github/codeql issues and pull requests

#16228 - Post-release preparation for codeql-cli-2.17.1

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16219 - Release preparation for version 2.17.1

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16210 - Dataflow: Add support for pretty-printed alert provenance in tests

Pull Request - State: closed - Opened by aschackmull almost 2 years ago - 3 comments
Labels: C#, JS, Java, Python, no-change-note-required, Go, Ruby, DataFlow Library

#16194 - Python: test the MaD path for constructor calls

Pull Request - State: closed - Opened by yoff almost 2 years ago - 2 comments
Labels: Python

#16189 - Python: Modifies check for py launcher on Windows

Pull Request - State: closed - Opened by sidshank almost 2 years ago
Labels: Python, no-change-note-required

#16181 - Dynamic languages: Deprecate models-as-data CSV interface

Pull Request - State: closed - Opened by hvitved almost 2 years ago
Labels: JS, Python, no-change-note-required, Ruby

#16173 - Python: Remove deprecated stubs for points-to tests

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago
Labels: Python

#16159 - Python: Fixup integration tests after no dep inst

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago
Labels: Python

#16158 - Python: Disable failing integration tests

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: Python, no-change-note-required

#16155 - Python: add test for `Argument[0, self, self:]` for instance methods

Pull Request - State: closed - Opened by yoff almost 2 years ago - 1 comment
Labels: Python

#16150 - Bump pymongo from 3.9 to 4.6.3 in /python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/PoC

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: Python, dependencies

#16135 - Python: Add Gradio models

Pull Request - State: closed - Opened by sylwia-budzynska almost 2 years ago - 11 comments
Labels: documentation, Python

#16127 - Python: Extractor: Remove dependency installation fallback

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago
Labels: Python

#16112 - Python: Various extractor fixups

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: documentation, Python, no-change-note-required

#16105 - Python: Promote Header Injection query from experimental

Pull Request - State: closed - Opened by joefarebrother almost 2 years ago - 4 comments
Labels: documentation, Python

#16102 - Post-release preparation for codeql-cli-2.17.0

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, Java, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#16098 - Revert "Release preparation for version 2.17.0"

Pull Request - State: closed - Opened by cklin almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16090 - Python: WTForms Denial of Service

Pull Request - State: closed - Opened by porcupineyhairs almost 2 years ago - 2 comments
Labels: documentation, Python, external-contribution

#16090 - Python: WTForms Denial of Service

Pull Request - State: closed - Opened by porcupineyhairs almost 2 years ago - 2 comments
Labels: documentation, Python, external-contribution

#16086 - Post-release preparation for codeql-cli-2.17.0

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16085 - Release preparation for version 2.17.0

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16048 - Post-release preparation for codeql-cli-2.16.6

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16041 - Python: open redirect protection example is still vulnerable

Issue - State: closed - Opened by stsewd almost 2 years ago - 3 comments
Labels: question, Python

#16010 - Python: Two small join-order fixes

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago - 2 comments
Labels: Python, no-change-note-required

#15986 - Release preparation for version 2.16.5

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15974 - Mergeback from `rc/3.13`

Pull Request - State: closed - Opened by dbartol almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15955 - Post-release preparation for codeql-cli-2.16.5

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15954 - Release preparation for version 2.16.5

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15942 - Python: clear-text logging of X.509 certificate

Issue - State: closed - Opened by woodruffw almost 2 years ago - 6 comments
Labels: Python, false-positive

#15936 - Python: No `fieldFlowBranchLimit` for `SummarizedCallable`s

Pull Request - State: closed - Opened by yoff almost 2 years ago - 4 comments
Labels: Python, no-change-note-required

#15923 - Properly shared `XML.qll` implementation

Pull Request - State: closed - Opened by hvitved almost 2 years ago - 2 comments
Labels: C#, JS, C++, Java, Python, no-change-note-required

#15923 - Properly shared `XML.qll` implementation

Pull Request - State: closed - Opened by hvitved almost 2 years ago - 2 comments
Labels: C#, JS, C++, Java, Python, no-change-note-required

#15905 - Python: Start modelling the standard library using MaD

Pull Request - State: closed - Opened by yoff almost 2 years ago - 3 comments
Labels: Python, no-change-note-required

#15903 - Python: test MaD syntax for keyword argument

Pull Request - State: closed - Opened by yoff almost 2 years ago - 2 comments
Labels: Python, no-change-note-required

#15879 - 2.16.4 Upgrade

Pull Request - State: closed - Opened by dilanbhalla almost 2 years ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15874 - Show lines of code data in debug mode only

