codeql

codeql copied to clipboard

Use-After-Query.ql does not work on this simple situation

2

I use Use-After-Query.ql to detec a simple c code which exists UAF bug , but it doesn't works - Use-After-Query.ql ``` /** * @name Potential use after free * @description...

glorious064

JS/TS: insecure Helmet middleware (new query)

7

The [Helmet 🪖 middleware](https://helmetjs.github.io/) is used to set security-related HTTP headers in Express applications. This query finds instances where the middleware is configured with important ⚠️ security features disabled 🚫....

aegilops

There was a bug in the design of `TypeModel`, that meant when pruning models we have no way of knowing which types might be contributed via a `TypeModel`. This PR...

asgerf

CodeQL XSS False Positive when using ESAPI.encoder().encodeForHTML() to defend against XSS

1

I originally reported this here: "CodeQL XSS False Positives and XSS AutoFix incorrect location for defensive encoding" (https://github.com/orgs/community/discussions/122802), but am reporting it here because I was told this is a...

davewichers

This PR changes the CSV framework coverage reports.

github-actions[bot]

Part of https://github.com/github/codeql-python-team/issues/792 promoting https://github.com/github/codeql/pull/6360; Depends on https://github.com/github/codeql/pull/16696 Promotes the Cookie Injection query from experimental, finding instances of user input being used to set the name or value of a...

joefarebrother

This was causing some confusion [here](https://github.com/github/codeql/discussions/16890). Support for `switch` statements was added in https://github.com/github/codeql/pull/15941.

MathiasVP

hvitved

C++: Add support for `Element` content

9

This PR adds support for `Element` content for C++ like we have for other CodeQL supported languages. Given code such as: ```cpp std::vector v; int x = source(); v.push_back(x); //...

MathiasVP

Python : Arbitrary code execution due to Js2Py

3

Js2Py is a Javascript to Python translation library written in Python. It allows users to invoke JavaScript code directly from Python. The Js2Py interpreter by default exposes the entire standard...

porcupineyhairs