Asger F e9f1e99526 Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization ...

JS: Update model of js-yaml

2023-05-01 09:57:20 +02:00

..

CWE-020

Update UntrustedDataToExternalAPI.expected

2023-04-17 08:23:04 +02:00

CWE-022

…

CWE-073

…

CWE-078

make appliesTo recursive

2023-02-14 14:16:45 +01:00

CWE-079

Track interfile useRouter

2023-04-28 15:49:26 +09:00

CWE-089

JS: Step through HTML sanitizers in SQL injection query

2023-03-06 15:10:26 +01:00

CWE-094

use SSA in the GetLaterAccess module

2023-03-21 15:19:15 +01:00

CWE-116

recognize "-->" as a bad tag filter

2023-01-10 18:09:56 +01:00

CWE-117

…

CWE-134

…

CWE-178

…

CWE-200

…

CWE-201

JavaScript: Remove references to LGTM

2022-12-19 15:15:17 +00:00

CWE-209

…

CWE-295

add test for https.createServer in DisablingCertificateValidation.ql

2023-03-30 14:15:25 +02:00

CWE-300

…

CWE-312

fix comment that wasn't updated in test

2022-11-10 15:56:44 +01:00

CWE-313

…

CWE-326

…

CWE-327

JS: add a missing space in alert message for js/weak-cryptographic-algorithm

2023-03-22 11:12:13 +00:00

CWE-338

…

CWE-346

…

CWE-347

…

CWE-352

…

CWE-367

…

CWE-377

…

CWE-384

…

CWE-400

materialize less strings when ranking states

2023-03-23 10:35:58 +01:00

CWE-451

…

CWE-502

JS: Add tests

2023-04-26 12:46:20 +02:00

CWE-506

…

CWE-598

…

CWE-601

recognize more express URL related sources

2023-03-15 10:14:31 +01:00

CWE-611

…

CWE-614

…

CWE-640

…

CWE-643

…

CWE-730

don't call environment variables for command-line arguments

2023-02-14 14:27:41 +01:00

CWE-754

Fix associated test

2022-12-20 12:51:13 +09:00

CWE-770

Updated express-rate-limit example to match implementation examples found on packages README

2023-01-18 14:42:40 -05:00

CWE-776

…

CWE-798

…

CWE-807

…

CWE-829

…

CWE-830

…

CWE-834

…

CWE-843

…

CWE-862

…

CWE-912

…

CWE-915

JS: Fix the ExtendCall restriction

2023-04-17 12:30:08 +02:00

CWE-916

…

CWE-918

add encodeURIComponent as a sanitizer for request-forgery

2023-01-23 13:53:53 +01:00

CWE-1004

…

CWE-1275

…