hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-14 23:14:59 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
569e54e7bb43a242548e1a67d23119d5186fc4db
codeql/java/ql/src/Security/CWE
History
Anders Schack-Mulligen 8891ae70b6 Merge pull request #3938 from lcartey/java/untrusted-data-to-external-api 
Java: Untrusted data used in external APIs
2020-08-13 09:53:57 +02:00
..
CWE-020
Java: Switch to low as a precision
2020-08-12 13:48:59 +01:00
CWE-022
Move tainted path ad-hoc guard back.
2020-07-19 00:19:29 +02:00
CWE-078
Merge pull request #853 from joshhale/tweak-cwe-078-example
2020-02-24 16:15:58 +01:00
CWE-079
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-089
Generalize QueryInjectionSink
2020-07-09 12:32:17 +02:00
CWE-090
Limit LdapAdditionalTaintStep to Ldap configuration
2020-08-06 11:35:03 +02:00
CWE-113
Move source and sink into importable library
2020-07-09 14:53:59 +02:00
CWE-129
Java: Deprecate RemoteUserInput.
2019-05-06 13:43:58 +02:00
CWE-134
Java: Deprecate RemoteUserInput.
2019-05-06 13:43:58 +02:00
CWE-190
Java: Deprecate ParExpr.
2020-01-30 10:52:16 +01:00
CWE-209
Java: stack trace exposure: address false positives
2020-07-13 15:26:55 +02:00
CWE-312
Merge pull request #312 from aschackmull/java/autoformat-libs
2018-10-12 20:02:52 +01:00
CWE-319
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-327
Java: Update precision of java/weak-cryptographic-algorithm.
2020-08-07 09:40:21 +02:00
CWE-335
Java: Autoformat most queries.
2018-10-11 11:31:37 +02:00
CWE-352
Add check for disabled CSRF protection in Spring
2020-01-22 21:27:34 +01:00
CWE-367
Java: Autoformat most queries.
2018-10-11 11:31:37 +02:00
CWE-421
Java: Autoformat most queries.
2018-10-11 11:31:37 +02:00
CWE-502
Merge pull request #2230 from yh-semmle/java-move-cwe502-lib
2019-11-11 10:44:52 +01:00
CWE-601
Join ServletUrlRedirectSink with UrlRedirectSink
2020-07-09 14:08:43 +02:00
CWE-611
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-614
Fix typo in query description
2019-04-03 10:46:48 +01:00
CWE-676
Java: Autoformat most queries.
2018-10-11 11:31:37 +02:00
CWE-681
Java: Deprecate ParExpr.
2020-01-30 10:52:16 +01:00
CWE-732
Java: Autoformat most queries.
2018-10-11 11:31:37 +02:00
CWE-798
Merge Hardcoded AWS Credentials check into the mail source folder
2020-07-13 12:22:34 +00:00
CWE-807
Java: Autoformat qls.
2019-02-12 14:38:08 +01:00
CWE-829
java: sharpen java/maven/non-https-url to allow localhost URLs
2020-01-24 08:51:54 +01:00
CWE-833
Java 12: tweak queries to preserve behavior
2019-04-30 10:59:08 -04:00
CWE-835
Java: Deprecate ParExpr.
2020-01-30 10:52:16 +01:00