Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
panicCreator
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Feb 24, 2021
Python: Use explicit argument specification instead of getAnArg
Show description for 5bb4a1a
RasmusWL
committed
5bb4a1a
View commit details
Copy full SHA for 5bb4a1a
View code at this point
Browse repository at this point
Merge pull request #5251 from tausbn/python-port-missing-host-key-validation-query
Show description for c3d2001
yoff
authored
c3d2001
View commit details
Copy full SHA for c3d2001
View code at this point
Browse repository at this point
Commits on Feb 23, 2021
Python: Clean up query a bit
tausbn
committed
f241dba
View commit details
Copy full SHA for f241dba
View code at this point
Browse repository at this point
Python: Port missing host key query
tausbn
committed
002d0fe
View commit details
Copy full SHA for 002d0fe
View code at this point
Browse repository at this point
Merge pull request #5248 from tausbn/python-port-insecure-temporary-file
Show description for 358ade6
RasmusWL
authored
358ade6
View commit details
Copy full SHA for 358ade6
View code at this point
Browse repository at this point
Python: Port `py/insecure-temporary-file`
tausbn
committed
b8ce5e9
View commit details
Copy full SHA for b8ce5e9
View code at this point
Browse repository at this point
Merge pull request #5152 from RasmusWL/improve-pyyaml-support
Show description for 9eed17f
yoff
authored
9eed17f
View commit details
Copy full SHA for 9eed17f
View code at this point
Browse repository at this point
Commits on Feb 17, 2021
Python: Add a single missing QLDoc
RasmusWL
committed
4880350
View commit details
Copy full SHA for 4880350
View code at this point
Browse repository at this point
Revert "Merge pull request #5171 from RasmusWL/restructure-queries"
Show description for 7afe397
RasmusWL
committed
7afe397
View commit details
Copy full SHA for 7afe397
View code at this point
Browse repository at this point
Python: Move ExternalAPI queries back under Security
Show description for cf9ad0c
RasmusWL
committed
cf9ad0c
View commit details
Copy full SHA for cf9ad0c
View code at this point
Browse repository at this point
Commits on Feb 16, 2021
Python: Restructure query file location
Show description for 3a18881
RasmusWL
committed
3a18881
View commit details
Copy full SHA for 3a18881
View code at this point
Browse repository at this point
Commits on Feb 12, 2021
Python: Mention yaml.safe_load in the qhelp
RasmusWL
committed
f328e84
View commit details
Copy full SHA for f328e84
View code at this point
Browse repository at this point
Commits on Jan 20, 2021
Python: Simple port of URL redirect query
Show description for d8bfa35
RasmusWL
committed
d8bfa35
View commit details
Copy full SHA for d8bfa35
View code at this point
Browse repository at this point
Commits on Dec 17, 2020
Merge pull request #4735 from RasmusWL/python-untrusted-flow
Show description for 39acc9a
yoff
authored
39acc9a
View commit details
Copy full SHA for 39acc9a
View code at this point
Browse repository at this point
Commits on Dec 8, 2020
Merge pull request #4773 from RasmusWL/path-injection-improvements
Show description for 3bddb94
yoff
authored
3bddb94
View commit details
Copy full SHA for 3bddb94
View code at this point
Browse repository at this point
Python: Reword qhelp text
Show description for 9765598
RasmusWL
and
felicitymay
authored
9765598
View commit details
Copy full SHA for 9765598
View code at this point
Browse repository at this point
Commits on Dec 3, 2020
Python: Highlight os.path.join behavior with absolute paths
RasmusWL
committed
e53ed47
View commit details
Copy full SHA for e53ed47
View code at this point
Browse repository at this point
Commits on Nov 30, 2020
Python: Remove leftover note to self in qhelp file
RasmusWL
committed
a08e1db
View commit details
Copy full SHA for a08e1db
View code at this point
Browse repository at this point
Autoformat.
aschackmull
committed
8f2094f
View commit details
Copy full SHA for 8f2094f
View code at this point
Browse repository at this point
Commits on Nov 27, 2020
Python: Fix UntrustedDataToExternalAPI.qhelp
RasmusWL
committed
cbfcfdf
View commit details
Copy full SHA for cbfcfdf
View code at this point
Browse repository at this point
Commits on Nov 26, 2020
Python: Untrusted data used in external APIs
Show description for 9e4910f
RasmusWL
committed
9e4910f
View commit details
Copy full SHA for 9e4910f
View code at this point
Browse repository at this point
Commits on Nov 6, 2020
Python: Move UnsafeDeserialization configuration to own file
RasmusWL
committed
9ebe59d
View commit details
Copy full SHA for 9ebe59d
View code at this point
Browse repository at this point
Python: Move ReflectedXSS configuration to own file
RasmusWL
committed
d38c48d
View commit details
Copy full SHA for d38c48d
View code at this point
Browse repository at this point
Python: Move PathInjection configuration to own file
Show description for 1897a0d
RasmusWL
committed
1897a0d
View commit details
Copy full SHA for 1897a0d
View code at this point
Browse repository at this point
Python: Move SqlInjection configuration to own file
RasmusWL
committed
0c6bd84
View commit details
Copy full SHA for 0c6bd84
View code at this point
Browse repository at this point
Python: Move CommandInjection configuration to own file
RasmusWL
committed
6299b73
View commit details
Copy full SHA for 6299b73
View code at this point
Browse repository at this point
Python: Move CodeInjection configuration to own file
Show description for 7c04c59
RasmusWL
committed
7c04c59
View commit details
Copy full SHA for 7c04c59
View code at this point
Browse repository at this point
Commits on Nov 2, 2020
Python: More import fixups
tausbn
committed
fb6a02e
View commit details
Copy full SHA for fb6a02e
View code at this point
Browse repository at this point
Commits on Oct 30, 2020
Python: Promote experimental queries
Show description for f903e4f
tausbn
committed
f903e4f
View commit details
Copy full SHA for f903e4f
View code at this point
Browse repository at this point
Commits on Oct 1, 2020
Fix OWASP broken links
smowton
committed
578ea1a
View commit details
Copy full SHA for 578ea1a
View code at this point
Browse repository at this point
Commits on Sep 30, 2020
changed to AES
fatenhealy
authored
03d8fc7
View commit details
Copy full SHA for 03d8fc7
View code at this point
Browse repository at this point
Commits on Sep 13, 2020
Update broken_crypto.py to AES instead of Blowfish
fatenhealy
authored
6f20516
View commit details
Copy full SHA for 6f20516
View code at this point
Browse repository at this point
Update BrokenCryptoAlgorithm - Blowfish to AES
fatenhealy
authored
826fc0a
View commit details
Copy full SHA for 826fc0a
View code at this point
Browse repository at this point
Commits on Aug 26, 2020
JS: make sanitization a "common" technique rather than "important"
esbena
committed
8930586
View commit details
Copy full SHA for 8930586
View code at this point
Browse repository at this point
Commits on Jul 7, 2020
Python: Autoformat everything using `qlformat`.
Show description for f07a7bf
tausbn
committed
f07a7bf
View commit details
Copy full SHA for f07a7bf
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.