semmle-qlci 86e31a584e Merge pull request #447 from esben-semmle/js/indirect-sanitization ...

Approved by asger-semmle

2018-11-13 09:14:28 +00:00

..

CWE-022

JS: add a test case for res.sendfile

2018-09-21 11:04:33 +01:00

CWE-078

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-079

JS: add email HTML body as XSS sink

2018-11-07 11:31:40 +00:00

CWE-089

JS: support label-specific sanitizer guards

2018-10-10 18:27:14 +01:00

CWE-094

Merge pull request #14 from rdmarsh2/rdmarsh/js/electron-http-client

2018-08-20 07:59:25 +01:00

CWE-116

JavaScript: Teach IncompleteSanitization to recognize incomplete URL {en,de}coding.

2018-08-09 12:44:16 +01:00

CWE-134

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-200

JS: improve model of express' req.sendFile

2018-10-10 15:46:43 +02:00

CWE-209

JavaScript: Improve StackTraceExposure query.

2018-11-09 09:42:09 +00:00

CWE-312

JS: remove check for test-environment in js/clear-text-logging

2018-08-21 22:32:52 +02:00

CWE-313

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-327

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-338

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-346

JS: support relational indexof comparison sanitizers

2018-08-22 15:58:47 +02:00

CWE-352

JS: review comments

2018-09-21 14:46:21 +01:00

CWE-400

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-451

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-502

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-601

JS: simplify test (move alerts four lines up)

2018-11-12 10:21:41 +01:00

CWE-611

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-640

JS: Add HostHeaderPoisoningInEmailGeneration query

2018-09-27 10:20:35 +01:00

CWE-643

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-730

JS: fix typo in test case

2018-09-06 22:54:07 +02:00

CWE-770

JS: add tests for improved js/missing-rate-limiting

2018-08-06 15:15:44 +02:00

CWE-776

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-798

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-807

JS: avoid flagging early returns in js/user-controlled-bypass

2018-10-16 08:39:59 +02:00

CWE-843

JS: address review comments

2018-08-22 13:54:07 +02:00

CWE-912

JS: remove useless externs definitions for tests

2018-10-10 12:12:54 +02:00

CWE-916

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-918

JS: add security query: js/request-forgery

2018-09-04 09:25:42 +02:00