Meta tags:

Headings (most frequently used words):

codeql, the, meet, write, and, run, queries, in, visual, studio, code, query, open, source, codebases, once, you, ve, installed, extension, capture, flag, product, platform, support, company,

Text of the page (most frequently used words):
codeql (25), the (20), #source (13), and (12), for (11), github (10), open (10), you (8), code (8), query (7), license (5), project (5), database (5), can (4), continuous (4), com (4), capture (4), find (4), create (4), run (4), sink (4), 2021 (3), about (3), security (3), codebases (3), under (3), osi (3), approved (3), research (3), analysis (3), codebase (3), queries (3), flag (3), java (3), docs (3), clone (3), using (3), visual (3), studio (3), terms (2), contact (2), help (2), features (2), used (2), that (2), released (2), databases (2), automated (2), integration (2), delivery (2), cases (2), any (2), software (2), these (2), take (2), vulnerability (2), this (2), your (2), all (2), download (2), get (2), cli (2), struts_9805 (2), https (2), see (2), step (2), vulnerabilities (2), write (2), discover (2), then (2), across (2), getnode (2), conf (2), pathnode (2), dataflow (2), lab (2), web (2), sep (2), privacy, inc, shop, press, careers, blog, company, status, training, community, forum, support, desktop, electron, atom, partners, developer, api, platform, resources, pricing, case, studies, enterprise, product, only, are, perform, academic, generate, during, following, hosted, maintained, test, have, whether, part, normal, engineering, processes, otherwise, except, express, set, forth, herein, uses, sales, team, look, previous, challenges, looking, hunting, challenge, through, will, hone, bug, finding, skills, also, learn, taint, tracking, contest, closed, since, june, but, still, fun, server, side, template, injection, yourself, started, visit, dskipassembly, command, mvn, dskiptests, struts_db, git, documentation, more, info, right, clicking, choosing, starter, workspace, add, instructions, search, want, once, installed, extension, downloading, agree, conditions, install, real, popular, how, powerful, bad, pattern, similar, occurrences, entire, meet, user, input, unsafe, deserialization, getmethodaccess, unsafedeserializationsink, select, hasflowpath, where, unsafedeserializationconfig, from, unsafedeserialization, free, with, our, industry, leading, semantic, engine, lets, though, were, data, variants, eradicating, forever, share, others, same, repo, repository, wayback, machine, http, archive, org, 20220915035802, timestamps, fail, success, 2023, 2022, oct, aug, jan, 2026, 703, captures,

Text of the page (random words):
codeql 703 captures 22 jan 2021 11 sep 2026 aug sep oct 15 2021 2022 2023 success fail about this capture timestamps the wayback machine http web archive org web 20220915035802 https codeql github com github docs repository license security lab docs repo license security lab codeql discover vulnerabilities across a codebase with codeql our industry leading semantic code analysis engine codeql lets you query code as though it were data write a query to find all variants of a vulnerability eradicating it forever then share your query to help others do the same codeql is free for research and open source unsafedeserialization ql from dataflow pathnode source dataflow pathnode sink unsafedeserializationconfig conf where conf hasflowpath source sink select sink getnode unsafedeserializationsink getmethodaccess source sink unsafe deserialization of source getnode user input meet codeql run real queries on popular open source codebases using codeql for visual studio code see how powerful it is to discover a bad pattern and then find similar occurrences across the entire codebase write and run queries in visual studio code install codeql for visual studio code by downloading you agree to the github codeql terms conditions once you ve installed the extension step 1 get a codeql database search github com for an open source project you want to research download and add the project s codeql database to vs code using these instructions or create a codeql database using the codeql cli step 2 query the code and find vulnerabilities clone the codeql starter workspace and open it in vs code run a query by right clicking it and choosing run query see the documentation for more info clone the project git clone https github com m y mo struts_9805 create a codeql database codeql database create struts_db s struts_9805 j 0 l java command mvn b dskiptests dskipassembly query open source codebases you can create codeql databases yourself for any project that s under an osi approved open source license to download codeql and get started visit the codeql cli docs codeql capture the flag looking for a vulnerability hunting challenge through this java capture the flag you will hone your bug finding skills and also learn all about codeql s taint tracking features the contest is closed since june 12 but you can still take it for fun and find a server side template injection in an open source java project take a look at the previous challenges go capture the flag github codeql can only be used on codebases that are released under an osi approved open source license or to perform academic research or to generate codeql databases for or during automated analysis continuous integration ci or continuous delivery cd in the following cases 1 on any open source codebase hosted and maintained on github com and 2 to test codeql queries you have released under an osi approved open source software license it can t be used for automated analysis continuous integration or continuous delivery whether as part of normal software engineering processes or otherwise except in the express cases set forth herein for these uses contact the sales team product features security enterprise case studies pricing resources platform developer api partners atom electron github desktop support help community forum training status contact github company about blog careers press shop 2021 github inc terms privacy