File tree
1,528 files changed
+34479
-9712
lines changed- .github/workflows
- config
- cpp/ql
- lib
- change-notes
- released
- experimental/semmle/code/cpp
- dataflow
- ir/dataflow/internal
- tainttracking1
- tainttracking2
- tainttracking3
- rangeanalysis
- semantic
- analysis
- semmle/code/cpp/ir/implementation
- aliased_ssa/internal
- internal
- unaliased_ssa/internal
- src
- Likely Bugs/Memory Management
- Security/CWE
- CWE-311
- CWE-313
- change-notes
- released
- experimental/Security/CWE/CWE-193
- test
- experimental
- library-tests/rangeanalysis/rangeanalysis
- query-tests/Security/CWE
- CWE-119
- CWE-193
- array-access
- pointer-deref
- query-tests
- Likely Bugs/Memory Management/UsingExpiredStackAddress
- Security/CWE/CWE-311/semmle/tests
- csharp
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- integration-tests
- all-platforms
- dotnet_pack
- dotnet_publish
- posix-only/dotnet_test
- lib
- change-notes
- released
- semmle/code/cil
- src
- change-notes/released
- experimental/ir/implementation
- internal
- unaliased_ssa/internal
- utils/model-generator
- internal
- test/utils/model-generator
- dataflow
- typebasedflow
- tools
- docs
- codeql
- codeql-cli
- codeql-language-guides
- ql-language-reference
- reusables
- go/ql
- lib
- change-notes
- released
- semmle/go
- concepts
- frameworks
- stdlib
- security
- src
- InconsistentCode
- RedundantCode
- Security
- CWE-020
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-117
- CWE-190
- CWE-209
- CWE-312
- CWE-601
- CWE-643
- CWE-918
- change-notes/released
- experimental
- CWE-090
- CWE-840
- CWE-918
- CWE-942
- frameworks
- test
- experimental
- CWE-090
- CWE-840
- frameworks
- CleverGo
- Fiber
- library-tests/semmle/go
- concepts/HTTP
- frameworks
- BeegoOrm
- Beego
- Echo
- ElazarlGoproxy
- Macaron
- Revel
- query-tests
- InconsistentCode
- ConstantLengthComparison
- MissingErrorCheck
- RedundantCode
- CompareIdenticalValues
- DuplicateCondition
- DuplicateSwitchCase
- SelfAssignment
- Security
- CWE-020
- IncompleteHostnameRegexp
- SuspiciousCharacterInRegexp
- CWE-022
- CWE-078
- CWE-089
- CWE-190
- CWE-209
- CWE-312
- CWE-601/OpenUrlRedirect
- CWE-643
- CWE-918
- javascript/ql
- experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling
- lib
- change-notes
- released
- semmle/javascript
- dataflow
- frameworks
- heuristics
- security
- dataflow
- regexp
- src
- RegExp
- Security
- CWE-022
- CWE-073
- CWE-078
- CWE-079
- CWE-094
- CWE-117
- CWE-134
- CWE-200
- CWE-201
- CWE-209
- CWE-312
- CWE-327
- CWE-338
- CWE-352
- CWE-367
- CWE-400
- CWE-451
- CWE-502
- CWE-506
- CWE-598
- CWE-601
- CWE-611
- CWE-640
- CWE-643
- CWE-730
- CWE-776
- CWE-834
- CWE-912
- change-notes
- released
- experimental/poi
- meta/analysis-quality
- test
- library-tests/frameworks
- Express
- Firebase
- HTTP-heuristics
- HTTP
- Micro
- Nest
- NodeJSLib
- Templating
- connect
- fastify
- hapi
- koa
- restify
- query-tests
- RegExp/RegExpAlwaysMatches
- Security
- CWE-022
- TaintedPath
- ZipSlip
- CWE-073
- CWE-078
- CWE-079/UnsafeHtmlConstruction
- CWE-094
- CodeInjection
- UnsafeDynamicMethodAccess
- CWE-117
- CWE-134
- CWE-200
- CWE-201
- CWE-209
- CWE-312
- CWE-327
- CWE-338
- CWE-367
- CWE-400
- DeepObjectResourceExhaustion
- RemovePropertyInjection
- CWE-502
- CWE-506
- CWE-601
- ClientSideUrlRedirect
- ServerSideUrlRedirect
- CWE-611
- CWE-640
- CWE-643
- CWE-730
- CWE-776
- CWE-834
- CWE-912
- java
- documentation/library-coverage
