20 Commits

Author	SHA1	Message	Date
erik-krogh	5ffce86768	change the defaults in the qhelp for missing-rate-limit to something more reasonable	2023-08-10 13:40:17 +02:00
Mark Vogelgesang	c9119848d9	Updated express-rate-limit example to match implementation examples found on packages README	2023-01-18 14:42:40 -05:00
erik-krogh	442749bb7f	JS: add heuristic variants of queries that use RemoteFlowSource	2022-12-19 12:01:22 +01:00
erik-krogh	368f84785b	fix some more style-guide violations in the alert-messages	2022-10-07 11:22:22 +02:00
Erik Krogh Kristensen	6799232009	fix typo in qldoc	2022-04-19 11:09:27 +02:00
Erik Krogh Kristensen	2e5d435bea	add CWE-400, and add a reference to DoS attacks	2022-04-14 18:37:50 +02:00
Erik Krogh Kristensen	41bdd8f4da	minor fixes	2022-04-13 10:11:07 +02:00
Erik Krogh Kristensen	a2d2626c9c	add security severity	2022-04-12 16:34:00 +02:00
Erik Krogh Kristensen	d64df30724	reintroduce the reverted qhelp	2022-04-12 16:33:06 +02:00
Erik Krogh Kristensen	e2b7f7d05d	reintroduce the number sinks	2022-04-12 16:26:10 +02:00
Erik Krogh Kristensen	688b2b6898	use the Query.qll pattern	2022-04-12 15:52:52 +02:00
Erik Krogh Kristensen	8fb54c3f32	move js/resource-exhaustion out of experimental	2022-04-12 15:51:36 +02:00
Asger Feldthaus	218b746f6f	JS: Rename getAUseSite -> getRouteInstallation	2021-12-15 16:21:41 +01:00
Asger Feldthaus	23480b2d8f	JS: Remove stray TODO	2021-12-07 10:49:14 +01:00
Asger Feldthaus	5269933461	JS: Port missing rate limiting query	2021-12-07 10:44:19 +01:00
Calum Grant	771e686946	Update security-severity scores	2021-06-15 13:25:17 +01:00
Calum Grant	a594afb828	Add security-severity metadata	2021-06-10 20:11:08 +01:00
Sauyon Lee	0040c9fb4c	Update links to OWASP cheat sheet	2019-11-06 20:21:47 -08:00
Max Schaefer	31bb39a810	JavaScript: Autoformat all QL files.	2019-01-07 10:15:45 +00:00
Pavel Avgustinov	b55526aa58	QL code and tests for C#/C++/JavaScript.	2018-08-02 17:53:23 +01:00