hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
530b29ccdfb42bcb8173f270e2f89d76bc20c2bc
codeql/javascript/ql/test/query-tests/Security/CWE-094/CodeInjection
History
erik-krogh a35fe1ffab Merge branch 'main' into js-followMsg
2022-09-08 13:09:15 +02:00
..
lib
recognize when the js engine in gray-matter is set to something safe
2022-06-30 09:00:10 +02:00
angularjs.js
Merge remote-tracking branch 'upstream/next' into qlucie/master
2019-01-04 10:35:57 +00:00
bad-code-sanitization.js
add qhelp for js/bad-code-sanitization
2020-06-16 16:23:41 +02:00
CodeInjection.expected
Merge branch 'main' into js-followMsg
2022-09-08 13:09:15 +02:00
CodeInjection.qlref
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
eslint-escope-build.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
express.js
add JSON.stringify as a code-injection sanitizer
2022-02-07 13:34:18 +01:00
externs.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
HeuristicSourceCodeInjection.expected
recognize calls to Function where spread arguments are used
2022-09-07 22:55:51 +02:00
HeuristicSourceCodeInjection.ql
JS: Remove use of deprecated API
2021-08-12 09:30:43 +02:00
ImproperCodeSanitization.expected
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
ImproperCodeSanitization.qlref
add query to detect improperly sanitized code
2020-06-10 19:50:12 +02:00
module.js
JavaScript: Improve modelling of Module.prototype._compile sink.
2021-07-12 15:32:21 +01:00
NoSQLCodeInjection.js
type-track objects where the "$where" property has been written
2020-09-24 20:55:25 +02:00
react-native.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
react.js
add js/code-injection sink for script tags in React
2021-01-29 12:50:17 +01:00
template-sinks.js
add more template sinks for the js/code-injection query
2021-06-22 20:24:42 +02:00
tst.js
recognize calls to Function where spread arguments are used
2022-09-07 22:55:51 +02:00
UnsafeCodeConstruction.expected
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
UnsafeCodeConstruction.qlref
add test for unsafe-code-construction query
2022-02-07 13:34:18 +01:00