Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Events
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
502
(502)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
javascript
ql
src
DOM
on
codeql-cli-2.17.4
User selector
All users
Datepicker
All time
Commit history
Commits on Mar 21, 2024
change the precision of the js/unsafe-external-link query to low
erik-krogh
committed
54a1c25
View commit details
Copy full SHA for 54a1c25
View code at this point
Browse repository at this point
Commits on Nov 28, 2023
Detect Django template URLs
Show description for 286e395
rafaelurben
authored
286e395
View commit details
Copy full SHA for 286e395
View code at this point
Browse repository at this point
Commits on May 3, 2023
JS: Make implicit this receivers explicit
kaspersv
committed
67950c8
View commit details
Copy full SHA for 67950c8
View code at this point
Browse repository at this point
Commits on Oct 7, 2022
fix some more style-guide violations in the alert-messages
erik-krogh
committed
368f847
View commit details
Copy full SHA for 368f847
View code at this point
Browse repository at this point
Commits on Aug 2, 2021
remove nunjucks template URLs from the target-blank query
erik-krogh
committed
f719e0c
View commit details
Copy full SHA for f719e0c
View code at this point
Browse repository at this point
Commits on Jun 15, 2021
Update security-severity scores
calumgrant
committed
771e686
View commit details
Copy full SHA for 771e686
View code at this point
Browse repository at this point
Commits on Jun 10, 2021
Add security-severity metadata
calumgrant
committed
a594afb
View commit details
Copy full SHA for a594afb
View code at this point
Browse repository at this point
Commits on Jan 18, 2021
JS: Autoformat
asgerf
committed
d8c9dba
View commit details
Copy full SHA for d8c9dba
View code at this point
Browse repository at this point
JS: Remove FP in TargetBlank
asgerf
committed
3c08671
View commit details
Copy full SHA for 3c08671
View code at this point
Browse repository at this point
Commits on Oct 5, 2020
allow flask url_for urls in TargetBlank.ql
erik-krogh
committed
d6dc4bb
View commit details
Copy full SHA for d6dc4bb
View code at this point
Browse repository at this point
Commits on Sep 3, 2020
revert `mailto:` change in TargetBlank.ql
erik-krogh
committed
1f9749f
View commit details
Copy full SHA for 1f9749f
View code at this point
Browse repository at this point
Commits on Sep 2, 2020
allow urls that are prefixed with `#` or `?` in js/unsafe-external-link
erik-krogh
committed
f0a0f41
View commit details
Copy full SHA for f0a0f41
View code at this point
Browse repository at this point
Commits on Aug 31, 2020
allow mailto links in js/unsafe-external-link
erik-krogh
committed
f7edf28
View commit details
Copy full SHA for f7edf28
View code at this point
Browse repository at this point
Commits on Aug 27, 2020
JS: Lower precision of ambiguous HTML ID attribute
asgerf
committed
e7a0bc6
View commit details
Copy full SHA for e7a0bc6
View code at this point
Browse repository at this point
Commits on May 19, 2020
Lower precision for a number of queries.
Show description for a803120
Max Schaefer
committed
a803120
View commit details
Copy full SHA for a803120
View code at this point
Browse repository at this point
Commits on Aug 5, 2019
JS: lower precision of js/conflicting-html-attribute
Esben Sparre Andreasen
committed
c4eb258
View commit details
Copy full SHA for c4eb258
View code at this point
Browse repository at this point
Commits on May 21, 2019
JavaScript: Add CWE-1022 to TargetBlank.
Max Schaefer
committed
cf22761
View commit details
Copy full SHA for cf22761
View code at this point
Browse repository at this point
Commits on Feb 12, 2019
JavaScript: Drop precision of `AmbiguousIdAttribute` to 'high'.
Max Schaefer
committed
41eb1ff
View commit details
Copy full SHA for 41eb1ff
View code at this point
Browse repository at this point
JavaScript: Be more conservative about templates in `AmbiguousIdAttribute`.
Show description for 25f95d9
Max Schaefer
committed
25f95d9
View commit details
Copy full SHA for 25f95d9
View code at this point
Browse repository at this point
Commits on Jan 7, 2019
JavaScript: Autoformat all QL files.
Max Schaefer
committed
31bb39a
View commit details
Copy full SHA for 31bb39a
View code at this point
Browse repository at this point
Commits on Jan 2, 2019
JavaScript: Highlight id attribute (not entire element) in `AmbiguousIdAttribute`.
Max Schaefer
committed
0a2df6c
View commit details
Copy full SHA for 0a2df6c
View code at this point
Browse repository at this point
Commits on Nov 20, 2018
Merge pull request #499 from xiemaisi/js/target-blank-location
Show description for b21b066
semmle-qlci
authored
b21b066
View commit details
Copy full SHA for b21b066
View code at this point
Browse repository at this point
JavaScript: Make `TargetBlank` only highlight the first line of the link.
Show description for c1690a6
Max Schaefer
committed
c1690a6
View commit details
Copy full SHA for c1690a6
View code at this point
Browse repository at this point
Commits on Nov 19, 2018
JavaScript: Downgrade a few "error" rules to "warning".
Show description for 1b59a28
Max Schaefer
committed
1b59a28
View commit details
Copy full SHA for 1b59a28
View code at this point
Browse repository at this point
Commits on Aug 2, 2018
QL code and tests for C#/C++/JavaScript.
pavgust
committed
b55526a
View commit details
Copy full SHA for b55526a
View code at this point
Browse repository at this point
Loading
You can’t perform that action at this time.