codeql

CWE-011

C#: Make cs/web/debug-binary respect transformation file RemoveAttribute.

2023-03-27 10:39:44 +02:00

CWE-016

rename all occurrences of XML to Xml

2022-08-22 14:08:31 +02:00

CWE-020

C#: Re-factor ExtertalApisQuery to use the new API.

2023-04-13 10:08:39 +02:00

CWE-022

use the correct string type in the tainted-path examples

2024-02-06 09:20:27 +01:00

CWE-078

C#: Re-factor CommandInjection to use the new API.

2023-03-29 13:19:56 +02:00

CWE-079

Apply suggestions from code review

2023-12-20 15:06:03 +00:00

CWE-089

C#: Re-factor SqlInjection to use the new API.

2023-04-13 10:08:40 +02:00

CWE-090

C#: Re-factor LdapInjection to use the new API.

2023-04-13 10:08:40 +02:00

CWE-091

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

CWE-094

C#: Re-factor CodeInjection to use the new API.

2023-03-29 13:19:56 +02:00

CWE-099

C#: Re-factor ResourceInjection to use the new API.

2023-04-13 10:08:40 +02:00

CWE-112

C#: Re-factor MissingXmlValidation to use the new API.

2023-04-13 10:08:40 +02:00

CWE-114

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

CWE-117

C#: Re-factor LogForging to use the new API.

2023-04-13 10:08:40 +02:00

CWE-119

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-134

C#: Re-factor UncontrolledFormatString to use the new API.

2023-04-13 15:01:06 +02:00

CWE-201

C#: Re-factor ExposureInTransmittedData to use the new API.

2023-04-13 15:05:25 +02:00

CWE-209

C#: Re-factor ExceptionInformationExposure to use the new API.

2023-04-13 15:15:58 +02:00

CWE-248

delete redundant imports

2022-04-22 12:55:28 +02:00

CWE-285

Apply doc review suggestions

2023-07-05 15:37:48 +01:00

CWE-312

C#: Re-factor CleartextStorage to use the new API.

2023-03-31 13:10:42 +02:00

CWE-321

C#: Re-factor HardCodedSymmetricEncryptionKey to use the new API.

2023-03-29 13:19:56 +02:00

CWE-327

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

CWE-352

C#: Make implicit this receivers explicit

2023-05-09 15:34:59 +02:00

CWE-359

C#: Re-factor ExposureOfPrivateInformation to use the new API.

2023-03-29 13:19:56 +02:00

CWE-384

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

CWE-451

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

CWE-502

C#: Re-factor some of the data flow configurations used by the UnsafeDeserializationQuery to use the new API.

2023-05-03 13:09:35 +02:00

CWE-548

rename all occurrences of XML to Xml

2022-08-22 14:08:31 +02:00

CWE-601

C#: Re-factor UrlRedirect to use the new API.

2023-04-13 14:28:27 +02:00

CWE-611

C#: Re-factor XmlEntityInjection to use the new API.

2023-04-13 14:28:27 +02:00

CWE-614

make some acronyms camelCase

2022-08-22 21:22:35 +02:00

CWE-639

Update inconsistent CWE tags

2023-12-04 11:52:31 +00:00

CWE-643

C#: Re-factor XPathInjection to use the new API.

2023-04-13 14:28:27 +02:00

CWE-730

C#: Re-factor RegexInjection to use the new API.

2023-04-13 10:08:40 +02:00

CWE-798

C#: Re-factor HardcodedConnectionString to use the new API.

2023-04-13 10:08:39 +02:00

CWE-807

C#: Re-factor ConditionalBypass to use the new API.

2023-03-29 13:19:56 +02:00

CWE-838

C#: Update comment for the RequiresEncodingConfig param module.

2023-04-26 10:32:23 +02:00

CookieWithOverlyBroadDomain.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CookieWithOverlyBroadDomain.qhelp

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CookieWithOverlyBroadDomain.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

CookieWithOverlyBroadDomainFix.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CookieWithOverlyBroadPath.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CookieWithOverlyBroadPath.qhelp

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CookieWithOverlyBroadPath.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

CookieWithOverlyBroadPathFix.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

Encryption using ECB.qhelp

spelling: ciphertext

2022-10-11 00:23:36 -04:00

Encryption using ECB.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

HeaderCheckingDisabled.qhelp

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

HeaderCheckingDisabled.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

InadequateRSAPadding.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

InadequateRSAPadding.qhelp

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

InadequateRSAPadding.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

InsecureRandomness.cs

Fix minor quality issues in comment and change note

2021-08-19 09:30:23 +02:00

InsecureRandomness.qhelp

C#: Update insecure randomness query description to match implementation

2023-11-17 08:48:38 +01:00

InsecureRandomness.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

InsufficientKeySize.cs

C#: Increasing required size of RSA key to 2048

2020-09-22 11:09:49 +02:00

InsufficientKeySize.qhelp

C#: Increasing required size of RSA key to 2048

2020-09-22 11:09:49 +02:00

InsufficientKeySize.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

PersistentCookie.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

PersistentCookie.qhelp

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

PersistentCookie.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00

WeakEncryption.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

WeakEncryption.qhelp

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

WeakEncryption.ql

C#: Use {get,has}FullyQualifiedName throughout

2023-11-10 08:46:15 +01:00