hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
rc/3.19
codeql/javascript/ql/test/query-tests/Security
History
Napalys Klicius b19d1e0f57 Merge pull request #20151 from Napalys/js/command-line-libs 
JS: Enhance command injection detection for CLI argument parsing libraries
2025-08-18 09:32:29 +02:00
..
CWE-020
JS: exclude sinon module from regexp match calls
2025-06-23 20:25:17 +02:00
CWE-022
JS: moved execa test cases outside experimental
2025-06-24 09:08:13 +02:00
CWE-073
raw test output
2025-02-28 13:29:39 +01:00
CWE-078
add taint flow for arg/command-line-args with custom argv option
2025-08-01 13:34:08 +02:00
CWE-079
JS: track taint through serialize-javascript calls with object arguments
2025-06-16 10:38:20 +02:00
CWE-089
Add test case to ensure exec calls without middleware injection into Express are not flagged.
2025-03-30 14:09:15 +02:00
CWE-094
Merge pull request #19849 from asgerf/js/remove-legacy-actions-queries
2025-06-25 09:18:33 +02:00
CWE-116
Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js
2025-03-10 14:19:33 +01:00
CWE-117
raw test output
2025-02-28 13:29:39 +01:00
CWE-134
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-178
raw test output
2025-02-28 13:29:39 +01:00
CWE-200
Applied copilot suggestions.
2025-03-28 13:19:11 +01:00
CWE-201
raw test output
2025-02-28 13:29:39 +01:00
CWE-209
raw test output
2025-02-28 13:29:39 +01:00
CWE-295
raw test output
2025-02-28 13:29:39 +01:00
CWE-300
raw test output
2025-02-28 13:29:39 +01:00
CWE-312
JS: Remove js/actions/actions-artifact-leak
2025-06-23 14:39:28 +02:00
CWE-313
raw test output
2025-02-28 13:29:39 +01:00
CWE-326
raw test output
2025-02-28 13:29:39 +01:00
CWE-327
raw test output
2025-02-28 13:29:39 +01:00
CWE-338
raw test output
2025-02-28 13:29:39 +01:00
CWE-346
raw test output
2025-02-28 13:29:39 +01:00
CWE-347
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-352
raw test output
2025-02-28 13:29:39 +01:00
CWE-367
raw test output
2025-02-28 13:29:39 +01:00
CWE-377
raw test output
2025-02-28 13:29:39 +01:00
CWE-384
raw test output
2025-02-28 13:29:39 +01:00
CWE-400
Javascript: Update test files.
2025-04-23 15:41:41 +02:00
CWE-451
raw test output
2025-02-28 13:29:39 +01:00
CWE-502
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-506
raw test output
2025-02-28 13:29:39 +01:00
CWE-522-DecompressionBombs
Add TypedArrays flow summaries for Uint8Array and buffer property
2025-04-07 15:15:24 +02:00
CWE-598
raw test output
2025-02-28 13:29:39 +01:00
CWE-601
raw test output
2025-02-28 13:29:39 +01:00
CWE-611
JS: Remove duplicate '$ Alert' in libxml test
2025-03-10 14:23:44 +01:00
CWE-614
raw test output
2025-02-28 13:29:39 +01:00
CWE-640
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-643
raw test output
2025-02-28 13:29:39 +01:00
CWE-693
raw test output
2025-02-28 13:29:39 +01:00
CWE-730
Added new test cases for regexp injection with enviromental variable threat model enabled
2025-07-31 13:20:37 +02:00
CWE-754
raw test output
2025-02-28 13:29:39 +01:00
CWE-770
raw test output
2025-02-28 13:29:39 +01:00
CWE-776
raw test output
2025-02-28 13:29:39 +01:00
CWE-798
Updated modeling of aws-sdk with MaD
2025-04-28 14:00:12 +02:00
CWE-807
raw test output
2025-02-28 13:29:39 +01:00
CWE-829
raw test output
2025-02-28 13:29:39 +01:00
CWE-830
raw test output
2025-02-28 13:29:39 +01:00
CWE-834
raw test output
2025-02-28 13:29:39 +01:00
CWE-843
raw test output
2025-02-28 13:29:39 +01:00
CWE-862
raw test output
2025-02-28 13:29:39 +01:00
CWE-912
Added NodeJSFileSystemVectorWrite class for vectored write.
2025-03-28 13:07:23 +01:00
CWE-915
raw test output
2025-02-28 13:29:39 +01:00
CWE-916
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-918
Merge pull request #19784 from Napalys/js/express_middleware
2025-06-20 15:36:26 +02:00
CWE-1004
raw test output
2025-02-28 13:29:39 +01:00
CWE-1275
raw test output
2025-02-28 13:29:39 +01:00