hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-15 12:04:07 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
3cd06b00264ea09f06925fd6bbfd84ece679ada3
codeql/csharp/ql/src/Security Features
History
Kasper Svendsen 3041fdebba C#: Make implicit this receivers explicit
2023-05-09 15:34:59 +02:00
..
CWE-011
C#: Make cs/web/debug-binary respect transformation file RemoveAttribute.
2023-03-27 10:39:44 +02:00
CWE-016
rename all occurrences of XML to Xml
2022-08-22 14:08:31 +02:00
CWE-020
C#: Re-factor ExtertalApisQuery to use the new API.
2023-04-13 10:08:39 +02:00
CWE-022
C#: Re-factor ZipSlip to use the new API.
2023-04-13 14:28:27 +02:00
CWE-078
C#: Re-factor CommandInjection to use the new API.
2023-03-29 13:19:56 +02:00
CWE-079
C#: Re-refactor Xss to use the new API.
2023-04-20 18:38:15 +02:00
CWE-089
C#: Re-factor SqlInjection to use the new API.
2023-04-13 10:08:40 +02:00
CWE-090
C#: Re-factor LdapInjection to use the new API.
2023-04-13 10:08:40 +02:00
CWE-091
C#: Re-factor XMLInjection to use the new API.
2023-04-13 14:50:51 +02:00
CWE-094
C#: Re-factor CodeInjection to use the new API.
2023-03-29 13:19:56 +02:00
CWE-099
C#: Re-factor ResourceInjection to use the new API.
2023-04-13 10:08:40 +02:00
CWE-112
C#: Re-factor MissingXmlValidation to use the new API.
2023-04-13 10:08:40 +02:00
CWE-114
C#: Re-factor AssemblyPathInjection to use the new API.
2023-04-13 14:54:25 +02:00
CWE-117
C#: Re-factor LogForging to use the new API.
2023-04-13 10:08:40 +02:00
CWE-119
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-134
C#: Re-factor UncontrolledFormatString to use the new API.
2023-04-13 15:01:06 +02:00
CWE-201
C#: Re-factor ExposureInTransmittedData to use the new API.
2023-04-13 15:05:25 +02:00
CWE-209
C#: Re-factor ExceptionInformationExposure to use the new API.
2023-04-13 15:15:58 +02:00
CWE-248
delete redundant imports
2022-04-22 12:55:28 +02:00
CWE-312
C#: Re-factor CleartextStorage to use the new API.
2023-03-31 13:10:42 +02:00
CWE-321
C#: Re-factor HardCodedSymmetricEncryptionKey to use the new API.
2023-03-29 13:19:56 +02:00
CWE-327
C#: Re-factor InsecureSqlConnection to use the new API.
2023-04-17 11:38:37 +02:00
CWE-352
C#: Make implicit this receivers explicit
2023-05-09 15:34:59 +02:00
CWE-359
C#: Re-factor ExposureOfPrivateInformation to use the new API.
2023-03-29 13:19:56 +02:00
CWE-384
C#: Replace all uses of the deprecated hasQualifiedName/1 predicate.
2022-12-06 11:59:12 +01:00
CWE-451
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-502
C#: Re-factor some of the data flow configurations used by the UnsafeDeserializationQuery to use the new API.
2023-05-03 13:09:35 +02:00
CWE-548
rename all occurrences of XML to Xml
2022-08-22 14:08:31 +02:00
CWE-601
C#: Re-factor UrlRedirect to use the new API.
2023-04-13 14:28:27 +02:00
CWE-611
C#: Re-factor XmlEntityInjection to use the new API.
2023-04-13 14:28:27 +02:00
CWE-614
make some acronyms camelCase
2022-08-22 21:22:35 +02:00
CWE-643
C#: Re-factor XPathInjection to use the new API.
2023-04-13 14:28:27 +02:00
CWE-730
C#: Re-factor RegexInjection to use the new API.
2023-04-13 10:08:40 +02:00
CWE-798
C#: Re-factor HardcodedConnectionString to use the new API.
2023-04-13 10:08:39 +02:00
CWE-807
C#: Re-factor ConditionalBypass to use the new API.
2023-03-29 13:19:56 +02:00
CWE-838
C#: Update comment for the RequiresEncodingConfig param module.
2023-04-26 10:32:23 +02:00
CookieWithOverlyBroadDomain.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
CookieWithOverlyBroadDomainFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
CookieWithOverlyBroadPathFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
Encryption using ECB.qhelp
spelling: ciphertext
2022-10-11 00:23:36 -04:00
Encryption using ECB.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
HeaderCheckingDisabled.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
HeaderCheckingDisabled.ql
rename all occurrences of XML to Xml
2022-08-22 14:08:31 +02:00
InadequateRSAPadding.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
InsecureRandomness.cs
Fix minor quality issues in comment and change note
2021-08-19 09:30:23 +02:00
InsecureRandomness.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InsecureRandomness.ql
C#: Re-factor InsecureRandomness to use the new API.
2023-04-19 13:36:30 +02:00
InsufficientKeySize.cs
C#: Increasing required size of RSA key to 2048
2020-09-22 11:09:49 +02:00
InsufficientKeySize.qhelp
C#: Increasing required size of RSA key to 2048
2020-09-22 11:09:49 +02:00
InsufficientKeySize.ql
rename more acronyms
2022-08-25 20:52:27 +02:00
PersistentCookie.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
WeakEncryption.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00