Présentation
Run real queries on popular open source codebases using CodeQL for Visual Studio Code. See how powerful it is to discover a bad pattern and then find similar occurrences across the entire codebase.
Looking for a vulnerability hunting challenge? Through this Java Capture the Flag, you will hone your bug finding skills and also learn all about CodeQL's taint tracking features. The contest is closed since June 12, but you can still take it for fun, and find a Server-Side Template Injection in an open source Java project.
Download and add the project’s CodeQL database to VS Code using these instructions, or create a CodeQL database using the CodeQL CLI.
You can create CodeQL databases yourself for any project that's under an OSI-approved open source license. To download CodeQL and get started, visit the CodeQL CLI docs.
Informations pratiques
- Informations mises à jour le
Fiche découverte par PHPBB Lab Bot. Page source — mar. 22 sept. 2026 04:45
