Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
panicCreator
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Feb 25, 2021
Merge pull request #5151 from RasmusWL/django-get-redirect-url
Show description for e3b3825
yoff
authored
e3b3825
View commit details
Copy full SHA for e3b3825
View code at this point
Browse repository at this point
Merge pull request #4737 from yoff/python-dataflow-add-cast-nodes
Show description for 81b2931
RasmusWL
authored
81b2931
View commit details
Copy full SHA for 81b2931
View code at this point
Browse repository at this point
Merge pull request #5250 from tausbn/python-port-re-security-queries
Show description for 01d581e
tausbn
authored
01d581e
View commit details
Copy full SHA for 01d581e
View code at this point
Browse repository at this point
Add comment explaining tacky nature of code
yoff
committed
f150842
View commit details
Copy full SHA for f150842
View code at this point
Browse repository at this point
Python: Force read- and store steps to add nodes.
Show description for 5b51a34
yoff
committed
5b51a34
View commit details
Copy full SHA for 5b51a34
View code at this point
Browse repository at this point
Commits on Feb 24, 2021
Merge pull request #5253 from RasmusWL/no-getAnArg
Show description for bf66bdb
codeql-ci
authored
bf66bdb
View commit details
Copy full SHA for bf66bdb
View code at this point
Browse repository at this point
Python: Remove getAnArg in DataFlow::CallCfgNode
Show description for d05a8b8
RasmusWL
committed
d05a8b8
View commit details
Copy full SHA for d05a8b8
View code at this point
Browse repository at this point
Merge pull request #5208 from RasmusWL/flask-clean-models
Show description for 8262f03
yoff
authored
8262f03
View commit details
Copy full SHA for 8262f03
View code at this point
Browse repository at this point
Python: Use explicit argument specification instead of getAnArg
Show description for 5bb4a1a
RasmusWL
committed
5bb4a1a
View commit details
Copy full SHA for 5bb4a1a
View code at this point
Browse repository at this point
Python: Use source nodes and prevent bad join order
tausbn
committed
e77c105
View commit details
Copy full SHA for e77c105
View code at this point
Browse repository at this point
Python: Add deprecation notice to `mode_from_mode_object`
tausbn
committed
cac6c4a
View commit details
Copy full SHA for cac6c4a
View code at this point
Browse repository at this point
Merge pull request #5251 from tausbn/python-port-missing-host-key-validation-query
Show description for c3d2001
yoff
authored
c3d2001
View commit details
Copy full SHA for c3d2001
View code at this point
Browse repository at this point
Commits on Feb 23, 2021
Python: Import API graphs privately
tausbn
committed
2942a11
View commit details
Copy full SHA for 2942a11
View code at this point
Browse repository at this point
Python: Clean up query a bit
tausbn
committed
f241dba
View commit details
Copy full SHA for f241dba
View code at this point
Browse repository at this point
Python: Port missing host key query
tausbn
committed
002d0fe
View commit details
Copy full SHA for 002d0fe
View code at this point
Browse repository at this point
Python: Port URL sanitisation queries to API graphs
Show description for e812eb7
tausbn
committed
e812eb7
View commit details
Copy full SHA for e812eb7
View code at this point
Browse repository at this point
Merge pull request #5248 from tausbn/python-port-insecure-temporary-file
Show description for 358ade6
RasmusWL
authored
358ade6
View commit details
Copy full SHA for 358ade6
View code at this point
Browse repository at this point
Python: Port `py/insecure-temporary-file`
tausbn
committed
b8ce5e9
View commit details
Copy full SHA for b8ce5e9
View code at this point
Browse repository at this point
Merge pull request #5152 from RasmusWL/improve-pyyaml-support
Show description for 9eed17f
yoff
authored
9eed17f
View commit details
Copy full SHA for 9eed17f
View code at this point
Browse repository at this point
Python: Add INTERNAL annotation to Response::InstanceSource
Show description for 42de872
RasmusWL
committed
42de872
View commit details
Copy full SHA for 42de872
View code at this point
Browse repository at this point
Python: Add comment for MethodView being known subclass
RasmusWL
committed
8ebedf2
View commit details
Copy full SHA for 8ebedf2
View code at this point
Browse repository at this point
Commits on Feb 22, 2021
Merge pull request #5233 from yoff/python-for-tuple-iteration
Show description for e160c85
RasmusWL
authored
e160c85
View commit details
Copy full SHA for e160c85
View code at this point
Browse repository at this point
Commits on Feb 21, 2021
Python: Fix for-iteration of tuples
yoff
committed
46faba6
View commit details
Copy full SHA for 46faba6
View code at this point
Browse repository at this point
Commits on Feb 19, 2021
Python: Exclude flask.request imports as RemoteFlowSource
Show description for a19da54
RasmusWL
committed
a19da54
View commit details
Copy full SHA for a19da54
View code at this point
Browse repository at this point
Merge pull request #5203 from tausbn/python-add-typebacktrackers
Show description for 9798e60
RasmusWL
authored
9798e60
View commit details
Copy full SHA for 9798e60
View code at this point
Browse repository at this point
Commits on Feb 18, 2021
Merge branch 'main' into flask-clean-models
RasmusWL
committed
cc72fc8
View commit details
Copy full SHA for cc72fc8
View code at this point
Browse repository at this point
Python: Add missing QLdoc for FlaskMethodViewClass
RasmusWL
committed
9a42f2f
View commit details
Copy full SHA for 9a42f2f
View code at this point
Browse repository at this point
Update python/ql/src/semmle/python/dataflow/new/TypeTracker.qll
Show description for e9cbdc4
tausbn
and
RasmusWL
authored
e9cbdc4
View commit details
Copy full SHA for e9cbdc4
View code at this point
Browse repository at this point
Python: Flask model now ready to be publicly exposed
Show description for bb2613b
RasmusWL
committed
bb2613b
View commit details
Copy full SHA for bb2613b
View code at this point
Browse repository at this point
Python: Re-introduce Response::instance() in flask model
Show description for 35876f1
RasmusWL
committed
35876f1
View commit details
Copy full SHA for 35876f1
View code at this point
Browse repository at this point
Python: Align ViewClass naming with django
Show description for 141e266
RasmusWL
committed
141e266
View commit details
Copy full SHA for 141e266
View code at this point
Browse repository at this point
Python: Align flask taint modeling with rest of code
Show description for 19b7ea8
RasmusWL
committed
19b7ea8
View commit details
Copy full SHA for 19b7ea8
View code at this point
Browse repository at this point
Python: flask.make_response as InstanceSource of flask.Response
RasmusWL
committed
ba61099
View commit details
Copy full SHA for ba61099
View code at this point
Browse repository at this point
Python: Flask: Remove more type-tracking helper predicates
RasmusWL
committed
e3d530d
View commit details
Copy full SHA for e3d530d
View code at this point
Browse repository at this point
Python: Flask: Moderize app and blueprint
RasmusWL
committed
e4ea5f2
View commit details
Copy full SHA for e4ea5f2
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.