12 Commits

Author	SHA1	Message	Date
Asger F	ae680e747b	JS: Port LoopBoundInjection	2023-10-13 13:15:04 +02:00
erik-krogh	368f84785b	fix some more style-guide violations in the alert-messages	2022-10-07 11:22:22 +02:00
erik-krogh	6ec03d4738	apply suggestions from doc review	2022-09-12 13:16:39 +02:00
erik-krogh	aa56ca37ae	make the alert messages of taint-tracking queries more consistent	2022-09-05 14:04:52 +02:00
Asger Feldthaus	c4e8af983a	JS: Update score and add CWE-730 to LoopBoundInjection ... This is a denial-of-service query, but was missing the CWE-730 tag ("denial of service") and consequently had a lower score than the other DoS queries.	2021-10-05 10:10:01 +02:00
Asger Feldthaus	f6da030572	JS: Migrate to *Query.qll convention	2021-08-12 09:30:18 +02:00
Calum Grant	771e686946	Update security-severity scores	2021-06-15 13:25:17 +01:00
Calum Grant	a594afb828	Add security-severity metadata	2021-06-10 20:11:08 +01:00
Erik Krogh Kristensen	1ae8e25603	change precision of js/loop-bound-injection and fix a false positive	2019-10-22 09:21:19 +02:00
Erik Krogh Kristensen	7671b6759b	import DataFlow::PathGraph from the ql file instead of the qll file	2019-09-19 11:59:45 +02:00
Erik Krogh Kristensen	c4f27ed4cc	rename TaintedLength to LoopBoundInjection	2019-09-13 11:12:01 +01:00
Erik Krogh Kristensen	673e883c21	use superscript to denote the size of the tainted object	2019-09-13 11:00:11 +01:00