Commit 31e9876
committed
File tree
- .github
- workflows
- cpp/ql
- lib
- change-notes
- released
- semmle/code/cpp
- commons
- dataflow/internal
- ir/dataflow/internal
- security
- src
- Likely Bugs
- Memory Management
- OO
- Security/CWE/CWE-611
- change-notes
- released
- experimental/Security/CWE/CWE-476
- test
- experimental/query-tests/Security/CWE
- CWE-020/NoCheckBeforeUnsafePutUser
- CWE-476/semmle/tests
- library-tests/string_analysis
- query-tests/Security/CWE/CWE-611
- csharp
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- lib
- change-notes
- released
- semmle/code/csharp
- dataflow/internal
- rangeanalysis
- exprs
- frameworks/system
- src
- API Abuse
- Documentation
- Security Features/CWE-091
- Stubs
- Telemetry
- change-notes/released
- utils/model-generator/internal
- test
- library-tests
- cil
- attributes
- typeAnnotations
- conversion/operator
- dataflow/external-models
- dispatch
- query-tests/Security Features/CWE-091/XMLInjection
- tools
- docs
- codeql
- codeql-cli
- ql-language-reference
- support/reusables
- ql-libraries/dataflow
- javascript/ql
- lib
- change-notes
- released
- semmle/javascript
- dataflow
- internal
- frameworks
- data/internal
- internal
- security
- dataflow
- performance
- src
- Declarations
- Security
- CWE-020
- examples
- CWE-094
- examples
- change-notes
- released
- experimental
- Security
- CWE-020
- examples
- CWE-094
- semmle/javascript
- test
- experimental/Security/CWE-094
- library-tests/TypeTracking
- query-tests
- Performance/ReDoS
- Security
- CWE-020
- IncompleteHostnameRegExp
- IncompleteUrlSchemeCheck
- IncompleteUrlSubstringSanitization
- IncorrectSuffixCheck
- examples
- MissingOriginCheck
- MissingRegExpAnchor
- UntrustedDataToExternalAPI
- UselessCharacterEscape
- CWE-079
- DomBasedXss
- XssThroughDom
- CWE-094/ExpressionInjection
- .github/workflows
- CWE-601/ServerSideUrlRedirect
- java
- documentation/library-coverage
- kotlin-explorer
- src/main/kotlin
- kotlin-extractor
- src/main
- java/com/semmle
- extractor/java
- util
- array
- basic
- concurrent
- data
- exception
- expansion
- extraction
- files
- io
- csv
- logging
- process
- projectstructure
- trap
- dependencies
- pathtransformers
- unicode
- zip
- kotlin
- comments
- utils
- versions
- v_1_4_32
- v_1_5_31
- v_1_6_10
- v_1_6_20
- resources/META-INF/services
- ql
- consistency-queries
- lib
- change-notes
- released
- config
- semmle/code
- java
- controlflow
- dataflow
- internal
- rangeanalysis
- deadcode
- dispatch
- frameworks
- android
- spring
- security
- upgrades/37f33da42d2cffa6ad8b26feaa6beed1c5ce3149
- src
- Advisory/Declarations
- Diagnostics
- Language Abuse
- Likely Bugs
- Arithmetic
- Comparison
- Concurrency
- Resource Leaks
- Statements
- Termination
- Performance
- Security/CWE
- CWE-190
- CWE-200
- CWE-319
- CWE-335
- CWE-614
- Telemetry
- Violations of Best Practice
- Boolean Logic
- Dead Code
- Exception Handling
- Implementation Hiding
- Naming Conventions
- legacy
- change-notes
- released
- experimental
- Security/CWE
- CWE-200
- CWE-297
- CWE-321
- CWE-400
- CWE-552
- CWE-939
- semmle/code/java/frameworks
- utils/model-generator/internal
- test
- experimental/query-tests/security
- CWE-321
- CWE-552
- kotlin
- library-tests
- annotation_classes
- annotations/jvmName
- arrays
- classes
- comments
- companion_objects
- compilation-units
- controlflow
- basic
- dominance
- paths
- plot
- coroutines
- data-classes
- dataflow
- extensionMethod
- func
- notnullexpr
- stmtexpr
- taint
- whenexpr
- empty
- exprs_typeaccess
- exprs
- extensions_recursion
- extensions
- fake_overrides
- all_java
- all_kotlin
- kotlin_calling_java
- files
- generic-inner-classes
- generic-instance-methods
- generic-methods
- generic-selective-extraction