- kotlin-extractor/src/main
- java/com/semmle/extractor/java
- kotlin
- utils
- ql
- lib
- change-notes
- released
- semmle/code
- java
- dataflow
- frameworks
- javaee
- spring
- struts
- security
- src
- Likely Bugs/Reflection
- Security/CWE/CWE-094
- change-notes
- released
- experimental
- Security/CWE
- CWE-094
- CWE-352
- semmle/code/java/frameworks
- utils/model-generator
- internal
- test
- experimental/query-tests/security/CWE-094
- kotlin/library-tests
- dataflow/func
- exprs
- java_and_kotlin
- methods
- library-tests
- annotation-arrays
- annotations
- frameworks/thymeleaf
- query-tests/security/CWE-094
- stubs
- apache-freemarker-2.3.31/freemarker
- cache
- core
- template
- utility
- apache-velocity-2.3/org
- apache/velocity
- app
- event
- context
- runtime
- directive
- parser
- node
- resource
- loader
- util
- util
- introspection
- slf4j
- event
- spi
- jinjava-2.6.0
- com
- fasterxml/jackson
- annotation
- core
- filter
- format
- io
- sym
- type
- util
- databind
- annotation
- cfg
- deser
- impl
- introspect
- jsonFormatVisitors
- jsonschema
- jsontype
- node
- ser
- impl
- std
- type
- util
- google/common/collect
- hubspot/jinjava
- doc
- el/ext
- interpret
- errorcategory
- lib
- expression
- exptest
- filter
- fn
- tag
- eager
- loader
- mode
- objects
- serialization
- random
- tree
- output
- parse
- util
- jinjava/javax/el
- pebble-3.1.5/com/mitchellbosecke/pebble
- mitchellbosecke/pebble
- attributes
- methodaccess
- cache
- extension
- escaper
- lexer
- loader
- node
- expression
- operator
- parser
- template
- tokenParser
- utils
- template
- thymeleaf-3.0.14/org/thymeleaf
- cache
- context
- dialect
- engine
- expression
- inline
- linkbuilder
- messageresolver
- model
- postprocessor
- preprocessor
- processor
- cdatasection
- comment
- doctype
- element
- processinginstruction
- templateboundaries
- text
- xmldeclaration
- templatemode
- templateparser/markup/decoupled
- templateresolver
- templateresource
- misc
- bazel
- scripts/models-as-data
- python/ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new
- internal
- frameworks
- Stdlib
- data/internal
- security/dataflow
- src
- Exceptions
- Security
- CWE-020-ExternalAPIs
- CWE-295
- CWE-352
- CWE-918
- change-notes/released
- experimental/semmle/python
- frameworks
- meta/alerts
- test
- 2/query-tests/Exceptions
- generators
- raising
- experimental
- dataflow
- TestUtil
- basic
- calls
- coverage
- summaries
- meta
- library-tests/frameworks/data
- query-tests/Security/CWE-022-TarSlip
- ql/ql/src
- codeql_ql/ast
- queries/style
- ruby/ql
- consistency-queries
- examples/snippets
- lib
- change-notes
- released
- codeql/ruby
- ast
- internal
- controlflow
- internal
- dataflow
- internal
- filters
- frameworks
- core/internal
- data
- internal
- http_clients
- security
- internal
- regexp
- typetracking
- src
- change-notes/released
- experimental
- cwe-807
- decompression-api
- improper-memoization
- manually-check-http-verb
- performance
- weak-params
- filters
- queries
- analysis
- diagnostics
- metrics
- security
- cwe-022
- cwe-078
- cwe-079
- cwe-089
- cwe-094
- cwe-116
- cwe-117
- cwe-1333
- cwe-134
- cwe-295
- cwe-300
- cwe-312
- cwe-327
- cwe-352
- cwe-502
- cwe-506
- cwe-601
- cwe-611
- cwe-732
- cwe-798
- cwe-829
- cwe-912
- cwe-918
- summary
- variables
- test
- TestUtilities
- library-tests
- ast
- calls
- constants
- control
- erb
- escape_sequences
- gems
- literals
