hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
codeql-cli-2.23.4
codeql/csharp/ql/test/query-tests/Security Features
History
Paolo Tranquilli c3fd06c8a4 Csharp: fix cs/web/missing-x-frame-options to also consider location elements 
As explained in

https://learn.microsoft.com/en-us/previous-versions/aspnet/ms178692(v=vs.100),

it is possible to add `system.webServer` elements nested inside
`location` elements in `Web.config`.
2025-10-17 11:27:31 +02:00
..
CWE-011
C#: Base tests for CWE-011 on stubs.
2023-06-15 15:22:42 +02:00
CWE-016
C#: Base tests for CWE-016 on stubs.
2023-06-15 15:22:43 +02:00
CWE-020
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-022
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-078
C#: Update test options files to point to the new stubs.
2025-01-31 10:36:57 +01:00
CWE-079
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-089
C#: Convert SQL injection test to use inline expectations.
2025-06-25 14:53:09 +02:00
CWE-089-2
C#: Add MaD models for Microsoft.Data.SqlClient.
2025-06-26 08:51:10 +02:00
CWE-090
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-091/XMLInjection
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-094
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-099
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-112
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-114/AssemblyPathInjection
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-117
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-119
C#: Base tests for CWE-119 on stubs.
2023-06-16 10:08:39 +02:00
CWE-134
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-201/ExposureInTransmittedData
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-209
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-248/MissingASPNETGlobalErrorHandler
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-285/MissingAccessControl
C#: Add another test for MissingAccessControl.ql
2025-06-20 11:49:30 +02:00
CWE-312
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-321/HardcodedSymmetricEncryptionKey
C#: Update all test util paths to point to the new location.
2024-12-12 13:21:31 +01:00
CWE-327
C#: Update test options files to point to the new stubs.
2025-01-31 10:36:57 +01:00
CWE-338
C#: Update all test util paths to point to the new location.
2024-12-12 13:21:31 +01:00
CWE-352
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-359
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-384
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-451/MissingXFrameOptions
Csharp: fix cs/web/missing-x-frame-options to also consider location elements
2025-10-17 11:27:31 +02:00
CWE-502
C#: Update test expected output.
2025-08-25 14:52:41 +02:00
CWE-539/PersistentCookie
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-548
C#: Base tests for CWE-548 on stubs.
2023-06-16 10:08:40 +02:00
CWE-601/UrlRedirect
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-611
C#: Add a stub for the System.Uri class for the CWE-611 test.
2025-10-01 14:44:54 -07:00
CWE-614/RequireSSL
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-639
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-643
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-730
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-798
C#: Update test options files to point to the new stubs.
2025-01-31 10:36:57 +01:00
CWE-807
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00
CWE-838
C#: Cleanup test options files.
2025-05-12 17:33:21 -04:00