Search results

Missing code injection TP in JavaScript rule

acknowledgedGitHub staff acknowledges this issueGitHub staff acknowledges this issue

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#18979 In github/codeql;

· Anemone95 opened on Mar 11, 2025

isSanitizerGuard works incorrectly when the function name startwith "isValid"

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#17393 In github/codeql;

· oicu0619 opened on Sep 6, 2024

Don't divide CODEQL_RAM in half

enhancementNew feature or requestNew feature or request

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#16780 In github/codeql;

· mat-sylvia-mark43 opened on Jun 18, 2024

TypeScriptParser error

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#16357 In github/codeql;

· kexinoh opened on Apr 29, 2024

TypeScript: CodeQL seems to hang after 44s and stops after 6h

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#15852 In github/codeql;

· Apollon77 opened on Mar 8, 2024

False positive - DOMParser().parseFromString is treated as XSS sink

false-positive

JS

Status: Open.

#12882 In github/codeql;

· tyage opened on Apr 20, 2023

javascript: Property access on null or undefined

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#12722 In github/codeql;

· ttttmr opened on Mar 31, 2023

Javascript: How to define an own type and mark its attributes and types

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#12524 In github/codeql;

· ttttmr opened on Mar 15, 2023

.json files not included in database

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#9946 In github/codeql;

· GunnarHakansson opened on Aug 2, 2022

LGTM.com - false positive for SolidJS's <code>ref</code> attribute

false-positive

JS

not securityThis issue does not relate to a security queryThis issue does not relate to a security query

Status: Open.

#9792 In github/codeql;

· LunaBorowska opened on Jul 10, 2022

LGTM.com - false positive - js/unvalidated-message-origin wrongly detects window.chrome.webview.addEventListener('message' ...

false-positive

JS

Status: Open.

#9541 In github/codeql;

· TimBarham opened on Jun 14, 2022

[JavaScript] - Incomplete string escaping or encoding

JS

questionFurther information is requestedFurther information is requested

Status: Open.

#9450 In github/codeql;

· sridharpratapa opened on Jun 6, 2022