hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-04 09:11:08 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
0d9436892a9eecce7413e27db87a28654f4cabe1
codeql/java/ql/src/Security/CWE
History
Tony Torralba 4f13bf8941 Merge pull request #6492 from atorralba/atorralba/android-cleartext-storage-database 
Java: Create new query Cleartext storage of sensitive information in Android databases
2022-02-02 16:23:05 +01:00
..
CWE-020
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-022
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-074
Apply suggestion from code review
2021-09-27 12:00:21 +02:00
CWE-078
Deduplicate shared body of regular and experimental versions of java/command-line-injection query.
2021-07-01 14:53:56 +01:00
CWE-079
Remove JSF XSS Example
2021-09-14 11:47:37 +01:00
CWE-089
Downgrade precision of java/concatenated-sql-query
2021-08-24 10:46:01 +01:00
CWE-090
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-094
Update SpelInjection.qhelp
2021-09-27 11:40:51 +02:00
CWE-113
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-117
Update java/ql/src/Security/CWE/CWE-117/LogInjection.ql
2022-01-11 16:25:32 +01:00
CWE-129
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-134
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-190
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-209
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-266
Don't capitalize the term content provider
2022-01-20 13:23:52 +01:00
CWE-273
Apply suggestions from code review
2022-01-19 16:43:48 +01:00
CWE-295
Update InsecureTrustManager.qhelp
2022-01-20 10:24:46 +01:00
CWE-297
Apply suggestions from code review
2021-10-05 09:40:22 +02:00
CWE-312
Apply suggestions from code review
2022-01-21 16:55:42 +01:00
CWE-319
Refactored HttpsUrls.ql
2021-09-15 17:20:28 +02:00
CWE-327
Merge pull request #7318 from RasmusWL/java-cwe-328
2021-12-07 11:39:48 +01:00
CWE-335
Split up Random.qll
2021-07-02 10:00:49 +01:00
CWE-338
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-347
Apply suggestions from code review
2021-08-04 13:15:49 +02:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-367
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-421
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-470
Update java/ql/src/Security/CWE/CWE-470/FragmentInjection.inc.qhelp
2022-01-17 11:20:39 +01:00
CWE-502
Add change note and update qhelp
2021-10-12 12:35:05 +01:00
CWE-522
Fix scope issues in the Java example
2021-09-15 17:20:28 +02:00
CWE-601
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-611
Document XXE sanitisation policy
2021-11-24 12:03:28 +00:00
CWE-614
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-643
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-676
Add security-severity metadata
2021-06-10 20:11:08 +01:00
CWE-681
remove redundant inline casts in arguments where the type is inferred by the call target
2021-10-29 14:37:56 +02:00
CWE-732
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-749
Apply suggestions from code review
2021-08-02 09:56:40 +02:00
CWE-798
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
CWE-807
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-829
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-833
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-835
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-917
Doc improvements
2021-07-29 15:35:39 +02:00
CWE-918
Update Security-Severity for CWE-918
2021-08-04 12:17:21 +02:00
CWE-927
Update java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.qhelp
2022-01-21 11:57:11 +01:00
CWE-940
Apply suggestions from code review
2021-11-04 10:08:53 +01:00
CWE-1104
Add security-severity metadata
2021-06-10 20:11:08 +01:00