- generic-type-bounds
- generics-location
- generics
- inherited-callee
- inheritence-substitution
- instances
- interface-delegate
- java_and_kotlin
- java_properties
- literals
- methods-mixed-java-and-kotlin
- methods
- mixed-java-and-kotlin
- modifiers
- multiple_extensions
- multiple_files
- no-when-branch-found
- object
- properties
- recursive-instantiations
- stack-overflow-1
- stack-overflow-2
- reflection
- static-method-calls
- stmts
- this
- trap
- trivial
- type_aliases
- type_equivalences
- types
- vararg
- variables
- query-tests
- DeadRefTypes
- MissingOverrideAnnotation
- UselessNullCheck
- library-tests
- ValueDiscardingExpr
- dataflow/taint
- frameworks
- android
- intent
- widget
- okhttp
- retrofit
- query-tests/security
- CWE-200/semmle/tests
- CWE-311
- CWE-319
- CWE-614/semmle/tests
- stubs
- auth0-jwt-2.3/com/auth0/jwt
- algorithms
- exceptions
- interfaces
- google-android-9.0.0/android
- text
- method
- style
- widget
- jboss-vfs-3.2/org/jboss/vfs
- okhttp-4.9.3
- kotlin
- collections
- jvm
- functions
- internal/markers
- okhttp3
- internal
- cache
- concurrent
- connection
- http2
- http
- io
- tls
- ws
- okio
- retrofit-2.9.0
- kotlin
- collections
- jvm
- functions
- internal/markers
- ranges
- sequences
- text
- retrofit2
- undertow-io-2.2/io/undertow/server/handlers/resource
- misc/bazel
- python
- PoCs
- XmlParsing
- ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new/internal
- frameworks
- objects
- security/dataflow
- src
- Security
- CWE-352
- examples
- CWE-611
- examples
- CWE-776
- examples
- change-notes
- released
- experimental
- Security
- CWE-285
- CWE-611
- CWE-614
- semmle/python
- frameworks
- security
- dataflow
- injection
- test
- experimental
- dataflow/typetracking
- library-tests/frameworks/XML
- poc
- meta
- query-tests/Security
- CWE-285
- CWE-611-SimpleXmlRpcServer
- CWE-611
- CWE-614
- CWE-943
- library-tests
- ApiGraphs/py3
- frameworks
- django-v2-v3
- testapp
- testproj
- flask
- lxml
- stdlib
- xmltodict
- query-tests/Security
- CWE-611-Xxe
- CWE-776-XmlBomb
- ql/ql/src/codeql_ql
- ast
- style/docs
- ruby
- downgrades/1199e154f5e9b3560297633c6ebb4dfe0b191ae4
- extractor
- generator
- ql
- lib
- change-notes
- released
- codeql/ruby
- ast
- internal
- controlflow/internal
- dataflow
- internal
- frameworks
- core
- internal
- data/internal
- security
- upgrades/9fdd1d40fd3c3f8f9db8fabf5a353580d14c663a
- src
- change-notes
- released
- queries/security/cwe-352
- test/library-tests
- ast
- calls
- literals
- params
- controlflow/graph
- dataflow
- array-flow
- summaries
- type-tracker
- frameworks
- core
- files
- variables
- swift
- codegen
- lib
- templates
- test
- extractor
- trap
- ql/lib
- codeql/swift/generated
- decl
- expr
- pattern
- stmt
- type
- tools
- prebuilt
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
14 | | - | |
| 14 | + | |
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
33 | | - | |
| 33 | + | |
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
33 | | - | |
34 | | - | |
35 | | - | |
36 | | - | |
37 | | - | |
38 | | - | |
| 33 | + | |
| 34 | + | |
39 | 35 | | |
40 | 36 | | |
41 | 37 | | |
42 | 38 | | |
43 | | - | |
| 39 | + | |
44 | 40 | | |
45 | 41 | | |
46 | 42 | | |
47 | 43 | | |
48 | 44 | | |
49 | | - | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
37 | 37 | | |
38 | 38 | | |
39 | 39 | | |
| 40 | + | |
| 41 | + | |
| 42 | + | |
40 | 43 | | |
41 | 44 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
7 | 10 | | |
8 | 11 | | |
9 | 12 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
1 | 12 | | |
2 | 13 | | |
3 | 14 | | |
| |||
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 4 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
0 commit comments