- misc
- modules
- operations
- params
- concepts
- dataflow
- api-graphs
- array-flow
- call-sensitivity
- global
- hash-flow
- local
- params
- pathname-flow
- string-flow
- summaries
- type-tracker
- frameworks
- action_view
- active_resource
- active_support
- archive
- arel
- files
- http_clients
- pathname
- railties
- modules
- security
- query-tests
- experimental/improper-memoization
- security
- cwe-022
- cwe-078
- cwe-079
- cwe-089
- cwe-094
- cwe-116/IncompleteMultiCharacterSanitization
- cwe-117
- cwe-1333-polynomial-redos
- cwe-1333-regexp-injection
- cwe-134
- cwe-300
- cwe-312
- cwe-502
- oj-global-options
- unsafe-deserialization
- cwe-506
- cwe-601
- cwe-611
- cwe-807-user-controlled-bypass
- cwe-829
- cwe-912
- cwe-918
- swift
- codegen
- generators
- lib
- test
- extractor
- infra
- remapping
- visitors
- ql
- lib
- codeql/swift
- controlflow/internal
- elements
- decl
- generated
- decl
- expr
- type
- src/queries/Security/CWE-311
- test
- extractor-tests
- declarations
- generated
- decl
- IfConfigClause
- IfConfigDecl
- ImportDecl
- expr
- UnresolvedDeclRefExpr
- UnresolvedDotExpr
- UnresolvedMemberChainResultExpr
- UnresolvedPatternExpr
- UnresolvedTypeConversionExpr
- type/UnresolvedType
- library-tests
- ast
- controlflow/graph
- query-tests/Security/CWE-311
- tools
- fishhook
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,528 files changed
+34479
-9712
lines changedLines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
197 | 197 |
| |
198 | 198 |
| |
199 | 199 |
| |
200 |
| - | |
| 200 | + | |
201 | 201 |
| |
202 | 202 |
| |
203 | 203 |
| |
|
Lines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
4 | 4 |
| |
5 | 5 |
| |
6 | 6 |
| |
| 7 | + | |
| 8 | + | |
7 | 9 |
| |
8 | 10 |
| |
9 | 11 |
| |
|
Lines changed: 10 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
4 | 4 |
| |
5 | 5 |
| |
6 | 6 |
| |
| 7 | + | |
| 8 | + | |
7 | 9 |
| |
8 | 10 |
| |
9 | 11 |
| |
| |||
30 | 32 |
| |
31 | 33 |
| |
32 | 34 |
| |
| 35 | + | |
| 36 | + | |
| 37 | + | |
| 38 | + | |
| 39 | + | |
| 40 | + | |
| 41 | + | |
| 42 | + | |
33 | 43 |
| |
34 | 44 |
| |
35 | 45 |
|
Lines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
4 | 4 |
| |
5 | 5 |
| |
6 | 6 |
| |
| 7 | + | |
| 8 | + | |
7 | 9 |
| |
8 | 10 |
| |
9 | 11 |
| |
|
Lines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
30 | 30 |
| |
31 | 31 |
| |
32 | 32 |
| |
| 33 | + | |
| 34 | + | |
33 | 35 |
| |
34 | 36 |
| |
35 | 37 |
| |
|
Lines changed: 12 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
20 | 24 |
| |
21 | 25 |
| |
22 | 26 |
| |
| |||
37 | 41 |
| |
38 | 42 |
| |
39 | 43 |
| |
| 44 | + | |
40 | 45 |
| |
41 | 46 |
| |
42 | 47 |
| |
| |||
48 | 53 |
| |
49 | 54 |
| |
50 | 55 |
| |
| 56 | + | |
| 57 | + | |
| 58 | + | |
51 | 59 |
| |
52 | 60 |
| |
53 | 61 |
| |
| |||
68 | 76 |
| |
69 | 77 |
| |
70 | 78 |
| |
| 79 | + | |
71 | 80 |
| |
72 | 81 |
| |
73 | 82 |
| |
74 | 83 |
| |
75 | 84 |
| |
76 |
| - | |
| 85 | + | |
77 | 86 |
| |
78 | 87 |
| |
79 | 88 |
| |
| 89 | + | |
80 | 90 |
| |
81 | 91 |
| |
82 | 92 |
| |
| |||
532 | 542 |
| |
533 | 543 |
| |
534 | 544 |
| |
535 |
| - | |
| 545 | + | |
536 | 546 |
| |
537 | 547 |
| |
538 | 548 |
| |
|
Lines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
1 | 3 |
| |
2 | 4 |
| |
3 | 5 |
| |
|
Lines changed: 5 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + |
Lines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + |
0 commit comments