Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Events
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
502
(502)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
javascript
config
suites
on
codeql-cli-2.17.4
User selector
All users
Datepicker
All time
Commit history
Commits on Jan 21, 2021
add js/server-crash to the security suite
esbena
committed
5a6e692
View commit details
Copy full SHA for 5a6e692
View code at this point
Browse repository at this point
Commits on Dec 7, 2020
JS: Update security suite after move to CWE-915
asgerf
committed
e42ca88
View commit details
Copy full SHA for e42ca88
View code at this point
Browse repository at this point
JS: Add PrototypePollutingAssignment
asgerf
committed
972c4d6
View commit details
Copy full SHA for 972c4d6
View code at this point
Browse repository at this point
Commits on Aug 27, 2020
JS: Lower precision of ambiguous HTML ID attribute
asgerf
committed
e7a0bc6
View commit details
Copy full SHA for e7a0bc6
View code at this point
Browse repository at this point
Commits on Jun 23, 2020
Merge pull request #3765 from asger-semmle/js-team-sprint-merge2
Show description for 552b7ad
asgerf
authored
552b7ad
View commit details
Copy full SHA for 552b7ad
View code at this point
Browse repository at this point
Commits on Jun 22, 2020
JS: Sort security suite
asgerf
committed
1efd71a
View commit details
Copy full SHA for 1efd71a
View code at this point
Browse repository at this point
JS: Add new queries to security suite
asgerf
committed
8cc41a0
View commit details
Copy full SHA for 8cc41a0
View code at this point
Browse repository at this point
Merge branch 'js-team-sprint' into js/delay-slow-query-merge
asgerf
authored
7d54b02
View commit details
Copy full SHA for 7d54b02
View code at this point
Browse repository at this point
JS: Reduce precision of js/unused-npm-dependency
asgerf
committed
5cd2c7c
View commit details
Copy full SHA for 5cd2c7c
View code at this point
Browse repository at this point
Revert "Merge pull request #3702 from esbena/js/memory-exhaustion"
Show description for 9a0bbb3
esbena
committed
9a0bbb3
View commit details
Copy full SHA for 9a0bbb3
View code at this point
Browse repository at this point
JS: polish js/incomplete-html-attribute-sanitization
esbena
committed
3be094e
View commit details
Copy full SHA for 3be094e
View code at this point
Browse repository at this point
Commits on Jun 18, 2020
JS: rename query, support timeouts, add documentation, add to suite
esbena
committed
3f67e90
View commit details
Copy full SHA for 3f67e90
View code at this point
Browse repository at this point
Commits on Apr 24, 2020
JS: add query to query suite
esbena
committed
708fd3d
View commit details
Copy full SHA for 708fd3d
View code at this point
Browse repository at this point
Commits on Mar 9, 2020
JavaScript: Move flow summaries to `experimental`.
Show description for 3c785ec
Max Schaefer
committed
3c785ec
View commit details
Copy full SHA for 3c785ec
View code at this point
Browse repository at this point
Commits on Jan 31, 2020
JS: add query "Unsafe jQuery plugin"
esbena
committed
fef918a
View commit details
Copy full SHA for fef918a
View code at this point
Browse repository at this point
Commits on Jan 14, 2020
JS: Add PrototypePollutionUtility query
asger-semmle
authored and
asgerf
committed
654f145
View commit details
Copy full SHA for 654f145
View code at this point
Browse repository at this point
Commits on Jan 8, 2020
Merge pull request #2525 from asger-semmle/promise-missing-await
Show description for 308da07
max-schaefer
authored
308da07
View commit details
Copy full SHA for 308da07
View code at this point
Browse repository at this point
Commits on Jan 6, 2020
JS: Add RegExpAlwaysMatches query
asger-semmle
authored and
asgerf
committed
9928762
View commit details
Copy full SHA for 9928762
View code at this point
Browse repository at this point
Commits on Dec 12, 2019
JS: Add to correctness-core suite
asger-semmle
committed
45524d8
View commit details
Copy full SHA for 45524d8
View code at this point
Browse repository at this point
Commits on Nov 13, 2019
JavaScript: Add query `IncompleteUrlSchemeCheck.ql`.
Max Schaefer
committed
ab583b7
View commit details
Copy full SHA for ab583b7
View code at this point
Browse repository at this point
Commits on Nov 6, 2019
Merge pull request #2203 from erik-krogh/ignorePureFunction
Show description for 04f0c22
semmle-qlci
authored
04f0c22
View commit details
Copy full SHA for 04f0c22
View code at this point
Browse repository at this point
Commits on Nov 5, 2019
add js/ignore-array-result to correctness-core suite
erik-krogh
committed
df3c70e
View commit details
Copy full SHA for df3c70e
View code at this point
Browse repository at this point
Commits on Oct 23, 2019
add missing .ql extension to suite file name
esbena
authored
207692a
View commit details
Copy full SHA for 207692a
View code at this point
Browse repository at this point
Commits on Oct 22, 2019
Merge pull request #2092 from esben-semmle/js/brittle-system-reflection-command
Show description for 1c79ec5
semmle-qlci
authored
1c79ec5
View commit details
Copy full SHA for 1c79ec5
View code at this point
Browse repository at this point
Merge pull request #2162 from xiemaisi/js/remove-deprecated-queries
Show description for 0dcb189
semmle-qlci
authored
0dcb189
View commit details
Copy full SHA for 0dcb189
View code at this point
Browse repository at this point
Commits on Oct 21, 2019
JS: add query js/shell-command-injection-from-environment
Esben Sparre Andreasen
committed
5a983cb
View commit details
Copy full SHA for 5a983cb
View code at this point
Browse repository at this point
JavaScript: Remove deprecated queries.
Show description for 55fb86d
Max Schaefer
committed
55fb86d
View commit details
Copy full SHA for 55fb86d
View code at this point
Browse repository at this point
implement a new query to detect unreachable overloaded methods in TypeScript
erik-krogh
committed
9eda120
View commit details
Copy full SHA for 9eda120
View code at this point
Browse repository at this point
Commits on Oct 15, 2019
JS: add query js/useless-regexp-character-escape
Esben Sparre Andreasen
committed
e1d7434
View commit details
Copy full SHA for e1d7434
View code at this point
Browse repository at this point
Commits on Sep 13, 2019
rename TaintedLength to LoopBoundInjection
erik-krogh
committed
c4f27ed
View commit details
Copy full SHA for c4f27ed
View code at this point
Browse repository at this point
Commits on Sep 12, 2019
added js/loop-bound-injection to javascript security suite
erik-krogh
committed
dc891dc
View commit details
Copy full SHA for dc891dc
View code at this point
Browse repository at this point
Commits on Sep 11, 2019
JavaScript: Add new query `UnusedIndexVariable`.
Max Schaefer
committed
500cde6
View commit details
Copy full SHA for 500cde6
View code at this point
Browse repository at this point
Commits on Jul 31, 2019
JS: add query js/indirect-command-line-injection
Esben Sparre Andreasen
committed
bf4a324
View commit details
Copy full SHA for bf4a324
View code at this point
Browse repository at this point
Commits on Jun 3, 2019
JS: add query js/regex/missing-regexp-anchor
Esben Sparre Andreasen
committed
0fa73b8
View commit details
Copy full SHA for 0fa73b8
View code at this point
Browse repository at this point
Commits on May 31, 2019
Merge pull request #1341 from esben-semmle/js/sync-suites
Show description for 74688bb
Max Schaefer
authored
74688bb
View commit details
Copy full SHA for 74688bb
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.