hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 11:46:32 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
19f14622f3450041b64d7736d190a56baa04fe16
codeql/javascript/ql/test/query-tests/Security
History
Asger F c408ab9e6a Merge branch 'main' into js/shared-dataflow
2024-05-02 19:43:34 +02:00
..
CWE-020
Merge branch 'main' into js/shared-dataflow-merged
2024-03-13 14:27:16 +01:00
CWE-022
Merge branch 'main' into js/shared-dataflow-merged
2024-03-13 14:27:16 +01:00
CWE-073
JS: Port TemplateObjectInjection
2023-10-13 13:15:05 +02:00
CWE-078
JS: Port UnsafeShellCommandConstruction
2023-10-13 13:15:06 +02:00
CWE-079
Merge branch 'main' into js/shared-dataflow
2024-05-02 19:43:34 +02:00
CWE-089
JS: Port SqlInjection
2023-10-13 13:15:03 +02:00
CWE-094
JS: Update HeuristicSoruceCodeInjection test
2023-10-13 13:15:08 +02:00
CWE-116
JS: Port IncompleteHtmlAttributeSanitization
2023-10-13 13:15:05 +02:00
CWE-117
JS: Port LogInjection
2023-10-13 13:15:04 +02:00
CWE-134
JS: Port TaintedFormatString
2023-10-13 13:15:05 +02:00
CWE-178
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-200
JS: Port FileAccessToHttp
2023-10-13 13:15:04 +02:00
CWE-201
JS: Port PostMessageStar
2023-10-13 13:15:05 +02:00
CWE-209
JS: Port StackTraceExposure
2023-10-13 13:15:05 +02:00
CWE-295
add test for https.createServer in DisablingCertificateValidation.ql
2023-03-30 14:15:25 +02:00
CWE-300
add js/http-dependency query
2022-01-19 10:05:39 +01:00
CWE-312
JS: Port BuildArtifactLeak
2023-10-13 13:15:04 +02:00
CWE-313
remove some FPs in js/password-in-configuration-file
2022-10-26 11:51:56 +02:00
CWE-326
don't include mode-of-operation into the algorithm names
2021-11-03 14:54:50 +01:00
CWE-327
Merge branch 'main' into js/shared-dataflow-merged
2024-03-13 14:27:16 +01:00
CWE-338
JS: Port InsecureRandomness
2023-10-13 13:15:05 +02:00
CWE-346
JS: Port CorsMisconfigurationForCredentials
2023-10-13 13:15:04 +02:00
CWE-347
update expected output
2022-01-28 12:21:33 +01:00
CWE-352
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-367
fix that js/file-system-race could have FPs related to loops
2022-10-11 13:41:51 +02:00
CWE-377
JS: Port InsecureTemporaryFile
2023-10-13 13:15:05 +02:00
CWE-384
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-400
Merge branch 'main' into js/shared-dataflow-merged
2024-03-13 14:27:16 +01:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
JS: Port UnsafeDeserialization
2023-10-13 13:15:05 +02:00
CWE-506
JS: Port HardcodedDataInterpretedAsCode
2023-10-13 13:15:04 +02:00
CWE-598
fix wrong comment
2022-05-31 08:38:03 +02:00
CWE-601
JS: Port ClientSideUrlRedirect
2023-10-13 13:15:04 +02:00
CWE-611
JS: Port Xxe
2023-10-13 13:15:06 +02:00
CWE-614
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-640
JS: Port HostHeaderPoisoningInEmailGeneration
2023-10-13 13:15:05 +02:00
CWE-643
JS: Port XpathInjection
2023-10-13 13:15:06 +02:00
CWE-730
JS: Port RegExpInjection
2023-10-13 13:15:05 +02:00
CWE-754
JS: Port UnvalidatedDynamicMethodCall
2023-10-13 13:15:06 +02:00
CWE-770
Merge branch 'main' into js/shared-dataflow-merged
2024-03-13 14:27:16 +01:00
CWE-776
JS: Port XmlBomb
2023-10-13 13:15:06 +02:00
CWE-798
JS: Port HardcodedCredentials
2023-10-13 13:15:04 +02:00
CWE-807
JS: Port ConditionalBypass
2023-10-13 13:15:04 +02:00
CWE-829
JS: Port InsecureDownload
2023-10-13 13:15:05 +02:00
CWE-830
CWE 830 polish error messages
2022-02-22 11:41:54 +01:00
CWE-834
JS: Port LoopBoundInjection
2023-10-13 13:15:04 +02:00
CWE-843
JS: Port TypeConfusionThroughParameterTampering
2023-10-13 13:15:05 +02:00
CWE-862
add a js/empty-password-in-configuration-file query
2022-01-19 10:48:45 +01:00
CWE-912
JS: Port HttpToFileAccess
2023-10-13 13:15:04 +02:00
CWE-915
JS: Port PrototypePollutingMergeCall
2023-10-13 13:15:04 +02:00
CWE-916
JS: Port InsufficientPasswordHash
2023-10-13 13:15:05 +02:00
CWE-918
JS: Port ClientSideRequestForgery
2023-10-13 13:15:03 +02:00
CWE-1004
add session{key,id} as sensitive info
2021-10-26 13:46:59 +02:00
CWE-1275
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00