Erik Krogh Kristensen 1cca377e7d Merge pull request #6561 from erik-krogh/htmlReg ...

JS/Py/Ruby: add a bad-tag-filter query

2021-11-18 09:39:13 +01:00

..

CWE-020

update expected output

2021-11-15 13:50:12 +01:00

CWE-022

JS: Use getAMatchedString instead of getConstantString

2021-11-08 15:35:35 +01:00

CWE-073

…

CWE-078

add a getMaybePromisifiedCall method in API graphs, and use it to model child_process

2021-08-25 10:27:09 +02:00

CWE-079

improve the got model

2021-11-15 21:52:12 +01:00

CWE-089

recognize string sanitizers for ldap-injection

2021-10-01 09:01:29 +02:00

CWE-094

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

CWE-116

add a bad-tag-filter query for Python and JavaScript

2021-09-21 15:04:03 +02:00

CWE-117

Merge branch 'main' into logs

2021-07-16 11:21:25 +02:00

CWE-134

…

CWE-200

model serve-handler in js/exposure-of-private-files

2021-06-08 09:52:56 +02:00

CWE-201

…

CWE-209

…

CWE-295

…

CWE-312

…

CWE-313

…

CWE-326

don't include mode-of-operation into the algorithm names

2021-11-03 14:54:50 +01:00

CWE-327

…

CWE-338

…

CWE-346

…

CWE-352

…

CWE-384

add js/session-fixation query

2021-11-03 13:04:41 +01:00

CWE-400

…

CWE-451

…

CWE-502

…

CWE-506

…

CWE-598

add test that requires flowToExpr

2021-11-08 12:25:45 +01:00

CWE-601

…

CWE-611

…

CWE-614

assume that setting the secure/httpOnly flag to some unknown value is good

2021-10-26 13:47:28 +02:00

CWE-640

…

CWE-643

…

CWE-730

JS: Update RegExpInjection test case

2021-06-22 12:00:04 +02:00

CWE-754

…

CWE-770

…

CWE-776

…

CWE-798

don't report dummy authentication headers as hardcoded-crendentials

2021-08-02 22:56:14 +02:00

CWE-807

…

CWE-829

…

CWE-834

…

CWE-843

…

CWE-912

…

CWE-915

Merge branch 'main' into protoLib

2021-11-04 12:53:53 +01:00

CWE-916

…

CWE-918

…

CWE-1004

add session{key,id} as sensitive info

2021-10-26 13:46:59 +02:00

Summaries

…