Add experimental,ml-generated tags

2026-05-18 21:27:08 +02:00 · 2022-08-22 15:59:16 +02:00
parent 72c204063d
commit ce2b59ae4a
144 changed files with 160 additions and 7 deletions
--- a/python/ql/src/experimental/Security/CWE-022/ZipSlip.ql
+++ b/python/ql/src/experimental/Security/CWE-022/ZipSlip.ql
@@ -10,6 +10,7 @@
 * @precision high
 * @tags security
 *       external/cwe/cwe-022
+ *       experimental
 */

 import python
--- a/python/ql/src/experimental/Security/CWE-074/TemplateInjection.ql
+++ b/python/ql/src/experimental/Security/CWE-074/TemplateInjection.ql
@@ -7,6 +7,7 @@
 * @id py/template-injection
 * @tags security
 *       external/cwe/cwe-074
+ *       experimental
 */

 import python
--- a/python/ql/src/experimental/Security/CWE-079/ReflectedXSS.ql
+++ b/python/ql/src/experimental/Security/CWE-079/ReflectedXSS.ql
@@ -10,6 +10,7 @@
 * @tags security
 *       external/cwe/cwe-079
 *       external/cwe/cwe-116
+ *       experimental
 */

 // determine precision above
--- a/python/ql/src/experimental/Security/CWE-091/Xslt.ql
+++ b/python/ql/src/experimental/Security/CWE-091/Xslt.ql
@@ -8,6 +8,7 @@
 * @id py/xslt-injection
 * @tags security
 *       external/cwe/cwe-643
+ *       experimental
 */

 import python
--- a/python/ql/src/experimental/Security/CWE-113/HeaderInjection.ql
+++ b/python/ql/src/experimental/Security/CWE-113/HeaderInjection.ql
@@ -8,6 +8,7 @@
 * @tags security
 *       external/cwe/cwe-113
 *       external/cwe/cwe-079
+ *       experimental
 */

 // determine precision above
--- a/python/ql/src/experimental/Security/CWE-1236/CsvInjection.ql
+++ b/python/ql/src/experimental/Security/CWE-1236/CsvInjection.ql
@@ -7,6 +7,7 @@
 * @id py/csv-injection
 * @tags security
 *       external/cwe/cwe-1236
+ *       experimental
 */

 import python
--- a/python/ql/src/experimental/Security/CWE-287/ImproperLdapAuth.ql
+++ b/python/ql/src/experimental/Security/CWE-287/ImproperLdapAuth.ql
@@ -6,6 +6,7 @@
 * @id py/improper-ldap-auth
 * @tags security
 *       external/cwe/cwe-287
+ *       experimental
 */

 // Determine precision above
--- a/python/ql/src/experimental/Security/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
+++ b/python/ql/src/experimental/Security/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
@@ -5,6 +5,7 @@
 * @tags security
 *       cryptography
 *       external/cwe/cwe-327
+ *       experimental
 * @id py/azure-storage/unsafe-client-side-encryption-in-use
 * @problem.severity error
 * @precision medium
--- a/python/ql/src/experimental/Security/CWE-338/InsecureRandomness.ql
+++ b/python/ql/src/experimental/Security/CWE-338/InsecureRandomness.ql
@@ -10,6 +10,7 @@
 * @id py/insecure-randomness
 * @tags security
 *       external/cwe/cwe-338
+ *       experimental
 */

 import python
--- a/python/ql/src/experimental/Security/CWE-347/JWTEmptyKeyOrAlgorithm.ql
+++ b/python/ql/src/experimental/Security/CWE-347/JWTEmptyKeyOrAlgorithm.ql
@@ -5,6 +5,7 @@
 * @problem.severity warning
 * @id py/jwt-empty-secret-or-algorithm
 * @tags security
+ *       experimental
 */

 // determine precision above
--- a/python/ql/src/experimental/Security/CWE-347/JWTMissingSecretOrPublicKeyVerification.ql
+++ b/python/ql/src/experimental/Security/CWE-347/JWTMissingSecretOrPublicKeyVerification.ql
@@ -6,6 +6,7 @@
 * @id py/jwt-missing-verification
 * @tags security
 *       external/cwe/cwe-347
+ *       experimental
 */

 // determine precision above
--- a/python/ql/src/experimental/Security/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql
+++ b/python/ql/src/experimental/Security/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql
@@ -8,6 +8,7 @@
 * @id py/ip-address-spoofing
 * @tags security
 *       external/cwe/cwe-348
+ *       experimental
 */

 import python
--- a/python/ql/src/experimental/Security/CWE-522/LDAPInsecureAuth.ql
+++ b/python/ql/src/experimental/Security/CWE-522/LDAPInsecureAuth.ql
@@ -7,6 +7,7 @@
 * @tags security
 *       external/cwe/cwe-522
 *       external/cwe/cwe-523
+ *       experimental
 */

 // determine precision above
--- a/python/ql/src/experimental/Security/CWE-611/SimpleXmlRpcServer.ql
+++ b/python/ql/src/experimental/Security/CWE-611/SimpleXmlRpcServer.ql
@@ -7,6 +7,7 @@
 * @id py/simple-xml-rpc-server-dos
 * @tags security
 *       external/cwe/cwe-776
+ *       experimental
 */

 private import python
--- a/python/ql/src/experimental/Security/CWE-614/CookieInjection.ql
+++ b/python/ql/src/experimental/Security/CWE-614/CookieInjection.ql
@@ -6,6 +6,7 @@
 * @id py/cookie-injection
 * @tags security
 *       external/cwe/cwe-614
+ *       experimental
 */

 // determine precision above
--- a/python/ql/src/experimental/Security/CWE-614/InsecureCookie.ql
+++ b/python/ql/src/experimental/Security/CWE-614/InsecureCookie.ql
@@ -9,6 +9,7 @@
 * @id py/insecure-cookie
 * @tags security
 *       external/cwe/cwe-614
+ *       experimental
 */

 // TODO: determine precision above
--- a/python/ql/src/experimental/Security/CWE-943/NoSQLInjection.ql
+++ b/python/ql/src/experimental/Security/CWE-943/NoSQLInjection.ql
@@ -7,6 +7,7 @@
 * @id py/nosql-injection
 * @tags security
 *       external/cwe/cwe-943
+ *       experimental
 */

 import python