hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-22 15:17:09 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
21a4e44faba3027eca5ed830f768978cd61dc79e
codeql/csharp/ql/src/Security Features
History
erik-krogh cc7a9ef97a rename more acronyms
2022-08-25 20:52:27 +02:00
..
CWE-011
rename all occurrences of XML to Xml
2022-08-22 14:08:31 +02:00
CWE-016
rename all occurrences of XML to Xml
2022-08-22 14:08:31 +02:00
CWE-020
delete redundant imports
2022-04-22 12:55:28 +02:00
CWE-022
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-078
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-079
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-089
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-090
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-091
C#: Convert xml injection query to a path problem.
2022-05-05 10:43:23 +02:00
CWE-094
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-099
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-112
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-114
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-117
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-119
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-134
delete redundant imports
2022-04-22 12:55:28 +02:00
CWE-201
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-209
C#: Flow summaries has now been added for Exception stack trace, but not for ToString. The latter will be encoded as an extra taintstep in the analysis. To reduce noise for all uses of an exception itself an isSanitizerIn is introduced.
2022-05-25 08:28:15 +02:00
CWE-248
delete redundant imports
2022-04-22 12:55:28 +02:00
CWE-312
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-321
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-327
C#: Use data flow instead of taint tracking in InsecureSQLConnection.ql
2021-08-26 13:48:57 +02:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-359
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-384
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-451
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-502
Merge with main
2021-08-04 14:25:34 +03:00
CWE-548
rename all occurrences of XML to Xml
2022-08-22 14:08:31 +02:00
CWE-601
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-611
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-614
make some acronyms camelCase
2022-08-22 21:22:35 +02:00
CWE-643
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-730
update {cs/java}/regex-injection to match javascript
2022-08-22 21:41:45 +02:00
CWE-798
C#: Downgrade hardcoded credentials queries to medium precision
2022-02-15 09:34:20 +01:00
CWE-807
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-838
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CookieWithOverlyBroadDomain.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
CookieWithOverlyBroadDomainFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
CookieWithOverlyBroadPathFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
Encryption using ECB.qhelp
Grammatical issues in Encryption using ECB.qhelp
2020-06-30 15:33:05 +10:00
Encryption using ECB.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
HeaderCheckingDisabled.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
HeaderCheckingDisabled.ql
rename all occurrences of XML to Xml
2022-08-22 14:08:31 +02:00
InadequateRSAPadding.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
InsecureRandomness.cs
Fix minor quality issues in comment and change note
2021-08-19 09:30:23 +02:00
InsecureRandomness.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InsecureRandomness.ql
Fixing query & test
2021-08-04 19:37:57 -07:00
InsufficientKeySize.cs
C#: Increasing required size of RSA key to 2048
2020-09-22 11:09:49 +02:00
InsufficientKeySize.qhelp
C#: Increasing required size of RSA key to 2048
2020-09-22 11:09:49 +02:00
InsufficientKeySize.ql
rename more acronyms
2022-08-25 20:52:27 +02:00
PersistentCookie.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
WeakEncryption.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00