hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-17 08:24:46 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
19dd472ee585c76ca59cd6b2da96e5976da8d093
codeql/javascript/ql/test/query-tests/Security/CWE-078
History
semmle-qlci b9ecf1a304 Merge pull request #3447 from erik-krogh/LibCmdInjection 
Approved by asgerf, mchammer01
2020-05-22 17:10:57 +01:00
..
lib
add a sanitizer for chained replace-calls
2020-05-19 19:16:58 +02:00
child_process-test.js
add support for util.promisify with child_process calls
2020-04-15 19:16:30 +02:00
command-line-parameter-command-injection.js
JS: add DefaultParsedCommandLineArgumentsAsSource
2019-11-15 08:42:02 +01:00
CommandInjection.expected
Merge pull request #3447 from erik-krogh/LibCmdInjection
2020-05-22 17:10:57 +01:00
CommandInjection.qlref
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
execSeries.js
JavaScript: Add example of indirect command injection.
2019-01-11 10:24:41 +00:00
IndirectCommandInjection.expected
JS: add DefaultParsedCommandLineArgumentsAsSource
2019-11-15 08:42:02 +01:00
IndirectCommandInjection.qlref
JS: add query js/indirect-command-line-injection
2019-07-31 09:24:25 +02:00
other.js
JavaScript: Add more models of packages that execute commands over SSH.
2020-05-18 12:08:14 +01:00
package.json
add test cases for js/shell-command-constructed-from-input
2020-05-17 10:32:27 +02:00
ShellCommandInjectionFromEnvironment.expected
JavaScript: Use type tracking instead of auxiliary data-flow configuration to track indirect command arguments.
2019-10-31 12:13:55 +00:00
ShellCommandInjectionFromEnvironment.qlref
JS: add query js/shell-command-injection-from-environment
2019-10-21 23:31:55 +02:00
third-party-command-injection.js
JS: treat server responses as untrusted for command injections
2019-09-11 09:38:18 +02:00
tst_shell-command-injection-from-environment.js
JS: add query js/shell-command-injection-from-environment
2019-10-21 23:31:55 +02:00
UnsafeShellCommandConstruction.expected
add a sanitizer for chained replace-calls
2020-05-19 19:16:58 +02:00
UnsafeShellCommandConstruction.qlref
add test cases for js/shell-command-constructed-from-input
2020-05-17 10:32:27 +02:00
uselesscat.js
add tests for third party command execution libraries (and two small fixes)
2020-02-25 10:50:59 +01:00
UselessUseOfCat.expected
add test cases for js/shell-command-constructed-from-input
2020-05-17 10:32:27 +02:00
UselessUseOfCat.ql
JS: Autoformat again
2020-03-04 19:28:24 +00:00