Erik Krogh Kristensen 5780161b2c fix most issues found by ql/class-doc-style in JS

2022-01-20 15:10:16 +01:00

..

CWE-020

add explicit this to all member calls

2021-11-01 09:51:15 +01:00

CWE-022

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-073

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-078

JS: Lower security-severity of queries with speculative threat model

2021-10-05 10:10:01 +02:00

CWE-079

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-089

add cwe 090 (ldap injection) and cwe 943 (Improper Neutralization of Special Elements in Data Query Logic) to SqlInjection.ql

2021-10-01 09:01:29 +02:00

CWE-094

JS: Update CWE tags and severity score of code injection query

2021-10-05 10:12:19 +02:00

CWE-116

JS/Py/Ruby: Add more CWEs to bad-tag-filter queries

2021-12-13 10:23:24 +01:00

CWE-117

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-134

JS: Make TaintedFormatString have same severity as LogInjection

2021-10-05 10:10:01 +02:00

CWE-200

add some fitting CWEs to existing queries

2021-09-14 14:59:24 +02:00

CWE-201

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-209

add CWE-497 to js/stack-trace-exposure

2021-11-02 15:43:55 +01:00

CWE-295

add cwe-297 to js/disabling-certificate-validation

2021-11-08 13:26:53 +01:00

CWE-312

JS/PY: Remove CWE-315 form CleartextLogging

2021-11-24 14:59:18 +01:00

CWE-313

add some fitting CWEs to existing queries

2021-09-14 14:59:24 +02:00

CWE-326

add qhelp

2021-11-02 14:45:33 +01:00

CWE-327

JS: Tag queries with CWE-328

2021-12-06 14:02:24 +01:00

CWE-338

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-346

add cwe-942 to js/cors-misconfiguration-for-credentials

2021-11-08 13:12:19 +01:00

CWE-352

JS: Rename RouteHandlerInput->RouteHandlerParameter

2021-12-15 16:32:18 +01:00

CWE-384

Update javascript/ql/src/Security/CWE-384/SessionFixation.qhelp

2021-11-10 08:24:46 +01:00

CWE-400

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-451

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-502

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-506

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-598

improve qhelp

2021-11-08 12:02:39 +01:00

CWE-601

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-611

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-614

add cwe-319 "Cleartext Transmission of Sensitive Information" to js/clear-text-cookie

2021-11-02 11:11:38 +01:00

CWE-640

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-643

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-730

JS: Replace '.prefix'/'.suffix' with '.matches'.

2021-10-13 13:23:07 +01:00

CWE-754

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-770

JS: Rename getAUseSite -> getRouteInstallation

2021-12-15 16:21:41 +01:00

CWE-776

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-798

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-807

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-829

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-834

JS: Update score and add CWE-730 to LoopBoundInjection

2021-10-05 10:10:01 +02:00

CWE-843

Apply suggestions from code review

2022-01-04 10:07:34 +00:00

CWE-912

JS: Lower security-severity of queries with speculative threat model

2021-10-05 10:10:01 +02:00

CWE-915

fix most issues found by ql/class-doc-style in JS

2022-01-20 15:10:16 +01:00

CWE-916

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-918

JS: Migrate to *Query.qll convention

2021-08-12 09:30:18 +02:00

CWE-1004

apply all doc fixes

2021-10-28 18:19:37 +02:00