Michael Nebel 0ed48616a7 C#: Use stubs for CWE-321/HardcodedSymmetricEncryptionKey.

2023-01-31 13:21:00 +01:00

..

CWE-011

…

CWE-016

Merge branch 'master' of git.semmle.com:Semmle/ql into ASPNetPagesValidateRequest

2019-12-05 15:58:47 +00:00

CWE-020

C#: Since NameValueCollection now has a flow summary for the string indexer it is no longer consider an unsafe external api, which is why it has disappared from the result.

2022-05-25 08:28:14 +02:00

CWE-022

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-078

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-079

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-089

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-090

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-091/XMLInjection

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-094

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-099

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-112

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-114/AssemblyPathInjection

update cs/assembly-path-injection and cs/hardcoded-key to path-problems

2022-11-11 10:55:36 +01:00

CWE-117

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-119

…

CWE-134

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-201/ExposureInTransmittedData

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-209

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-248/MissingASPNETGlobalErrorHandler

Trim test files + remove duplicate newlines

2021-07-01 16:09:11 +02:00

CWE-312

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-321/HardcodedSymmetricEncryptionKey

C#: Use stubs for CWE-321/HardcodedSymmetricEncryptionKey.

2023-01-31 13:21:00 +01:00

CWE-327

C#: Use stubs for CWE-327 test cases.

2023-01-31 13:21:00 +01:00

CWE-338

C#: Update options files as some classes has been moved to other dll's.

2023-01-31 13:21:00 +01:00

CWE-352

Add adjusted expected files

2021-07-01 16:09:11 +02:00

CWE-359

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-384

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-451/MissingXFrameOptions

Trim test files + remove duplicate newlines

2021-07-01 16:09:11 +02:00

CWE-502

C#: Fix unsafe deserialization with JsonConvert.DeserializeObject

2022-08-11 11:00:46 +02:00

CWE-539/PersistentCookie

Add adjusted expected files

2021-07-01 16:09:11 +02:00

CWE-548

…

CWE-601/UrlRedirect

C#: Use ASP.NET Core stub instead of Microsoft.Extensions.Primitives and manual written ASP.NET Core stubs.

2022-08-09 13:08:34 +02:00

CWE-611

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-614/RequireSSL

Trim test files + remove duplicate newlines

2021-07-01 16:09:11 +02:00

CWE-643

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-730

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-798

C#: Update options files as some classes has been moved to other dll's.

2023-01-31 13:21:00 +01:00

CWE-807

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-838

C#: Use stubs for the CWE-838 testcase

2021-11-30 15:32:19 +01:00