hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-07 20:45:28 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
43902fd703229b05b51f182b25e3ff426b5bb7bd
codeql/javascript/ql/src/Security
History
Erik Krogh Kristensen 1cca377e7d Merge pull request #6561 from erik-krogh/htmlReg 
JS/Py/Ruby: add a bad-tag-filter query
2021-11-18 09:39:13 +01:00
..
CWE-020
Fix hasLocationInfo URL reference
2021-09-29 13:47:58 +02:00
CWE-022
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-073
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-078
JS: Lower security-severity of queries with speculative threat model
2021-10-05 10:10:01 +02:00
CWE-079
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-089
add cwe 090 (ldap injection) and cwe 943 (Improper Neutralization of Special Elements in Data Query Logic) to SqlInjection.ql
2021-10-01 09:01:29 +02:00
CWE-094
JS: Update CWE tags and severity score of code injection query
2021-10-05 10:12:19 +02:00
CWE-116
Merge branch 'main' of github.com:github/codeql into htmlReg
2021-10-26 14:46:27 +02:00
CWE-117
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-134
JS: Make TaintedFormatString have same severity as LogInjection
2021-10-05 10:10:01 +02:00
CWE-200
add some fitting CWEs to existing queries
2021-09-14 14:59:24 +02:00
CWE-201
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-209
add CWE-497 to js/stack-trace-exposure
2021-11-02 15:43:55 +01:00
CWE-295
add cwe-297 to js/disabling-certificate-validation
2021-11-08 13:26:53 +01:00
CWE-312
add CWE-532 to the clear-text-logging query
2021-11-10 14:15:49 +01:00
CWE-313
add some fitting CWEs to existing queries
2021-09-14 14:59:24 +02:00
CWE-326
add qhelp
2021-11-02 14:45:33 +01:00
CWE-327
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-338
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-346
add cwe-942 to js/cors-misconfiguration-for-credentials
2021-11-08 13:12:19 +01:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-384
Update javascript/ql/src/Security/CWE-384/SessionFixation.qhelp
2021-11-10 08:24:46 +01:00
CWE-400
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-451
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-502
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-506
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-598
improve qhelp
2021-11-08 12:02:39 +01:00
CWE-601
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-611
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-614
add cwe-319 "Cleartext Transmission of Sensitive Information" to js/clear-text-cookie
2021-11-02 11:11:38 +01:00
CWE-640
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-643
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-730
JS: Replace '.prefix'/'.suffix' with '.matches'.
2021-10-13 13:23:07 +01:00
CWE-754
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-770
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-776
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-798
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-807
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-829
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-834
JS: Update score and add CWE-730 to LoopBoundInjection
2021-10-05 10:10:01 +02:00
CWE-843
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-912
JS: Lower security-severity of queries with speculative threat model
2021-10-05 10:10:01 +02:00
CWE-915
update alert message to distinguish between library input and remote flow
2021-10-27 20:35:38 +02:00
CWE-916
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-918
JS: Migrate to *Query.qll convention
2021-08-12 09:30:18 +02:00
CWE-1004
apply all doc fixes
2021-10-28 18:19:37 +02:00