erik-krogh 393649b7ce don't call environment variables for command-line arguments

2023-02-14 14:27:41 +01:00

..

examples

add second-order-command-injection query

2022-10-30 21:20:47 +01:00

CommandInjection.inc.qhelp

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CommandInjection.qhelp

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CommandInjection.ql

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

IndirectCommandInjection.qhelp

JS: add query js/indirect-command-line-injection

2019-07-31 09:24:25 +02:00

IndirectCommandInjection.ql

don't call environment variables for command-line arguments

2023-02-14 14:27:41 +01:00

SecondOrderCommandInjection.qhelp

fix minor issues in qhelp

2022-11-03 14:01:58 +01:00

SecondOrderCommandInjection.ql

add dash in description

2022-11-03 16:24:59 +01:00

ShellCommandInjectionFromEnvironment.qhelp

JS: add query js/shell-command-injection-from-environment

2019-10-21 23:31:55 +02:00

ShellCommandInjectionFromEnvironment.ql

JS: Lower security-severity of queries with speculative threat model

2021-10-05 10:10:01 +02:00

UnsafeShellCommandConstruction.qhelp

Apply suggestions from doc review

2020-05-21 14:32:02 +02:00

UnsafeShellCommandConstruction.ql

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

UselessUseOfCat.qhelp

add link to The Useless Use of Cat Award

2020-03-02 12:28:51 +01:00

UselessUseOfCat.ql

JS: Lower security-severity of queries with speculative threat model

2021-10-05 10:10:01 +02:00