Erik Krogh Kristensen
|
0adb588fe8
|
Merge pull request #9712 from erik-krogh/badRange
JS/RB/PY/Java: add suspicious range query
|
2022-08-15 13:55:44 +02:00 |
|
Erik Krogh Kristensen
|
0abbd50ca1
|
apply changes based on docs review
|
2022-08-09 13:51:40 +02:00 |
|
Erik Krogh Kristensen
|
a4262f8d91
|
add some more references to the overly-large-range qhelp
|
2022-07-13 11:20:24 +02:00 |
|
Erik Krogh Kristensen
|
c4f44bb67f
|
sync files
|
2022-07-13 10:01:26 +02:00 |
|
Erik Krogh Kristensen
|
220ff3cb2e
|
convert tabs to spaces in qhelp
|
2022-07-12 16:02:50 +02:00 |
|
Erik Krogh Kristensen
|
ff25451699
|
rename query to overly-large-range, and rewrite the @description
|
2022-07-12 16:02:46 +02:00 |
|
Erik Krogh Kristensen
|
a343ceaf8b
|
add suspicious-regexp-range query
|
2022-06-28 09:49:27 +02:00 |
|
Arthur Baars
|
2ae5e8158e
|
Python: import RegExpTreeView correctly
|
2022-03-28 12:41:32 +02:00 |
|
Arthur Baars
|
79cd7bf8ed
|
Python: create semmle/python/dataflow/new/Regex.qll
|
2022-03-21 15:57:19 +01:00 |
|
Arthur Baars
|
9412b331db
|
Revert "Revert "Python: switch to shared implementation of IncompleteHostnameRegExp.ql""
This reverts commit 6d24591416.
|
2022-03-18 16:31:22 +01:00 |
|
Arthur Baars
|
6d24591416
|
Revert "Python: switch to shared implementation of IncompleteHostnameRegExp.ql"
This reverts commit ce50f35dda.
|
2022-03-18 13:02:55 +01:00 |
|
Arthur Baars
|
cf4b834536
|
Address comments
|
2022-03-11 14:25:34 +01:00 |
|
Arthur Baars
|
ce50f35dda
|
Python: switch to shared implementation of IncompleteHostnameRegExp.ql
|
2022-03-07 16:10:08 +01:00 |
|
Arthur Baars
|
9e8930c192
|
Ruby: IncompleteHostnameRegExp.ql
|
2022-03-07 16:10:08 +01:00 |
|
Calum Grant
|
771e686946
|
Update security-severity scores
|
2021-06-15 13:25:17 +01:00 |
|
Calum Grant
|
a594afb828
|
Add security-severity metadata
|
2021-06-10 20:11:08 +01:00 |
|
Rasmus Wriedt Larsen
|
7afe3972d8
|
Revert "Merge pull request #5171 from RasmusWL/restructure-queries"
This reverts commit 8caafb3710, reversing
changes made to ec79094957.
|
2021-02-17 16:32:53 +01:00 |
|
Rasmus Wriedt Larsen
|
3a18881660
|
Python: Restructure query file location
Since I can never remember the CWE numbers
|
2021-02-16 11:36:10 +01:00 |
|
Anders Schack-Mulligen
|
8f2094f0bf
|
Autoformat.
|
2020-11-30 14:42:38 +01:00 |
|
Esben Sparre Andreasen
|
89305865d0
|
JS: make sanitization a "common" technique rather than "important"
|
2020-08-26 15:41:54 +02:00 |
|
Taus Brock-Nannestad
|
f07a7bf8cf
|
Python: Autoformat everything using qlformat.
Will need subsequent PRs fixing up test failures (due to deprecated
methods moving around), but other than that everything should be
straight-forward.
|
2020-07-07 15:43:52 +02:00 |
|
Taus Brock-Nannestad
|
01fb1e3786
|
Python: Get rid of deprecated terms in code and .qhelp.
|
2020-06-19 16:51:09 +02:00 |
|
Taus Brock-Nannestad
|
87a9f51c78
|
Python: Autoformat all .ql files.
|
2020-03-30 11:59:10 +02:00 |
|
Rasmus Wriedt Larsen
|
2648e34f1a
|
Python: Autoformat security
|
2020-01-31 14:49:18 +01:00 |
|
Sauyon Lee
|
0040c9fb4c
|
Update links to OWASP cheat sheet
|
2019-11-06 20:21:47 -08:00 |
|
Mark Shannon
|
28799441af
|
Python: Fix false positive in 'Incomplete URL substring sanitization' query.
|
2019-04-25 18:11:01 +01:00 |
|
Mark Shannon
|
3850f87879
|
Make qhelp for 'Incomplete URL substring sanitization' consistent across languages.
|
2019-01-25 16:47:23 +00:00 |
|
Mark Shannon
|
6ddbed7d95
|
Python: Minor tweaks to qldoc and release note.
|
2019-01-25 11:34:41 +00:00 |
|
Mark Shannon
|
88d8cb514c
|
Python: Two new queries for URL and hostname sanitization (CWE-020).
|
2019-01-24 12:57:14 +00:00 |
|