hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 09:43:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
codeql-cli-2.20.1
codeql/javascript/ql/test/query-tests/Security/CWE-094/CodeInjection
History
jorgectf 2ac334bf15 Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
..
lib
expand localFieldStep to use access-paths, and build access-paths in more cases
2022-09-13 21:43:06 +02:00
webix
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
actions.js
JS: Restrict getInput to indirect command injection query
2023-05-03 16:10:03 +02:00
angularjs.js
Merge remote-tracking branch 'upstream/next' into qlucie/master
2019-01-04 10:35:57 +00:00
bad-code-sanitization.js
add qhelp for js/bad-code-sanitization
2020-06-16 16:23:41 +02:00
CodeInjection.expected
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
CodeInjection.qlref
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
eslint-escope-build.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
express.js
add test for express-ws as a source
2023-02-13 15:26:50 +01:00
externs.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
HeuristicSourceCodeInjection.expected
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
HeuristicSourceCodeInjection.ql
JS: Remove use of deprecated API
2021-08-12 09:30:43 +02:00
ImproperCodeSanitization.expected
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
ImproperCodeSanitization.qlref
add query to detect improperly sanitized code
2020-06-10 19:50:12 +02:00
module.js
JavaScript: Improve modelling of Module.prototype._compile sink.
2021-07-12 15:32:21 +01:00
NoSQLCodeInjection.js
type-track objects where the "$where" property has been written
2020-09-24 20:55:25 +02:00
react-native.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
react.js
add js/code-injection sink for script tags in React
2021-01-29 12:50:17 +01:00
template-sinks.js
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
tst.js
recognize calls to Function where spread arguments are used
2022-09-07 22:55:51 +02:00
UnsafeCodeConstruction.expected
use SSA in the GetLaterAccess module
2023-03-21 15:19:15 +01:00
UnsafeCodeConstruction.qlref
add test for unsafe-code-construction query
2022-02-07 13:34:18 +01:00