Remove trailing periods from @name metadata in query files

Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
This commit is contained in:
Felicity Chapman
2025-11-26 14:29:51 +00:00
parent adc13e374e
commit caf6b950ac
73 changed files with 73 additions and 73 deletions

View File

@@ -1,5 +1,5 @@
/**
* @name Mutation of descriptor in `__get__` or `__set__` method.
* @name Mutation of descriptor in `__get__` or `__set__` method
* @description Descriptor objects can be shared across many instances. Mutating them can cause strange side effects or race conditions.
* @kind problem
* @tags quality

View File

@@ -1,5 +1,5 @@
/**
* @name Sensitive cookie missing `HttpOnly` attribute.
* @name Sensitive cookie missing `HttpOnly` attribute
* @description Cookies without the `HttpOnly` attribute set can be accessed by JS scripts, making them more vulnerable to XSS attacks.
* @kind problem
* @problem.severity warning

View File

@@ -1,5 +1,5 @@
/**
* @name Sensitive cookie with `SameSite` attribute set to `None`.
* @name Sensitive cookie with `SameSite` attribute set to `None`
* @description Cookies with `SameSite` set to `None` can allow for Cross-Site Request Forgery (CSRF) attacks.
* @kind problem
* @problem.severity warning

View File

@@ -1,5 +1,5 @@
/**
* @name Use of the 'global' statement.
* @name Use of the 'global' statement
* @description Use of the 'global' statement may indicate poor modularity.
* @kind problem
* @problem.severity recommendation

View File

@@ -1,5 +1,5 @@
/**
* @name Key points-to fails for expression.
* @name Key points-to fails for expression
* @description Expression does not "point-to" an object which prevents further points-to analysis.
* @kind problem
* @problem.severity info

View File

@@ -1,5 +1,5 @@
/**
* @name points-to fails for expression.
* @name points-to fails for expression
* @description Expression does not "point-to" an object which prevents type inference.
* @kind problem
* @id py/points-to-failure

View File

@@ -1,5 +1,5 @@
/**
* @name JavaScript code execution.
* @name JavaScript code execution
* @description Passing user supplied arguments to a Javascript to Python translation engine such as Js2Py can lead to remote code execution.
* @problem.severity error
* @security-severity 9.3

View File

@@ -1,5 +1,5 @@
/**
* @name Unsafe usage of v1 version of Azure Storage client-side encryption.
* @name Unsafe usage of v1 version of Azure Storage client-side encryption
* @description Using version v1 of Azure Storage client-side encryption is insecure, and may enable an attacker to decrypt encrypted data
* @kind path-problem
* @tags security

View File

@@ -1,5 +1,5 @@
/**
* @name Weak KDF algorithm.
* @name Weak KDF algorithm
* @description Approved KDF algorithms must one of the following
* ["PBKDF2" , "PBKDF2HMAC", "KBKDF", "KBKDFHMAC", "CONCATKDF", "CONCATKDFHASH"]
* @assumption The value being used to derive a key (either a key or a password) is correct for the algorithm (i.e., a key is used for KBKDF and a password for PBKDF).

View File

@@ -1,5 +1,5 @@
/**
* @name Small KDF derived key length.
* @name Small KDF derived key length
* @description KDF derived keys should be a minimum of 128 bits (16 bytes).
* @assumption If the key length is not explicitly provided (e.g., it is None or otherwise not specified) assumes the length is derived from the hash length.
* @kind problem

View File

@@ -1,5 +1,5 @@
/**
* @name Weak KDF salt generation.
* @name Weak KDF salt generation
* @description KDF salts must be generated by an approved random number generator (os.urandom)
* @kind problem
* @id py/kdf-weak-salt-gen

View File

@@ -1,5 +1,5 @@
/**
* @name Small KDF salt length.
* @name Small KDF salt length
* @description KDF salts should be a minimum of 128 bits (16 bytes).
*
* This alerts if a constant traces to to a salt length sink less than 128-bits or