Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
998
Pull requests
454
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
test
query-tests
security
on
codeql-cli/v2.15.2
User selector
All users
Datepicker
All time
Commit history
Commits on Oct 24, 2023
Mass-rename MethodAccess -> MethodCall
smowton
authored
f552a15
View commit details
Copy full SHA for f552a15
View code at this point
Browse repository at this point
Commits on Oct 17, 2023
Add consistency check exception
atorralba
committed
4ecda9c
View commit details
Copy full SHA for 4ecda9c
View code at this point
Browse repository at this point
Commits on Oct 16, 2023
Java: Improve java/spring-disabled-csrf-protection
atorralba
committed
d08ee76
View commit details
Copy full SHA for d08ee76
View code at this point
Browse repository at this point
Commits on Sep 22, 2023
Java: Add missing flow step for ThreadLocal.initialValue.
aschackmull
committed
8ee1f8a
View commit details
Copy full SHA for 8ee1f8a
View code at this point
Browse repository at this point
Commits on Sep 21, 2023
Merge pull request #14268 from aschackmull/java/xmlparsers-typetrack
Show description for 7e04ac5
aschackmull
authored
7e04ac5
View commit details
Copy full SHA for 7e04ac5
View code at this point
Browse repository at this point
Commits on Sep 20, 2023
Java: Switch XmlParsers lib to lightweight data flow.
aschackmull
committed
5c40d55
View commit details
Copy full SHA for 5c40d55
View code at this point
Browse repository at this point
Commits on Sep 18, 2023
Merge pull request #13778 from geoffw0/javaparsemode
Show description for 4a37c2f
yoff
authored
4a37c2f
View commit details
Copy full SHA for 4a37c2f
View code at this point
Browse repository at this point
Merge pull request #14029 from atorralba/atorralba/apache-cxf-models
Show description for b08e410
atorralba
authored
b08e410
View commit details
Copy full SHA for b08e410
View code at this point
Browse repository at this point
Commits on Sep 13, 2023
Java: Fix test comment.
geoffw0
committed
af3d8c8
View commit details
Copy full SHA for af3d8c8
View code at this point
Browse repository at this point
Java: Port regex mode flag character fix from Python.
geoffw0
committed
8c3e778
View commit details
Copy full SHA for 8c3e778
View code at this point
Browse repository at this point
Commits on Aug 25, 2023
Java: Add new Apache CXF models
atorralba
committed
2448bc8
View commit details
Copy full SHA for 2448bc8
View code at this point
Browse repository at this point
Commits on Aug 24, 2023
Java: Remove redundant inline expectation test imports
jketema
committed
b550c06
View commit details
Copy full SHA for b550c06
View code at this point
Browse repository at this point
Consolidate all `InlineFlowTest` libraries in the dataflow qlpack
jketema
committed
9d573e5
View commit details
Copy full SHA for 9d573e5
View code at this point
Browse repository at this point
Merge pull request #13903 from atorralba/atorralba/jaxrs-mad-models
Show description for 8c32919
atorralba
authored
8c32919
View commit details
Copy full SHA for 8c32919
View code at this point
Browse repository at this point
Commits on Aug 23, 2023
Merge pull request #13773 from atorralba/atorralba/java/mdht-xxe-sink
Show description for 0f3918a
atorralba
authored
0f3918a
View commit details
Copy full SHA for 0f3918a
View code at this point
Browse repository at this point
Commits on Aug 17, 2023
Typos and style fixes
Show description for 929090a
egregius313
and
atorralba
committed
929090a
View commit details
Copy full SHA for 929090a
View code at this point
Browse repository at this point
Added ESAPI sanitizer
egregius313
committed
55fae2d
View commit details
Copy full SHA for 55fae2d
View code at this point
Browse repository at this point
Stubs for `org.owasp.esapi`
egregius313
committed
97d6e82
View commit details
Copy full SHA for 97d6e82
View code at this point
Browse repository at this point
Trust Boundary Work
egregius313
committed
f58590c
View commit details
Copy full SHA for f58590c
View code at this point
Browse repository at this point
TrustBoundary test ql file
egregius313
committed
2aba425
View commit details
Copy full SHA for 2aba425
View code at this point
Browse repository at this point
Commits on Aug 14, 2023
Java: Expose parts of the vquery message in the test.
geoffw0
committed
657642a
View commit details
Copy full SHA for 657642a
View code at this point
Browse repository at this point
Commits on Aug 7, 2023
Java: New models for JAX-RS
atorralba
committed
fb0102b
View commit details
Copy full SHA for fb0102b
View code at this point
Browse repository at this point
Commits on Jul 31, 2023
Java: Add XXE sinks for MDHT
atorralba
committed
2cbb7ed
View commit details
Copy full SHA for 2cbb7ed
View code at this point
Browse repository at this point
Commits on Jul 20, 2023
Java: Fix for multiple parse mode flags.
geoffw0
committed
369f88b
View commit details
Copy full SHA for 369f88b
View code at this point
Browse repository at this point
Java: Add test case.
geoffw0
committed
32c1088
View commit details
Copy full SHA for 32c1088
View code at this point
Browse repository at this point
Commits on Jul 19, 2023
C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.
aschackmull
committed
ae24d68
View commit details
Copy full SHA for ae24d68
View code at this point
Browse repository at this point
Commits on Jul 10, 2023
Add failing test
atorralba
committed
16529cd
View commit details
Copy full SHA for 16529cd
View code at this point
Browse repository at this point
Commits on Jun 27, 2023
Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks
Show description for a7c2a25
atorralba
authored
a7c2a25
View commit details
Copy full SHA for a7c2a25
View code at this point
Browse repository at this point
Commits on Jun 23, 2023
Merge branch 'main' into jorgectf/deserialization-lookahead
jorgectf
authored
7d0b880
View commit details
Copy full SHA for 7d0b880
View code at this point
Browse repository at this point
Add `SerialKiller` model
jorgectf
committed
b6e4ba6
View commit details
Copy full SHA for b6e4ba6
View code at this point
Browse repository at this point
Commits on Jun 15, 2023
Java: Rewrite `InlineFlowTest` as a parameterized module
jketema
committed
742eb8d
View commit details
Copy full SHA for 742eb8d
View code at this point
Browse repository at this point
Commits on Jun 14, 2023
Merge pull request #13235 from atorralba/atorralba/java/hudson-models
Show description for 182513a
atorralba
authored
182513a
View commit details
Copy full SHA for 182513a
View code at this point
Browse repository at this point
Commits on Jun 13, 2023
Merge pull request #13346 from jketema/inline-2
Show description for c3ba206
jketema
authored
c3ba206
View commit details
Copy full SHA for c3ba206
View code at this point
Browse repository at this point
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
atorralba
authored
ffe6768
View commit details
Copy full SHA for ffe6768
View code at this point
Browse repository at this point
Commits on Jun 9, 2023
Java: Rewrite inline expectation tests to use parameterized module
jketema
committed
49993b0
View commit details
Copy full SHA for 49993b0
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.