Joe Farebrother 93f10fcf14 Add sanitizers for compiled regexes

2024-06-11 15:44:16 +01:00

..

CVE-2018-1281

…

CWE-020-ExternalAPIs

Python: update test expectations

2024-05-17 10:59:49 +02:00

CWE-020-IncompleteHostnameRegExp

Python: Update all .expected files

2024-04-22 12:00:09 +00:00

CWE-020-IncompleteUrlSubstringSanitization

Python: Update all .expected files

2024-04-22 12:00:09 +00:00

CWE-020-SuspiciousRegexpRange

escape unicode chars in overly-large-range

2023-09-28 20:16:09 +02:00

CWE-022-PathInjection

Python: Accept qltest .expected file changes.

2024-05-22 15:43:49 +02:00

CWE-022-TarSlip

Python: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

CWE-078-CommandInjection

Python: Move dataflow TestUtil to importable location

2024-04-23 09:40:59 +02:00

CWE-078-CommandInjection-py2

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-078-UnsafeShellCommandConstruction

Python: Move dataflow TestUtil to importable location

2024-04-23 09:40:59 +02:00

CWE-079-Jinja2WithoutEscaping

…

CWE-079-ReflectedXss

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-089-SqlInjection

Python: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

CWE-090-LdapInjection

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-094-CodeInjection

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-113-HeaderInjection

Update test output

2024-05-07 10:49:55 +01:00

CWE-116-BadTagFilter

…

CWE-117-LogInjection

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-209-StackTraceExposure

Python: Accept qltest .expected file changes.

2024-05-22 15:43:49 +02:00

CWE-215-FlaskDebug

…

CWE-285-PamAuthorization

Python: Accept qltest .expected file changes.

2024-05-22 15:43:49 +02:00

CWE-295-MissingHostKeyValidation

…

CWE-295-RequestWithoutValidation

…

CWE-312-CleartextLogging

Add unit tests

2024-05-09 09:47:44 +01:00

CWE-312-CleartextStorage

Python: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

CWE-312-CleartextStorage-py3

Python: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

CWE-326-WeakCryptoKey

…

CWE-327-BrokenCryptoAlgorithm

Address review comment.

2023-10-27 10:19:28 +01:00

CWE-327-InsecureDefaultProtocol

…

CWE-327-InsecureProtocol

…

CWE-327-WeakSensitiveDataHashing

Python: Accept qltest .expected file changes.

2024-05-22 15:43:49 +02:00

CWE-377-InsecureTemporaryFile

…

CWE-502-UnsafeDeserialization

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-601-UrlRedirect

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-611-Xxe

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-643-XPathInjection

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-730-PolynomialReDoS

Python: Update all .expected files

2024-04-22 12:00:09 +00:00

CWE-730-ReDoS

…

CWE-730-RegexInjection

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-732-WeakFilePermissions

…

CWE-776-XmlBomb

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-798-HardcodedCredentials

Python: Update all .expected files

2024-04-22 12:00:09 +00:00

CWE-918-ServerSideRequestForgery

Add sanitizers for compiled regexes

2024-06-11 15:44:16 +01:00

CWE-943-NoSqlInjection

Python: Accept qltest .expected file changes.

2024-05-22 15:43:49 +02:00