change-notes/released
- experimental/CWE-942
- test
- experimental/CWE-942
- vendor
- github.com/rs/cors
- library-tests/semmle/go
- dataflow
- ExternalValueFlow
- FlowSteps
- VarArgs
- VarArgsWithExternalFlow
- vendor
- github.com/nonexistent/test
- VarArgsWithFunctionModels
- vendor/github.com/nonexistent/test
- flowsources/local/database
- vendor
- github.com
- astaxie/beego/orm
- beego/beego/v2/client/orm
- jmoiron/sqlx
- gorm.io/gorm
- frameworks
- BeegoOrm
- TaintSteps
- serialization
- query-tests/Security
- CWE-078
- CWE-079
- CWE-089
- CWE-209
- CWE-312
- CWE-640
- java
- downgrades/38d02c063878000356a3e5db49d5a6a8f38efe24
- kotlin-extractor
- deps
- src/main
- java/com/semmle/util
- process
- trap/pathtransformers
- kotlin
- utils
- versions
- v_1_5_0
- v_1_6_0
- v_2_0_0-RC1
- v_2_1_20-Beta1
- ql
- integration-tests
- java
- android-8-sample
- android-sample
- android-sample-kotlin-build-script
- android-sample-kotlin-build-script-no-wrapper
- android-sample-no-wrapper
- android-sample-old-style
- android-sample-old-style-kotlin-build-script
- android-sample-old-style-kotlin-build-script-no-wrapper
- android-sample-old-style-no-wrapper
- buildless
- buildless-erroneous
- buildless-gradle
- buildless-gradle-classifiers
- buildless-gradle-timeout
- buildless-maven
- buildless-maven-executable-war
- buildless-maven-existing-settings-xml
- buildless-maven-multimodule
- buildless-maven-timeout
- buildless-proxy-gradle
- buildless-proxy-maven
- buildless-sibling-projects
- ecj-sample
- ecj-sample-noexit
- gradle-sample
- gradle-sample-kotlin-script
- javac-tool-custom-file
- maven-enforcer
- maven-sample
- maven-sample-extract-properties
- maven-sample-large-xml-files
- maven-sample-small-xml-files
- maven-sample-xml-mode-all
- maven-sample-xml-mode-byname
- maven-sample-xml-mode-disabled
- maven-sample-xml-mode-smart
- maven-wrapper
- maven-wrapper-script-only
- maven-wrapper-source-only
- multi-release-jar-java11
- multi-release-jar-java17
- partial-gradle-sample
- partial-gradle-sample-without-gradle
- spring-boot-sample
- kotlin/all-platforms/diagnostics/kotlin-version-too-new
- lib
- change-notes
- released
- config
- semmle/code/java
- dataflow
- internal
- dispatch
- frameworks
- spring
- security
- regexp
- upgrades/1fd1afa7862b82955785edd29820054ab6c9ec81
- src
- Likely Bugs/Serialization
- Security/CWE/CWE-327
- change-notes/released
- test
- library-tests
- Encryption
- frameworks/JaxWs
- query-tests
- MissingVoidConstructorsOnSerializable
- security
- CWE-297
- CWE-327/semmle/tests
- javascript
- extractor/src/com/semmle
- js/extractor
- ts/extractor
- ql
- examples/queries/dataflow
- BackendIdor
- DecodingAfterSanitization
- EvalTaint
- InformationDisclosure
- StoredXss
- TemplateInjection
- lib
- change-notes/released
- semmle/javascript
- dataflow
- internal
- explore
- filters
- frameworks
- data/internal
- internal
- flow_summaries
- security
- dataflow
- internal
- regexp
- utils/test
- src
- Performance
- Security
- CWE-020
- CWE-022
- CWE-073
- CWE-078
- CWE-079
- CWE-089
- CWE-094
- CWE-116
- CWE-117
- CWE-134
- CWE-200
- CWE-201
- CWE-209
- CWE-312
- CWE-327
- CWE-338
- CWE-346
- CWE-377
- CWE-400
- CWE-502
- CWE-506
- CWE-601
- CWE-611
- CWE-640
- CWE-643
- CWE-730
- CWE-754
- CWE-770
- CWE-776
- CWE-798
- CWE-807
- CWE-829
- CWE-834
- CWE-843
- CWE-912
- CWE-915
- CWE-916
- CWE-918
- change-notes
- released
- experimental
- Security
- CWE-094-dataURL
- CWE-099
- CWE-340
- CWE-347
- CWE-522-DecompressionBombs
- CWE-918
- CWE-942
- heuristics/ql/src/Security
- CWE-020
- CWE-078
- CWE-079
- CWE-089
- CWE-094
- CWE-117
- CWE-134
- CWE-346
- CWE-400
- CWE-502
- CWE-611
- CWE-643
- CWE-730
- CWE-770
- CWE-776
- CWE-807
- CWE-915
- poi
- meta
- alerts
- analysis-quality
- test
- experimental
- FormParsers
- PoI
- Security
- CWE-094-dataURL
- CWE-099
- EnvValueAndKeyInjection
- EnvValueInjection
- CWE-347
- localsource
- remotesource
- CWE-918
- CWE-942
- library-tests
- Arrays
- Barriers
- Classes
- CustomLoadStoreSteps
- DataFlow
- FlowLabels
- FlowSummary
- Generators
- InterProceduralFlow
- LabelledBarrierGuards
- Modules
- Promises
- PropWrite
- Routing
- Security/heuristics
- TaintBarriers
- TaintTracking
- TaintedUrlSuffix
- TripleDot
- TypeScript
- ImportEquals
- RegressionTests/EmbeddedTypeScriptNoTSConfig
- TypeTracking2
- frameworks
- Angular2
- AsyncPackage
- Collections
- ComposedFunctions
- Immutable
- Nest
- Next
- PropertyProjection
- ReactJS
- Redux
- Restify2
- Spife
- Templating
