X Tutup
The Wayback Machine - https://web.archive.org/web/20240110180306/https://github.com/github/codeql/labels/JS
Skip to content

Issues: github/codeql

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
78 Open 2,049 Closed
78 Open 2,049 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

JS: faster TypeScript extraction
JS
#15271 opened Jan 9, 2024 by erik-krogh Loading…
7
Js/Py/Rb: Report any extracted file as successfully extracted
JS Python Ruby
#15256 opened Jan 8, 2024 by sidshank • Draft
Post-release preparation for codeql-cli-2.16.0
C# C++ DataFlow Library documentation Go Java JS Python Ruby Swift
#15254 opened Jan 8, 2024 by codeql-ci Loading…
@alexet
JS: Web Cache Deception Express
documentation JS
#15180 opened Dec 20, 2023 by aydinnyunus • Draft
6
Javascript: Regex Global Flag in Test Function
documentation JS
#15163 opened Dec 19, 2023 by aydinnyunus • Draft
8
JS: Env Injection query
documentation JS
#15060 opened Dec 10, 2023 by am0o0 • Draft
1
JS: Extends CredentialsNode class mostly related to JWT authentication packages
JS
#14666 opened Nov 2, 2023 by am0o0 • Draft
[Feature branch] JS: Migrate to shared dataflow library
ATM DataFlow Library JS no-change-note-required This PR does not need a change note
#14412 opened Oct 9, 2023 by asgerf Loading…
31
JS: Add Permissive CORS query (CWE-942)
awaiting-response The CodeQL team is awaiting further input or clarification from the original reporter of this issue. documentation JS
#14342 opened Sep 29, 2023 by maikypedia Loading…
69
JS: provide command execution sinks for execa package
JS
#14294 opened Sep 22, 2023 by am0o0 • Draft
28
JS: Dynamic import as code injection sink
documentation JS
#14293 opened Sep 22, 2023 by am0o0 • Draft
7
JS: Shelljs improvement
JS
#14291 opened Sep 22, 2023 by am0o0 • Draft
Dynamic: add TypeModel.isTypeUsed
JS Python Ruby
#14120 opened Sep 1, 2023 by asgerf • Draft
1
JS: decoding JWT without signature verification
documentation JS
#14088 opened Aug 29, 2023 by am0o0 • Draft
21
JS: Fix a bug caused by capture nodes not being SourceNodes
JS
#13904 opened Aug 7, 2023 by asgerf • Draft
JS: Add 'vulnerableCallModel' extension point
JS Python Ruby
#13727 opened Jul 12, 2023 by asgerf • Draft
3
The TypeScript parser wrapper crashed with exit code 1 JS question Further information is requested
#13656 opened Jul 4, 2023 by eustas
1
JS: Add dot.js support
awaiting-response The CodeQL team is awaiting further input or clarification from the original reporter of this issue. documentation JS
#13624 opened Jun 29, 2023 by jorgectf Loading…
19
JS: Decompression Bombs
documentation external-contribution JS
#13554 opened Jun 24, 2023 by am0o0 • Draft
21
Shared: support quoted operands in access path components
C# Go Java JS no-change-note-required This PR does not need a change note Python Ruby Swift
#13441 opened Jun 13, 2023 by asgerf • Draft
JS: Move Directive subclasses into module and support "use client/server"
JS no-change-note-required This PR does not need a change note
#13303 opened May 26, 2023 by asgerf • Draft
1
js/ecb-rejection/cwe-326
awaiting-response The CodeQL team is awaiting further input or clarification from the original reporter of this issue. documentation JS
#12945 opened Apr 26, 2023 by cedarvillecmcollins Loading…
@erik-krogh
20
False positive - DOMParser().parseFromString is treated as XSS sink false-positive JS
#12882 opened Apr 20, 2023 by tyage
Compute fewer intermediate API node paths
JS Python Ruby
#12863 opened Apr 18, 2023 by asgerf • Draft
Sync dbschemes
C# C++ Go Java JS Python QL-for-QL Ruby Swift
#12849 opened Apr 17, 2023 by aibaars • Draft
4
ProTip! Follow long discussions with comments:>50.
X Tutup