Chris Smowton 5f31adc1f4 Update InsecureCookie.qhelp ...

Gratuitous commit to nudge CI

2024-10-30 09:34:49 +00:00

..

CVE-2018-1281

Python: Change all remaining occurrences of StrConst

2024-04-22 12:00:09 +00:00

CWE-020

Update CookieInjection.ql to remove period

2024-08-15 13:17:13 +01:00

CWE-020-ExternalAPIs

Python: Add alert provenance plumbing.

2024-04-12 09:20:08 +02:00

CWE-022

Python: Move TarSlip to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-078

Python: Move CommandInjection to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-079

Python: Move ReflectedXss to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-089

Python: Move SqlInjection to new dataflow API

2023-08-28 15:27:49 +02:00

CWE-090

Python: Move LdapInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-094

Python: Move CodeInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-113

Rename to response splitting

2024-04-24 14:05:40 +01:00

CWE-116

introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder

2023-05-01 10:42:13 +02:00

CWE-117

Python: Move LogInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-209

Python: Move StackTraceExposure to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-215

Python: Rewrite py/flask-debug

2022-10-04 20:41:18 +02:00

CWE-285

Python: Move PamAuthorization to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-295

Python: Expand modeling of paramiko

2023-04-18 11:57:20 +02:00

CWE-312

add new qhelp for clear-text-logging

2023-09-07 12:39:13 +02:00

CWE-326

update EC key size in help file

2022-12-01 11:56:44 -05:00

CWE-327

Address review comment.

2023-10-27 10:19:28 +01:00

CWE-352

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

CWE-377

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-502

Python: Move UnsafeDeserialization to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-601

Update qhelp with https:/example.com handling

2024-06-03 10:17:10 +02:00

CWE-611

Python: Move Xxe to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-614

Update InsecureCookie.qhelp

2024-10-30 09:34:49 +00:00

CWE-643

Python: Move XpathInjection to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-730

Update dead link.

2023-11-07 09:26:07 +00:00

CWE-732

merge in main

2022-06-23 09:05:32 +00:00

CWE-776

Python: Move XmlBomb to new dataflow API

2023-08-28 15:27:50 +02:00

CWE-798

Update python/ql/src/Security/CWE-798/HardcodedCredentials.ql

2024-07-01 14:29:00 +01:00

CWE-918

Python: Fix typo in SSRF example

2023-09-07 09:45:02 +02:00

CWE-943

Python: Add precision to NoSQL query

2024-02-26 11:23:43 +01:00