Pull Request - State: closed - Opened by henrymercer almost 2 years ago - 2 comments
Labels: C#, JS, C++, Java, Python, no-change-note-required, Go, Ruby, QL-for-QL, Swift

#15855 - Python: Add test for `ReturnValue.TupleElement[n]`

Pull Request - State: closed - Opened by yoff almost 2 years ago
Labels: Python, no-change-note-required

#15853 - Data flow: Replace `hasLocationInfo` with `getLocation`

Pull Request - State: closed - Opened by hvitved almost 2 years ago - 2 comments
Labels: C#, C++, Java, Python, no-change-note-required, Go, Ruby, Swift, Kotlin, DataFlow Library

#15845 - Python: Build external extractor

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: documentation, Python, no-change-note-required

#15841 - Python: Add example of missing use-use flow

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago
Labels: Python

#15834 - Post-release preparation for codeql-cli-2.16.4

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15833 - Release preparation for version 2.16.4

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15832 - Revert "Release preparation for version 2.16.4"

Pull Request - State: closed - Opened by angelapwen almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15826 - Post-release preparation for codeql-cli-2.16.4

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15814 - Release preparation for version 2.16.4

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15813 - Revert "Release preparation for version 2.16.4"

Pull Request - State: closed - Opened by angelapwen almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15804 - Post-release preparation for codeql-cli-2.16.4

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago - 2 comments
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15801 - Release preparation for version 2.16.4

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15781 - Python: Fix missing DictionaryElementContents

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago - 2 comments
Labels: documentation, Python

#15776 - Python: Add type-tracking consistency query

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago - 6 comments
Labels: Python

#15775 - Python: Add consistency check for `PhaseDependentFlow`

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago
Labels: Python

#15755 - Python: Fix module level flow for iterable unpacking

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago
Labels: documentation, Python

#15754 - Python: Copy Python extractor to `codeql` repo

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: documentation, Python, no-change-note-required

#15734 - Data flow: Account for hidden `subpath` wrappers

Pull Request - State: closed - Opened by hvitved almost 2 years ago
Labels: C#, documentation, Python, Ruby, DataFlow Library

#15729 - python: Rewrite `HardcodedCredentials` away from `PointsTo`

Pull Request - State: closed - Opened by yoff almost 2 years ago - 1 comment
Labels: Python, no-change-note-required

#15720 - Python: Add precision to NoSQL query

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago - 3 comments
Labels: documentation, Python

#15715 - Python: New command execution sinks

Pull Request - State: closed - Opened by am0o0 almost 2 years ago - 11 comments
Labels: documentation, Python, no-change-note-required, external-contribution

#15708 - Share `getFileBySourceArchiveName` implementation

Pull Request - State: closed - Opened by hvitved almost 2 years ago - 3 comments
Labels: C#, JS, C++, Java, Python, no-change-note-required, Go, Ruby, QL-for-QL

#15695 - Python: Add `.copy()` method call as copy step

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: Python, no-change-note-required

#15672 - Post-release preparation for codeql-cli-2.16.3

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15666 - Release preparation for version 2.16.3

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15599 - Dataflow: update fieldFlowBranchLimit semantics

Pull Request - State: closed - Opened by aschackmull almost 2 years ago
Labels: C#, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15586 - Python: Update BUILD.bazel files.

Pull Request - State: closed - Opened by criemen almost 2 years ago
Labels: Python

#15557 - Release preparation for version 2.16.2

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15556 - Revert "Merge pull request #15522 from github/release-prep/2.16.2"

Pull Request - State: closed - Opened by dbartol almost 2 years ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15551 - python: Remove `TaintStepFromSummary`

Pull Request - State: closed - Opened by yoff almost 2 years ago - 3 comments
Labels: Python, no-change-note-required

#15549 - Dataflow: Add empty provenance column to PathGraph.

Pull Request - State: closed - Opened by aschackmull almost 2 years ago - 1 comment
Labels: C#, C++, depends on internal PR, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15540 - Capture flow: Take overwrites in nested scopes into account

Pull Request - State: closed - Opened by hvitved almost 2 years ago - 1 comment
Labels: Java, Python, no-change-note-required, Ruby, DataFlow Library

#15531 - Post-release preparation for codeql-cli-2.16.2

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15501 - Dataflow: Support alert provenance

Pull Request - State: closed - Opened by aschackmull about 2 years ago - 3 comments
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15480 - False positive in SensitiveDataHeuristics - exclude certification from maybeCertificate() regex

Pull Request - State: closed - Opened by ockers about 2 years ago - 1 comment
Labels: JS, documentation, Python, Ruby, Swift, external-contribution

