hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-19 02:13:17 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
75b13da4e422c6f00519b51a3d29017cebf40aab
codeql/javascript/ql/test/query-tests/Security
History
erik-krogh 396da117bb remove an FP in overly-large-range for [@-Z]
2024-01-25 14:15:06 +01:00
..
CWE-020
remove an FP in overly-large-range for [@-Z]
2024-01-25 14:15:06 +01:00
CWE-022
Apply suggestions from code review
2023-11-21 10:07:11 +00:00
CWE-073
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-078
require arguments to be shell interpreted to be flagged by indirect-command-injection
2023-05-17 11:07:45 +02:00
CWE-079
promote PropsTaintStep to a PreCallGraphStep
2024-01-04 10:45:22 +01:00
CWE-089
use consistent indentation in mongoose.js
2023-06-12 16:40:42 +02:00
CWE-094
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
CWE-116
fix FP by requiring that the regular expression mention on of the chars important in the prefix
2023-07-01 20:30:09 +02:00
CWE-117
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-134
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-178
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-200
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-201
JavaScript: Remove references to LGTM
2022-12-19 15:15:17 +00:00
CWE-209
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-295
add test for https.createServer in DisablingCertificateValidation.ql
2023-03-30 14:15:25 +02:00
CWE-300
add js/http-dependency query
2022-01-19 10:05:39 +01:00
CWE-312
JS: Replace ClearTextLogging::isSanitizerEdge with a node
2023-07-11 14:20:17 +02:00
CWE-313
remove some FPs in js/password-in-configuration-file
2022-10-26 11:51:56 +02:00
CWE-326
don't include mode-of-operation into the algorithm names
2021-11-03 14:54:50 +01:00
CWE-327
Address review comment.
2023-10-27 10:19:28 +01:00
CWE-338
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-346
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-347
update expected output
2022-01-28 12:21:33 +01:00
CWE-352
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-367
fix that js/file-system-race could have FPs related to loops
2022-10-11 13:41:51 +02:00
CWE-377
add query for detecting insecure temprary files
2022-01-18 14:54:56 +01:00
CWE-384
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-400
support arbitrary codepoints in NfaUtils.qll
2023-08-08 22:14:51 +02:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
JS: Add tests
2023-04-26 12:46:20 +02:00
CWE-506
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-598
fix wrong comment
2022-05-31 08:38:03 +02:00
CWE-601
Make suggestion to replace example.com more explicit.
2023-09-12 16:54:05 +01:00
CWE-611
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-614
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-640
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-643
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-730
JS: Update RegExpInjection test and expectations
2023-05-26 14:05:36 +02:00
CWE-754
Fix associated test
2022-12-20 12:51:13 +09:00
CWE-770
Move test files into right directory.
2023-10-26 12:16:52 +01:00
CWE-776
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-798
update expected output
2022-09-29 22:48:41 +02:00
CWE-807
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-830
CWE 830 polish error messages
2022-02-22 11:41:54 +01:00
CWE-834
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-843
JS: Expand test case
2022-09-07 14:18:01 +02:00
CWE-862
add a js/empty-password-in-configuration-file query
2022-01-19 10:48:45 +01:00
CWE-912
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-915
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
add encodeURIComponent as a sanitizer for request-forgery
2023-01-23 13:53:53 +01:00
CWE-1004
add session{key,id} as sensitive info
2021-10-26 13:46:59 +02:00
CWE-1275
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00