Tag all security queries in supported languages' experimental directories with an experimental tag

2025-12-24 04:36:35 +01:00 · 2022-12-14 17:15:50 +01:00
parent a92acf5218
commit 4ec401a3f6
148 changed files with 155 additions and 3 deletions
--- a/csharp/ql/src/experimental/CWE-099/TaintedWebClient.ql
+++ b/csharp/ql/src/experimental/CWE-099/TaintedWebClient.ql
@@ -7,6 +7,7 @@
 * @precision high
 * @id cs/webclient-path-injection
 * @tags security
+ *       experimental
 *       external/cwe/cwe-099
 *       external/cwe/cwe-023
 *       external/cwe/cwe-036
--- a/csharp/ql/src/experimental/CWE-918/RequestForgery.ql
+++ b/csharp/ql/src/experimental/CWE-918/RequestForgery.ql
@@ -6,6 +6,7 @@
 * @precision high
 * @id cs/request-forgery
 * @tags security
+ *       experimental
 *       external/cwe/cwe-918
 */

--- a/Features/CWE-1004/CookieWithoutHttpOnly.ql
+++ b/Features/CWE-1004/CookieWithoutHttpOnly.ql
@@ -9,6 +9,7 @@
 * @precision high
 * @id cs/web/cookie-httponly-not-set
 * @tags security
+ *       experimental
 *       external/cwe/cwe-1004
 */

--- a/Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
+++ b/Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
@@ -4,6 +4,7 @@
 * @kind problem
 * @tags security
 *       cryptography
+ *       experimental
 *       external/cwe/cwe-327
 * @id cs/azure-storage/unsafe-usage-of-client-side-encryption-version
 * @problem.severity error
--- a/Features/CWE-614/CookieWithoutSecure.ql
+++ b/Features/CWE-614/CookieWithoutSecure.ql
@@ -8,6 +8,7 @@
 * @precision high
 * @id cs/web/cookie-secure-not-set
 * @tags security
+ *       experimental
 *       external/cwe/cwe-319
 *       external/cwe/cwe-614
 */
--- a/Features/CWE-759/HashWithoutSalt.ql
+++ b/Features/CWE-759/HashWithoutSalt.ql
@@ -5,6 +5,7 @@
 * @problem.severity error
 * @id cs/hash-without-salt
 * @tags security
+ *       experimental
 *       external/cwe-759
 */

--- a/Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
+++ b/Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
@@ -4,6 +4,7 @@
 *   Higher precision version checks for exception throws, so less false positives are expected.
 * @kind problem
 * @tags security
+ *       experimental
 *       JsonWebTokenHandler
 *       manual-verification-required
 * @id cs/json-webtoken-handler/delegated-security-validations-always-return-true
--- a/Features/JsonWebTokenHandler/security-validation-disabled.ql
+++ b/Features/JsonWebTokenHandler/security-validation-disabled.ql
@@ -3,6 +3,7 @@
 * @description Check if security sensitive token validations for `JsonWebTokenHandler` are being disabled.
 * @kind problem
 * @tags security
+ *       experimental
 *       JsonWebTokenHandler
 *       manual-verification-required
 * @id cs/json-webtoken-handler/security-validations-disabled
--- a/Features/Serialization/DefiningDatasetRelatedType.ql
+++ b/Features/Serialization/DefiningDatasetRelatedType.ql
@@ -5,6 +5,7 @@
 * @problem.severity warning
 * @id cs/dataset-serialization/defining-dataset-related-type
 * @tags security
+ *       experimental
 */

 import csharp
--- a/Features/Serialization/DefiningPotentiallyUnsafeXmlSerializer.ql
+++ b/Features/Serialization/DefiningPotentiallyUnsafeXmlSerializer.ql
@@ -6,6 +6,7 @@
 * @precision medium
 * @id cs/dataset-serialization/defining-potentially-unsafe-xml-serializer
 * @tags security
+ *       experimental
 */

 import csharp
--- a/Features/Serialization/UnsafeTypeUsedDataContractSerializer.ql
+++ b/Features/Serialization/UnsafeTypeUsedDataContractSerializer.ql
@@ -6,6 +6,7 @@
 * @precision medium
 * @id cs/dataset-serialization/unsafe-type-used-data-contract-serializer
 * @tags security
+ *       experimental
 */

 import csharp
--- a/Features/Serialization/XmlDeserializationWithDataSet.ql
+++ b/Features/Serialization/XmlDeserializationWithDataSet.ql
@@ -6,6 +6,7 @@
 * @precision medium
 * @id cs/dataset-serialization/xml-deserialization-with-dataset
 * @tags security
+ *       experimental
 */

 import csharp
--- a/Features/backdoor/DangerousNativeFunctionCall.ql
+++ b/Features/backdoor/DangerousNativeFunctionCall.ql
@@ -6,6 +6,7 @@
 * @precision low
 * @id cs/backdoor/dangerous-native-functions
 * @tags security
+ *       experimental
 *       solorigate
 */

--- a/Features/backdoor/PotentialTimeBomb.ql
+++ b/Features/backdoor/PotentialTimeBomb.ql
@@ -6,6 +6,7 @@
 * @problem.severity warning
 * @id cs/backdoor/potential-time-bomb
 * @tags security
+ *       experimental
 *       solorigate
 */

--- a/Features/backdoor/ProcessNameToHashTaintFlow.ql
+++ b/Features/backdoor/ProcessNameToHashTaintFlow.ql
@@ -3,6 +3,7 @@
 * @description Flow from a function retrieving process name to a hash function.
 * @kind path-problem
 * @tags security
+ *       experimental
 *       solorigate
 * @problem.severity warning
 * @precision medium