Napalys Klicius fa47174013 CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

2025-10-22 11:32:33 +00:00

..

examples

rename files

2022-04-12 14:37:43 +02:00

ExternalAPISinkExample.js

JS: Add UntrustedDataToExternalApi query

2020-11-19 13:42:25 +00:00

ExternalAPIsUsedWithUntrustedData.qhelp

JS: followed -> followed by

2020-11-20 14:44:25 +00:00

ExternalAPIsUsedWithUntrustedData.ql

Fix cwe tags to include leading zero

2025-04-30 16:43:03 +01:00

ExternalAPITaintStepExample.js

JS: Add UntrustedDataToExternalApi query

2020-11-19 13:42:25 +00:00

IncompleteHostnameRegExp.qhelp

Ruby/JS add missing ^ in qhelp

2022-03-18 14:00:10 +01:00

IncompleteHostnameRegExp.ql

put the shared HostnameRegexp code in the shared regex pack

2022-12-17 17:26:18 +01:00

IncompleteUrlSchemeCheck.qhelp

JavaScript: Address review comments.

2019-11-14 17:11:59 +00:00

IncompleteUrlSchemeCheck.ql

Merge branch 'main' into missDocParam

2022-07-13 09:58:04 +02:00

IncompleteUrlSubstringSanitization.qhelp

Update links to OWASP cheat sheet

2019-11-06 20:21:47 -08:00

IncompleteUrlSubstringSanitization.ql

Address comments

2022-03-11 14:25:34 +01:00

IncompleteUrlSubstringSanitization.qll

move getACommonTld into a utility module without parameters

2022-12-18 17:23:45 +01:00

IncompleteUrlSubstringSanitizationSpecific.qll

move getACommonTld into a utility module without parameters

2022-12-18 17:23:45 +01:00

IncorrectSuffixCheck.qhelp

JS: address comments

2018-12-03 11:23:02 +00:00

IncorrectSuffixCheck.ql

remove redundant cast

2025-01-21 09:51:14 +01:00

MissingOriginCheck.qhelp

add missing word in qhelp

2022-05-05 14:24:45 +02:00

MissingOriginCheck.ql

add CWE-940 to js/missing-origin-check

2022-05-25 14:15:48 +02:00

MissingRegExpAnchor.qhelp

Update links to OWASP cheat sheet

2019-11-06 20:21:47 -08:00

MissingRegExpAnchor.ql

Update javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql

2024-11-05 10:29:22 +01:00

OverlyLargeRange.qhelp

apply changes based on docs review

2022-08-09 13:51:40 +02:00

OverlyLargeRange.ql

CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

2025-10-22 11:32:33 +00:00

UntrustedDataToExternalAPI.inc.qhelp

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

UntrustedDataToExternalAPI.qhelp

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

UntrustedDataToExternalAPI.ql

Fix cwe tags to include leading zero

2025-04-30 16:43:03 +01:00

UselessRegExpCharacterEscape.qhelp

JS: add query js/useless-regexp-character-escape

2019-10-16 00:15:54 +02:00

UselessRegExpCharacterEscape.ql

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00