Asger F e1c280500e Merge pull request #18749 from Kwstubbs/express ...

JS: Add result.download to Express as Path Traversal Sink

2025-02-19 09:08:36 +01:00

..

CWE-020

support that two indexOf() calls use the same string-concatenation in getAnEquivalentIndexOfCall()

2025-01-21 09:43:57 +01:00

CWE-022

Add download to Express

2025-02-12 00:10:09 -08:00

CWE-073

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-078

JS: Move a test failure explanation into the test suite

2025-01-09 09:57:44 +01:00

CWE-079

JS: Update nodes/edges output

2025-02-14 10:26:21 +01:00

CWE-089

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-094

JS: Updates to nodes/edges in tests

2024-10-29 08:32:13 +01:00

CWE-116

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-117

JS: Benign test output changes

2024-11-26 15:47:13 +01:00

CWE-134

JS: Port TaintedFormatString

2023-10-13 13:15:05 +02:00

CWE-178

Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql

2024-11-25 12:12:12 +01:00

CWE-200

JS: Updates to nodes/edges in tests

2024-10-29 08:32:13 +01:00

CWE-201

JS: Updates to nodes/edges in tests

2024-10-29 08:32:13 +01:00

CWE-209

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-295

add test for https.createServer in DisablingCertificateValidation.ql

2023-03-30 14:15:25 +02:00

CWE-300

add js/http-dependency query

2022-01-19 10:05:39 +01:00

CWE-312

fix example in clear-text-logging qhelp to actually be bad

2025-01-27 11:31:28 +01:00

CWE-313

remove some FPs in js/password-in-configuration-file

2022-10-26 11:51:56 +02:00

CWE-326

Add support for importing NPM modules in XSJS sources

2024-08-13 14:45:03 +02:00

CWE-327

JS: Update test output with provenance column

2024-06-25 10:30:56 +02:00

CWE-338

JS: Rename file to foo.test.js

2024-11-26 13:44:00 +01:00

CWE-346

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-347

update expected output

2022-01-28 12:21:33 +01:00

CWE-352

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-367

fix that js/file-system-race could have FPs related to loops

2022-10-11 13:41:51 +02:00

CWE-377

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-384

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-400

add test of the new v flag

2025-02-16 19:01:02 +01:00

CWE-451

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-502

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-506

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-522-DecompressionBombs

JS: Port experimental DecompressionBombs to ConfigSig

2024-12-03 14:30:21 +01:00

CWE-598

fix wrong comment

2022-05-31 08:38:03 +02:00

CWE-601

JS: Model query-string parsers that strip off ? or #

2025-02-11 10:41:23 +01:00

CWE-611

JS: Update a JS test case

2025-02-03 11:31:03 +01:00

CWE-614

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-640

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-643

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-693

Fixed expected test results for Helmet query

2024-06-26 11:31:57 +01:00

CWE-730

JS: Update output from tests that changed on main

2024-12-19 15:25:47 +01:00

CWE-754

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-770

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-776

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-798

JS: Update test output

2024-08-22 14:27:15 +02:00

CWE-807

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-829

JS: Update lost result in insecure-download

2024-11-21 13:33:10 +01:00

CWE-830

Moved from experimental into default queries

2024-07-11 11:44:01 +01:00

CWE-834

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-843

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-862

add a js/empty-password-in-configuration-file query

2022-01-19 10:48:45 +01:00

CWE-912

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-915

JS: Update output from tests that changed on main

2024-12-19 15:25:47 +01:00

CWE-916

JS: Port InsufficientPasswordHash

2023-10-13 13:15:05 +02:00

CWE-918

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-1004

add session{key,id} as sensitive info

2021-10-26 13:46:59 +02:00

CWE-1275

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00