Max Schaefer 6964945c74 JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

..

CWE-020

JS: add query js/useless-regexp-character-escape

2019-10-16 00:15:54 +02:00

CWE-022

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-078

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-079

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-089

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-094

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-116

JS: whitelist quote stripping for js/incomplete-sanitization

2019-09-05 09:47:49 +01:00

CWE-134

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-200

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-201

JavaScript: Extend suspiciousCredentials predicate to recognise authKey and similar.

2019-01-31 09:03:23 +00:00

CWE-209

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-312

JavaScript: Update qhelp example for CleartextStorage.

2019-02-08 08:43:22 +00:00

CWE-313

JS: whitelist some hardcoded dummy-passwords in two queries

2019-09-16 10:11:43 +02:00

CWE-327

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-338

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-346

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-352

JS: review comments

2018-09-21 14:46:21 +01:00

CWE-400

JS: Add angular.merge sink to prototype pollution query

2019-09-04 16:14:51 +01:00

CWE-451

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-502

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-506

JavaScript: Address review comments.

2018-11-29 10:48:44 +00:00

CWE-601

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-611

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-640

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-643

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-730

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-754

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-770

JavaScript: Add support for rate-limiter-flexible package.

2019-09-18 12:25:33 +01:00

CWE-776

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-798

JS: exclude keys from whitelist

2019-09-16 10:13:18 +02:00

CWE-807

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-834

fix capitalization in test case

2019-09-13 14:54:18 +01:00

CWE-843

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-912

JavaScript: Restrict edges to only contain nodes.

2019-10-29 15:03:52 +00:00

CWE-916

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-918

JS: be less conservative about incomplete nodes in prefix sanitizers

2019-04-03 15:20:03 +01:00

Summaries

JavaScript: Shrink Configurations.qll some more.

2019-06-03 10:32:25 +01:00