hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
codeql-cli-2.20.1
codeql/javascript/ql/test/query-tests/Security
History
Michael Nebel c3fe3e468c Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
..
CWE-020
Added tests forIncompleteHostnameRegExp and normalizedPaths using matchAll
2024-11-05 09:22:26 +01:00
CWE-022
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-073
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-078
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-079
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-089
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-094
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
CWE-116
JS: fixed bad alert messages when it came to incomplete sanitization for new RegExp objects
2024-11-29 11:14:45 +01:00
CWE-117
Now catches usage of RegExp. after matchAll usage.
2024-11-08 08:59:31 +01:00
CWE-134
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-178
Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql
2024-11-25 12:12:12 +01:00
CWE-200
JS: Update expected test output
2024-10-04 08:35:33 +02:00
CWE-201
JavaScript: Remove references to LGTM
2022-12-19 15:15:17 +00:00
CWE-209
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-295
add test for https.createServer in DisablingCertificateValidation.ql
2023-03-30 14:15:25 +02:00
CWE-300
add js/http-dependency query
2022-01-19 10:05:39 +01:00
CWE-312
Update RegExp handling and add test case
2024-11-28 14:13:40 +01:00
CWE-313
remove some FPs in js/password-in-configuration-file
2022-10-26 11:51:56 +02:00
CWE-326
Add support for importing NPM modules in XSJS sources
2024-08-13 14:45:03 +02:00
CWE-327
Address review comment.
2023-10-27 10:19:28 +01:00
CWE-338
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-346
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-347
update expected output
2022-01-28 12:21:33 +01:00
CWE-352
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-367
fix that js/file-system-race could have FPs related to loops
2022-10-11 13:41:51 +02:00
CWE-377
add query for detecting insecure temprary files
2022-01-18 14:54:56 +01:00
CWE-384
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-400
JS: Added tests for ReDos with unknownFlags, everything seems to be good
2024-11-28 11:26:46 +01:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-506
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-522-DecompressionBombs
comments improvement,separate module file, fix tests
2023-10-07 12:02:39 +02:00
CWE-598
fix wrong comment
2022-05-31 08:38:03 +02:00
CWE-601
Make suggestion to replace example.com more explicit.
2023-09-12 16:54:05 +01:00
CWE-611
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-614
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-640
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-643
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-693
Fixed expected test results for Helmet query
2024-06-26 11:31:57 +01:00
CWE-730
JS: now Reg Exp injection treats unknownFlags as sanitization, MetacharEscapeSanitizer
2024-11-28 11:26:58 +01:00
CWE-754
Fix associated test
2022-12-20 12:51:13 +09:00
CWE-770
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-776
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-798
apply changes from @erik-krogh
2024-08-01 20:14:36 +02:00
CWE-807
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-830
Moved from experimental into default queries
2024-07-11 11:44:01 +01:00
CWE-834
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-843
JS: Expand test case
2022-09-07 14:18:01 +02:00
CWE-862
add a js/empty-password-in-configuration-file query
2022-01-19 10:48:45 +01:00
CWE-912
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-915
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
Javascript: Update all test util paths to point to the new location.
2024-12-12 13:54:25 +01:00
CWE-1004
add session{key,id} as sensitive info
2021-10-26 13:46:59 +02:00
CWE-1275
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00