hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
1f991807d4103cc137bb731fe414df8e149b40e1
codeql/java/ql/src/Security/CWE
History
Edward Minnix III ac58299d9e Merge pull request #12541 from egregius313/egregius313/refactor-queries-to-new-dataflow-api 
Java: Refactor more queries to the new DataFlow module API
2023-03-20 12:24:26 -04:00
..
CWE-020
port the Java regex/redos queries to use the shared pack
2022-11-14 21:29:41 +01:00
CWE-022
Fix naming of ZipSlip configuration
2023-03-20 07:55:23 -04:00
CWE-023
Fix partial path traversal Java example
2023-01-16 21:14:29 +01:00
CWE-074
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-078
get a few more queries in sync with other languages
2022-10-01 11:17:48 +02:00
CWE-079
Java: Refactor XSS.ql
2023-03-07 13:33:00 +01:00
CWE-089
Replace one more mention of escaping
2023-01-09 10:56:13 +00:00
CWE-090
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-094
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-113
Merge branch 'main' into java/refactor-dataflow-queries-1
2023-03-10 12:38:06 +01:00
CWE-117
Java: Refactor LogInjection
2023-03-15 10:10:02 +01:00
CWE-129
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-134
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-190
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-200
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-209
Java: Refactor StackTraceExposure, XSS.qll
2023-03-07 10:38:00 +01:00
CWE-266
Java: Refactor IntentUriPermissionManipulation.
2023-03-15 10:13:28 +01:00
CWE-273
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-295
Update java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning1.java
2022-12-19 18:11:54 +01:00
CWE-297
Fix typo in QLDoc
2023-03-20 08:11:01 -04:00
CWE-312
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-319
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-326
remove unnecessary 'exists'
2022-10-20 23:52:31 -04:00
CWE-327
Refactor DataFlow configurations to use "Config" naming convention
2023-03-19 17:44:07 -04:00
CWE-335
Java: Add cwe-377 tag to predictable-seed
2022-05-03 12:28:14 +01:00
CWE-338
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-347
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-367
update two more queries to better follow the style-guide
2022-10-01 10:59:59 +02:00
CWE-421
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-441
Java: Refactor UnsafeContentUriResolution.
2023-03-15 10:32:58 +01:00
CWE-470
Java: Refactor FragmentInjection.
2023-03-15 10:23:21 +01:00
CWE-489
Remove 'here'.
2022-09-26 13:36:14 +01:00
CWE-502
Spelling
2023-01-12 17:46:00 +00:00
CWE-522
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-524
Apply suggestion from docs review
2022-11-16 10:54:14 +00:00
CWE-532
Java: Refactor SensitiveInfoLog.ql
2023-03-07 11:31:49 +01:00
CWE-601
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-611
Refactor Security.CWE.CWE-611 Xxe queries
2023-03-17 15:17:18 -04:00
CWE-614
Update InsecureCookie.ql
2022-12-05 12:55:53 +01:00
CWE-643
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-676
Add security-severity metadata
2021-06-10 20:11:08 +01:00
CWE-681
Java: Refactor NumericCastTainted, NumericCastTaintedLocal
2023-03-07 10:42:00 +01:00
CWE-730
Java: Refactor PolynomialReDoS.ql
2023-03-13 11:27:14 +01:00
CWE-732
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-749
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-780
Java: Refactor RsaWithoutOaep.
2023-03-15 10:37:54 +01:00
CWE-798
Convert tests to inline expectations and fix one bug revealed doing so
2022-08-13 14:02:05 +01:00
CWE-807
Make the Config module of public Flow modules public
2023-03-20 07:47:55 -04:00
CWE-829
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
CWE-833
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-835
Java: Make JumpStmt a proper superclass
2022-03-30 00:30:27 +02:00
CWE-917
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-918
Java: Refactor RequestForgery.ql
2023-03-07 11:39:03 +01:00
CWE-925
spelling: receiver
2022-10-12 04:40:26 -04:00
CWE-926
Reword first sentence of documentation
2022-10-11 11:02:37 -04:00
CWE-927
Java: Refactor SensitiveCommunication.ql.
2023-03-15 10:32:35 +01:00
CWE-940
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-1104
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00
CWE-1204
Apply doc suggestions
2022-08-17 10:35:16 +01:00