mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
Remove trailing periods from @name metadata in query files
Fixed 73 .ql query files where the @name metadata contained an ending period. This ensures consistency with the CodeQL query metadata style guidelines.
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Mutation of descriptor in `__get__` or `__set__` method.
|
||||
* @name Mutation of descriptor in `__get__` or `__set__` method
|
||||
* @description Descriptor objects can be shared across many instances. Mutating them can cause strange side effects or race conditions.
|
||||
* @kind problem
|
||||
* @tags quality
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Sensitive cookie missing `HttpOnly` attribute.
|
||||
* @name Sensitive cookie missing `HttpOnly` attribute
|
||||
* @description Cookies without the `HttpOnly` attribute set can be accessed by JS scripts, making them more vulnerable to XSS attacks.
|
||||
* @kind problem
|
||||
* @problem.severity warning
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Sensitive cookie with `SameSite` attribute set to `None`.
|
||||
* @name Sensitive cookie with `SameSite` attribute set to `None`
|
||||
* @description Cookies with `SameSite` set to `None` can allow for Cross-Site Request Forgery (CSRF) attacks.
|
||||
* @kind problem
|
||||
* @problem.severity warning
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Use of the 'global' statement.
|
||||
* @name Use of the 'global' statement
|
||||
* @description Use of the 'global' statement may indicate poor modularity.
|
||||
* @kind problem
|
||||
* @problem.severity recommendation
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Key points-to fails for expression.
|
||||
* @name Key points-to fails for expression
|
||||
* @description Expression does not "point-to" an object which prevents further points-to analysis.
|
||||
* @kind problem
|
||||
* @problem.severity info
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name points-to fails for expression.
|
||||
* @name points-to fails for expression
|
||||
* @description Expression does not "point-to" an object which prevents type inference.
|
||||
* @kind problem
|
||||
* @id py/points-to-failure
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name JavaScript code execution.
|
||||
* @name JavaScript code execution
|
||||
* @description Passing user supplied arguments to a Javascript to Python translation engine such as Js2Py can lead to remote code execution.
|
||||
* @problem.severity error
|
||||
* @security-severity 9.3
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Unsafe usage of v1 version of Azure Storage client-side encryption.
|
||||
* @name Unsafe usage of v1 version of Azure Storage client-side encryption
|
||||
* @description Using version v1 of Azure Storage client-side encryption is insecure, and may enable an attacker to decrypt encrypted data
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Weak KDF algorithm.
|
||||
* @name Weak KDF algorithm
|
||||
* @description Approved KDF algorithms must one of the following
|
||||
* ["PBKDF2" , "PBKDF2HMAC", "KBKDF", "KBKDFHMAC", "CONCATKDF", "CONCATKDFHASH"]
|
||||
* @assumption The value being used to derive a key (either a key or a password) is correct for the algorithm (i.e., a key is used for KBKDF and a password for PBKDF).
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Small KDF derived key length.
|
||||
* @name Small KDF derived key length
|
||||
* @description KDF derived keys should be a minimum of 128 bits (16 bytes).
|
||||
* @assumption If the key length is not explicitly provided (e.g., it is None or otherwise not specified) assumes the length is derived from the hash length.
|
||||
* @kind problem
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Weak KDF salt generation.
|
||||
* @name Weak KDF salt generation
|
||||
* @description KDF salts must be generated by an approved random number generator (os.urandom)
|
||||
* @kind problem
|
||||
* @id py/kdf-weak-salt-gen
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/**
|
||||
* @name Small KDF salt length.
|
||||
* @name Small KDF salt length
|
||||
* @description KDF salts should be a minimum of 128 bits (16 bytes).
|
||||
*
|
||||
* This alerts if a constant traces to to a salt length sink less than 128-bits or
|
||||
|
||||
Reference in New Issue
Block a user