hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-18 05:24:01 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
5db8306fef23f8f164a40d5221f1699db3507733
codeql/java/ql/test/query-tests/security
History
Tony Torralba 5db8306fef Stop considering usernames sensitive info 
Require variables to be static to be considered constants
2022-05-12 11:46:52 +02:00
..
CWE-022/semmle/tests
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-074
Remove some JNDI Injection sinks
2022-01-21 17:47:15 +01:00
CWE-078
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-079/semmle/tests
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-089/semmle/examples
Merge branch 'main' into charSeqSubSeq
2021-09-09 16:04:36 +02:00
CWE-090
Merge branch 'main' into charSeqSubSeq
2021-09-09 16:04:36 +02:00
CWE-094
Move to lib
2021-09-27 11:43:46 +02:00
CWE-113/semmle/tests
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-117
Add stubs & tests
2021-11-03 17:26:13 +01:00
CWE-129/semmle/tests
Merge branch 'main' into charSeqSubSeq
2021-09-09 16:04:36 +02:00
CWE-134/semmle/tests
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-190/semmle/tests
Merge branch 'main' into charSeqSubSeq
2021-09-09 16:04:36 +02:00
CWE-200/semmle/tests
Add additional File taint value flow models
2022-04-26 10:42:53 -04:00
CWE-209/semmle/tests
…
CWE-266
Add Intent URI Permission Manipulation query
2022-01-20 13:23:14 +01:00
CWE-273
Decouple UnsafeCertTrust.qll to reuse the taint tracking configuration
2022-01-19 16:43:43 +01:00
CWE-295/InsecureTrustManager
Change InsecureTrustManagerConfiguration to DataFlow
2022-01-20 10:24:47 +01:00
CWE-297
Java: Fix tests.
2021-10-29 14:25:43 +02:00
CWE-311
Insecure cookie query: accept ServletRequest.isSecure(), and allow more than one possible input to a setSecure(...) call.
2022-05-11 11:59:37 +01:00
CWE-312
Add value-preserving steps for SharedPreferences
2022-04-22 17:44:59 +02:00
CWE-327/semmle/tests
Java: Address feedback and fix test failures
2021-09-16 14:10:48 +01:00
CWE-335/semmle/tests
…
CWE-338/semmle/tests
…
CWE-347
Refactor to path query
2021-08-04 13:05:18 +02:00
CWE-367/semmle/tests
…
CWE-421/semmle
…
CWE-470
Apply code review suggestions
2022-01-17 12:02:27 +01:00
CWE-502
Fix tests disrupted by re-modelling and stubbing Android 9:
2021-10-12 12:35:05 +01:00
CWE-522
Adapt InsecureBasicAuth to the previous commit
2021-09-15 17:20:28 +02:00
CWE-532
Stop considering usernames sensitive info
2022-05-12 11:46:52 +02:00
CWE-601/semmle/tests
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-611
Update java/ql/test/query-tests/security/CWE-611/DocumentBuilderTests.java
2021-11-25 12:52:08 +00:00
CWE-643
…
CWE-676/semmle/tests
…
CWE-681/semmle/tests
Merge branch 'main' into charSeqSubSeq
2021-09-09 16:04:36 +02:00
CWE-732/semmle/tests
…
CWE-749
Decouple UnsafeAndroidAccess.qll to reuse the taint tracking configuration
2021-07-20 17:46:35 +02:00
CWE-798/semmle/tests
Java: Fix tests.
2021-10-29 14:25:43 +02:00
CWE-807/semmle/tests
Improve handling of the 'author' word as an exception
2021-09-16 11:57:28 +02:00
CWE-829/semmle/tests
…
CWE-833/semmle/tests
…
CWE-835/semmle/tests
…
CWE-917
Decouple OgnlInjection.qll to reuse the taint tracking configuration
2021-07-20 17:21:10 +02:00
CWE-918
Java: Add JDBC connection SSRF sinks
2022-03-12 16:35:32 +04:00
CWE-927
Refactor to use FlowState
2022-01-14 12:24:35 +01:00
CWE-940
Add intent creation from a URI as a taint step
2021-10-18 12:18:07 +02:00
CWE-1104/semmle/tests
…