hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 00:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
6c33013788e7a3c551c1a8a9268471fa65fe3334
codeql/javascript/ql/test/query-tests/Security
History
Asger F 6c33013788 JS: Enable association with headers without needing a route handler 
Previously it was not possible to associate a ResponseSendArgument with its header definitions if they did not have the same route handler.

But for calls like `new Response(body, { headers })` the headers are fairly obvious whereas the route handler is unnecessarily hard to find. So we use the direct and obvious association between 'body' and 'headers' in the call.
2025-04-03 11:08:10 +02:00
..
CWE-020
raw test output
2025-02-28 13:29:39 +01:00
CWE-022
Added support for lutimes, opendir, and statfs functions from fs-extra.
2025-03-28 08:37:30 +01:00
CWE-073
raw test output
2025-02-28 13:29:39 +01:00
CWE-078
Update javascript/ql/test/query-tests/Security/CWE-078/UselessUseOfCat/uselesscat.js
2025-03-10 14:18:22 +01:00
CWE-079
JS: Enable association with headers without needing a route handler
2025-04-03 11:08:10 +02:00
CWE-089
Add test case to ensure exec calls without middleware injection into Express are not flagged.
2025-03-30 14:09:15 +02:00
CWE-094
raw test output
2025-02-28 13:29:39 +01:00
CWE-116
Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js
2025-03-10 14:19:33 +01:00
CWE-117
raw test output
2025-02-28 13:29:39 +01:00
CWE-134
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-178
raw test output
2025-02-28 13:29:39 +01:00
CWE-200
Applied copilot suggestions.
2025-03-28 13:19:11 +01:00
CWE-201
raw test output
2025-02-28 13:29:39 +01:00
CWE-209
raw test output
2025-02-28 13:29:39 +01:00
CWE-295
raw test output
2025-02-28 13:29:39 +01:00
CWE-300
raw test output
2025-02-28 13:29:39 +01:00
CWE-312
raw test output
2025-02-28 13:29:39 +01:00
CWE-313
raw test output
2025-02-28 13:29:39 +01:00
CWE-326
raw test output
2025-02-28 13:29:39 +01:00
CWE-327
raw test output
2025-02-28 13:29:39 +01:00
CWE-338
raw test output
2025-02-28 13:29:39 +01:00
CWE-346
raw test output
2025-02-28 13:29:39 +01:00
CWE-347
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-352
raw test output
2025-02-28 13:29:39 +01:00
CWE-367
raw test output
2025-02-28 13:29:39 +01:00
CWE-377
raw test output
2025-02-28 13:29:39 +01:00
CWE-384
raw test output
2025-02-28 13:29:39 +01:00
CWE-400
JS: Line number changes in redos test case
2025-03-10 14:36:49 +01:00
CWE-451
raw test output
2025-02-28 13:29:39 +01:00
CWE-502
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-506
raw test output
2025-02-28 13:29:39 +01:00
CWE-522-DecompressionBombs
raw test output
2025-02-28 13:29:39 +01:00
CWE-598
raw test output
2025-02-28 13:29:39 +01:00
CWE-601
raw test output
2025-02-28 13:29:39 +01:00
CWE-611
JS: Remove duplicate '$ Alert' in libxml test
2025-03-10 14:23:44 +01:00
CWE-614
raw test output
2025-02-28 13:29:39 +01:00
CWE-640
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-643
raw test output
2025-02-28 13:29:39 +01:00
CWE-693
raw test output
2025-02-28 13:29:39 +01:00
CWE-730
Update javascript/ql/test/query-tests/Security/CWE-730/server-crash.js
2025-03-10 14:21:46 +01:00
CWE-754
raw test output
2025-02-28 13:29:39 +01:00
CWE-770
raw test output
2025-02-28 13:29:39 +01:00
CWE-776
raw test output
2025-02-28 13:29:39 +01:00
CWE-798
raw test output
2025-02-28 13:29:39 +01:00
CWE-807
raw test output
2025-02-28 13:29:39 +01:00
CWE-829
raw test output
2025-02-28 13:29:39 +01:00
CWE-830
raw test output
2025-02-28 13:29:39 +01:00
CWE-834
raw test output
2025-02-28 13:29:39 +01:00
CWE-843
raw test output
2025-02-28 13:29:39 +01:00
CWE-862
raw test output
2025-02-28 13:29:39 +01:00
CWE-912
Added NodeJSFileSystemVectorWrite class for vectored write.
2025-03-28 13:07:23 +01:00
CWE-915
raw test output
2025-02-28 13:29:39 +01:00
CWE-916
JS: Enable post-processing for all .qlref files
2025-02-28 13:27:33 +01:00
CWE-918
JS: Track through spread/rest params in API graphs
2025-03-28 09:14:36 +01:00
CWE-1004
raw test output
2025-02-28 13:29:39 +01:00
CWE-1275
raw test output
2025-02-28 13:29:39 +01:00