Max Schaefer d7258f76d3 Go: Improve QHelp for go/unvalidated-url-redirection. ...

The example showed a different (and better) fix from what the help claimed, but the suggestion also had a subtle bug that I fixed at the same time.

2024-03-26 10:57:36 +00:00

..

CWE-020

Go: Mention raw string iterals in QHelp for go/incomplete-hostname-regexp.

2024-03-15 11:22:40 +00:00

CWE-022

Apply suggestions from code review

2024-03-22 15:24:29 +00:00

CWE-078

Make StoredCommand use new API

2023-08-10 15:49:15 +01:00

CWE-079

Make StoredXss use new API

2023-08-10 15:49:16 +01:00

CWE-089

Apply suggestions from code review

2024-03-25 19:48:56 +00:00

CWE-117

Correct ReplaceAll params

2023-09-20 10:00:53 +01:00

CWE-190

Make AllocationSizeOverflow use new API

2023-08-10 15:48:44 +01:00

CWE-209

Put QLDoc on data flow and taint tracking modules

2023-08-11 10:06:12 +01:00

CWE-295

Fix formatting of QLDocs

2023-03-31 16:47:56 +01:00

CWE-312

Make ClearTextLogging use new API

2023-08-10 15:48:59 +01:00

CWE-322

Put QLDoc on data flow and taint tracking modules

2023-08-11 10:06:12 +01:00

CWE-326

Put QLDoc on data flow and taint tracking modules

2023-08-11 10:06:12 +01:00

CWE-327

Put QLDoc on data flow and taint tracking modules

2023-08-11 10:06:12 +01:00

CWE-338

Go: Implement new data flow interface

2024-03-13 14:41:57 +01:00

CWE-347

Apply suggestions from code review

2024-02-19 08:59:03 +01:00

CWE-352

Go: Migrate AppenderOrSprinter model to models-as-data

2024-01-09 16:35:47 +01:00

CWE-601

Go: Improve QHelp for go/unvalidated-url-redirection.

2024-03-26 10:57:36 +00:00

CWE-640

Put QLDoc on data flow and taint tracking modules

2023-08-11 10:06:12 +01:00

CWE-643

Make XPathInjection use new API

2023-08-10 15:49:21 +01:00

CWE-681

Rewrite with different flow state

2023-09-28 11:00:34 +01:00

CWE-770

Update go/ql/src/Security/CWE-770/UncontrolledAllocationSize.ql

2024-03-11 15:53:40 +01:00

CWE-798

Go: Consider more strings as hardcoded credentials

2024-03-14 10:11:39 +01:00

CWE-918

Make SafeUrlFlow use new API

2023-08-10 15:48:54 +01:00