#15466 - Python codeql analysis hangs at `UnusedModuleVariable`

Issue - State: closed - Opened by njzjz about 2 years ago - 3 comments
Labels: question, Python, acknowledged

#15465 - JS/TS/Python/Ruby: Renames diagnostic query files and tests

Pull Request - State: closed - Opened by sidshank about 2 years ago - 1 comment
Labels: JS, Python, no-change-note-required, Ruby

#15457 - Python: Model the `psycopg` package

Pull Request - State: closed - Opened by RasmusWL about 2 years ago
Labels: documentation, Python

#15414 - Release preparation for version 2.16.1

Pull Request - State: closed - Opened by codeql-ci about 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15399 - Release preparation for version 2.16.1

Pull Request - State: closed - Opened by codeql-ci about 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15398 - Python: Add `html.escape` as HTML sanitizer

Pull Request - State: closed - Opened by RasmusWL about 2 years ago - 1 comment
Labels: documentation, Python

#15397 - Python: Fix `deepcopy` mutable default FP

Pull Request - State: closed - Opened by tausbn about 2 years ago
Labels: Python, no-change-note-required

#15393 - All: delete outdated deprecations

Pull Request - State: closed - Opened by erik-krogh about 2 years ago
Labels: C#, JS, C++, WIP, documentation, Java, Python, Go, Ruby, QL-for-QL

#15390 - Python: Support `a` (ASCII) inline regex flag

Pull Request - State: closed - Opened by Marcono1234 about 2 years ago
Labels: documentation, Python

#15351 - JS/PY/JAVA/RB: mark the range [0-?] as good in the overly-large-range query

Pull Request - State: closed - Opened by erik-krogh about 2 years ago
Labels: JS, Java, Python, Ruby

#15345 - Python: Improve Regex flag parsing

Pull Request - State: closed - Opened by Marcono1234 about 2 years ago - 2 comments
Labels: documentation, Python

#15337 - Python extractor failure when Python 3.6 is used

Issue - State: closed - Opened by BullHacks3 about 2 years ago - 2 comments
Labels: question, Python, acknowledged

#15314 - Python: add new Pandas sinks

Pull Request - State: closed - Opened by R3x about 2 years ago - 3 comments
Labels: Python, external-contribution

#15308 - Release preparation for version 2.16.0

Pull Request - State: closed - Opened by codeql-ci about 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15260 - Data flow: Remove column from `mayBenefitFromCallContext`

Pull Request - State: closed - Opened by hvitved about 2 years ago
Labels: C#, C++, documentation, Java, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#15256 - Js/Py/Rb: Report any extracted file as successfully extracted

Pull Request - State: closed - Opened by sidshank about 2 years ago - 1 comment
Labels: JS, documentation, Python, Ruby

#15254 - Post-release preparation for codeql-cli-2.16.0

Pull Request - State: closed - Opened by codeql-ci about 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15250 - Release preparation for version 2.16.0

Pull Request - State: closed - Opened by codeql-ci about 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15237 - Python: Fix typo in upgrade script

Pull Request - State: closed - Opened by cklin about 2 years ago
Labels: Python

#15176 - Python: Mention more sanitisation options in py/url-redirection qhelp.

Pull Request - State: closed - Opened by max-schaefer about 2 years ago - 2 comments
Labels: documentation, Python, ready-for-doc-review

#15118 - Ruby: Track types in data flow

Pull Request - State: closed - Opened by hvitved about 2 years ago
Labels: C#, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15118 - Ruby: Track types in data flow

Pull Request - State: closed - Opened by hvitved about 2 years ago
Labels: C#, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#15044 - Python: Automated subclass models

Pull Request - State: closed - Opened by RasmusWL about 2 years ago - 1 comment
Labels: documentation, Python

#14863 - Python code QL reports (invalid?) parse error

Issue - State: open - Opened by sergei-maertens about 2 years ago - 3 comments
Labels: Python

#14654 - Python: Update debug query to changed API

Pull Request - State: closed - Opened by yoff over 2 years ago
Labels: Python

#14636 - Python: Add support for Python 3.12 type syntax

Pull Request - State: open - Opened by tausbn over 2 years ago
Labels: depends on internal PR, Python

#14634 - Post-release preparation for codeql-cli-2.15.2

Pull Request - State: closed - Opened by codeql-ci over 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#14631 - JS/Ruby/Python: Add neutralModel extensible predicate

Pull Request - State: closed - Opened by hmac over 2 years ago
Labels: JS, Python, no-change-note-required, Ruby

#14630 - Release preparation for version 2.15.2

Pull Request - State: closed - Opened by codeql-ci over 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

GitHub / github/codeql issues and pull requests