erik-krogh
|
cc7a9ef97a
|
rename more acronyms
|
2022-08-25 20:52:27 +02:00 |
|
Stephan Brandauer
|
1ed71e15f3
|
apply docreview feedback
|
2022-02-23 11:21:22 +01:00 |
|
Stephan Brandauer
|
2278e7f6e6
|
CWE 830 polish error messages
|
2022-02-22 11:41:54 +01:00 |
|
Stephan Brandauer
|
82330391c3
|
CWE-830 add support for setting attributes via setAttribute method
|
2022-02-22 11:41:54 +01:00 |
|
Stephan Brandauer
|
d80cd1aeb5
|
CWE 830 test where both branches in a ternary are unsafe
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
2934aa1a3a
|
rewrite docs, improve error messages, etc
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
d2335b65d5
|
stylistic improvements after review
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
9aec4437e2
|
polish qhelp for CWE-830 and add test file
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
44d86569ac
|
remove illegal chars from comments
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
fd77e27ed9
|
replace taint tracking by type tracking and merge remaining queries for CWE-830
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
8cafa6d562
|
improve error message in CWE-830
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
780fa97869
|
always require integrity checking for certain CDNs
|
2022-02-22 11:41:53 +01:00 |
|
Stephan Brandauer
|
8d397fea09
|
JS: query to find dynamic creations of DOM elements that use untrusted sources
|
2022-02-22 11:41:52 +01:00 |
|
Stephan Brandauer
|
b35c70994f
|
permit http urls to 127.0.0.1 and others
|
2022-02-22 11:41:52 +01:00 |
|
Stephan Brandauer
|
dd2b779a3c
|
add CWE 830 link to references
|
2022-02-22 11:41:52 +01:00 |
|
Stephan Brandauer
|
6722c17bb0
|
JS: Functionality from untrusted sources query (CWE-830)
|
2022-02-22 11:41:52 +01:00 |
|