- Vuex
- data
- threat-models/sources
- query-tests
- Security
- CWE-020
- IncompleteHostnameRegExp
- IncompleteUrlSchemeCheck
- IncompleteUrlSubstringSanitization
- IncorrectSuffixCheck
- UntrustedDataToExternalAPI
- CWE-022
- TaintedPath
- ZipSlip
- CWE-073
- CWE-078
- CommandInjection
- IndirectCommandInjection
- SecondOrderCommandInjection
- ShellCommandInjectionFromEnvironment
- UnsafeShellCommandConstruction
- lib
- CWE-079
- DomBasedXss
- ExceptionXss
- ReflectedXss
- StoredXss
- UnsafeHtmlConstruction
- UnsafeJQueryPlugin
- XssThroughDom
- CWE-089
- local-threat-source
- typed
- untyped
- CWE-094
- CodeInjection
- UnsafeDynamicMethodAccess
- CWE-116/IncompleteSanitization
- CWE-117
- CWE-134
- CWE-200
- CWE-201
- CWE-209
- CWE-312
- CWE-327
- CWE-338
- CWE-346
- CWE-377
- CWE-400
- DeepObjectResourceExhaustion
- ReDoS
- RemovePropertyInjection
- CWE-502
- CWE-506
- CWE-522-DecompressionBombs
- CWE-601
- ClientSideUrlRedirect
- ServerSideUrlRedirect
- CWE-611
- CWE-640
- CWE-643
- CWE-730
- CWE-754
- CWE-770/ResourceExhaustion
- CWE-776
- CWE-798
- CWE-807
- CWE-829
- CWE-834
- CWE-843
- CWE-912
- CWE-915
- PrototypePollutingAssignment
- PrototypePollutingFunction
- PrototypePollutingMergeCall
- CWE-916
- CWE-918
- filters/ClassifyFiles
- tutorials
- Analyzing data flow in JavaScript/Global data flow
- Introducing the JavaScript libraries
- misc
- bazel/3rdparty/tree_sitter_extractors_deps
- scripts
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new
- internal
- frameworks
- security/internal
- src
- change-notes/released
- test
- library-tests
- dataflow
- coverage
- variable-capture
- frameworks/lxml
- query-tests
- Functions/return_values
- Statements/unreachable
- ruby
- extractor
- ql
- consistency-queries
- lib
- change-notes/released
- codeql/ruby
- dataflow/internal
- experimental
- frameworks
- http_clients
- stdlib
- security
- internal
- regexp
- typetracking
- internal
- src
- change-notes/released
- experimental
- CWE-522-DecompressionBombs
- decompression-api
- manually-check-http-verb
- weak-params
- queries
- meta
- security
- cwe-611
- cwe-732
- cwe-798
- test
- library-tests
- dataflow
- array-flow
- call-sensitivity
- erb
- flow-summaries
- global
- hash-flow
- params
- ssa-flow
- summaries
- type-flow
- frameworks
- action_controller
- active_support
- pathname
- sinatra
- query-tests
- experimental/TemplateInjection
- security
- cwe-022
- cwe-078/UnsafeShellCommandConstruction
- cwe-079
- cwe-089
- cwe-094
- CodeInjection
- UnsafeCodeConstruction
- cwe-117
- cwe-312
- cwe-506
- cwe-732
- cwe-798
- cwe-829
- rust
- ast-generator
- patches
- src
- templates
- extractor
- macros
- src
- generated
- translate
- ql
- integration-tests
- hello-project
- hello-workspace
- options
- cfg
- features
- target
- lib
- change-notes/released
- codeql/rust
- controlflow
- internal
- generated
- dataflow
- internal
- elements
- internal
- generated
- frameworks
- rustcrypto
- stdlib
- security
- internal
- utils/test
- src
- change-notes/released
- queries
- security/CWE-328
- summary
- test
- extractor-tests
- File
- nested
- generated
- FormatArgsExpr
- library-tests
- controlflow
- dataflow
- global
- local
- models
- sources
- strings
- taint
- frameworks/postgres
- sensitivedata
- variables
- query-tests
- diagnostics
- security/CWE-328
- unusedentities
- schema
- swift
- extractor
- ql
- integration-tests/osx
- hello-ios
- hello-ios
- Assets.xcassets
- AccentColor.colorset
- AppIcon.appiconset
- Preview Content/Preview Assets.xcassets
- hello-ios.xcodeproj
- project.xcworkspace
- hello-xcode
- lib
- change-notes/released
- codeql/swift
- dataflow/internal
- security
- internal
- src
- change-notes/released
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,726 files changed
+156894
-64119
lines changedThis file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
9 | 9 |
| |
10 | 10 |
| |
11 | 11 |
| |
12 |
| - | |
13 |
| - | |
| 12 | + |
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
22 |
| - | |
| 22 | + | |
23 | 23 |
| |
24 | 24 |
| |
25 | 25 |
| |
| |||
38 | 38 |
| |
39 | 39 |
| |
40 | 40 |
| |
41 |
| - | |
42 |
| - | |
| 41 | + | |
43 | 42 |
| |
44 |
| - | |
45 | 43 |
| |
46 |
| - | |
| 44 | + | |
47 | 45 |
| |
48 | 46 |
| |
49 | 47 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
48 | 48 |
| |
49 | 49 |
| |
50 | 50 |
| |
51 |
| - | |
52 |
| - | |
53 |
| - | |
54 |
| - | |
55 |
| - | |
56 |
| - | |
57 | 51 |
| |
58 | 52 |
| |
59 | 53 |
| |
|
This file was deleted.
0 commit comments