hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-03 04:40:14 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
20b7e85151a89c6b53de821fb72a6700ae85c6fb
codeql/java/ql/src/Security/CWE
History
Ian Lynagh 1e62b485a5 Merge pull request #8241 from igfoo/igfoo/stats4 
Java: Update stats and make some performance tweaks
2022-02-28 12:58:06 +00:00
..
CWE-020
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-022
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-074
Apply suggestion from code review
2021-09-27 12:00:21 +02:00
CWE-078
Deduplicate shared body of regular and experimental versions of java/command-line-injection query.
2021-07-01 14:53:56 +01:00
CWE-079
Remove JSF XSS Example
2021-09-14 11:47:37 +01:00
CWE-089
Downgrade precision of java/concatenated-sql-query
2021-08-24 10:46:01 +01:00
CWE-090
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-094
Update SpelInjection.qhelp
2021-09-27 11:40:51 +02:00
CWE-113
Remove CAPC and add CWE-93
2022-02-09 12:31:53 -05:00
CWE-117
Update java/ql/src/Security/CWE/CWE-117/LogInjection.ql
2022-01-11 16:25:32 +01:00
CWE-129
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-134
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-190
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-200
Review feedback and improve temp dir vulnerable/safe code sugestion
2022-02-14 11:29:16 -05:00
CWE-209
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-266
Don't capitalize the term content provider
2022-01-20 13:23:52 +01:00
CWE-273
Apply suggestions from code review
2022-01-19 16:43:48 +01:00
CWE-295
Update InsecureTrustManager.qhelp
2022-01-20 10:24:46 +01:00
CWE-297
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-312
Apply suggestions from code review
2022-01-21 16:55:42 +01:00
CWE-319
Refactored HttpsUrls.ql
2021-09-15 17:20:28 +02:00
CWE-327
Merge pull request #7318 from RasmusWL/java-cwe-328
2021-12-07 11:39:48 +01:00
CWE-335
Split up Random.qll
2021-07-02 10:00:49 +01:00
CWE-338
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-347
Apply suggestions from code review
2021-08-04 13:15:49 +02:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-367
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-421
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-470
Update java/ql/src/Security/CWE/CWE-470/FragmentInjection.inc.qhelp
2022-01-17 11:20:39 +01:00
CWE-502
Add change note and update qhelp
2021-10-12 12:35:05 +01:00
CWE-522
Fix scope issues in the Java example
2021-09-15 17:20:28 +02:00
CWE-601
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-611
Document XXE sanitisation policy
2021-11-24 12:03:28 +00:00
CWE-614
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-643
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-676
Add security-severity metadata
2021-06-10 20:11:08 +01:00
CWE-681
remove redundant inline casts in arguments where the type is inferred by the call target
2021-10-29 14:37:56 +02:00
CWE-732
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-749
Apply suggestions from code review
2021-08-02 09:56:40 +02:00
CWE-798
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
CWE-807
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-829
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-833
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-835
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-917
Doc improvements
2021-07-29 15:35:39 +02:00
CWE-918
Update Security-Severity for CWE-918
2021-08-04 12:17:21 +02:00
CWE-927
Update java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.qhelp
2022-01-21 11:57:11 +01:00
CWE-940
Apply suggestions from code review
2021-11-04 10:08:53 +01:00
CWE-1104
Add security-severity metadata
2021-06-10 20:11:08 +01:00