Tag all security queries in supported languages' experimental directories with an experimental tag

2026-04-30 19:26:02 +02:00 · 2022-12-14 17:15:50 +01:00
parent a92acf5218
commit 4ec401a3f6
148 changed files with 155 additions and 3 deletions
--- a/javascript/ql/src/experimental/Security/CWE-094/UntrustedCheckout.ql
+++ b/javascript/ql/src/experimental/Security/CWE-094/UntrustedCheckout.ql
@@ -9,6 +9,7 @@
 * @id js/actions/pull-request-target
 * @tags actions
 *       security
+ *       experimental
 *       external/cwe/cwe-094
 */

--- a/javascript/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql
+++ b/javascript/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql
@@ -8,6 +8,7 @@
 * @security-severity 5
 * @id js/predictable-token
 * @tags security
+ *       experimental
 *       external/cwe/cwe-340
 */

--- a/javascript/ql/src/experimental/Security/CWE-918/SSRF.ql
+++ b/javascript/ql/src/experimental/Security/CWE-918/SSRF.ql
@@ -6,6 +6,7 @@
 * @problem.severity error
 * @precision medium
 * @tags security
+ *       experimental
 *       external/cwe/cwe-918
 */