Tony Torralba 05b487e3a6 Go: Recognize unsafe candidate selection in go/insecure-randomness

2024-01-11 11:58:12 +01:00

..

CWE-020

Make DataFlowType a singleton

2022-12-14 14:40:15 +00:00

CWE-022

Accept test changes

2023-06-20 13:25:49 +01:00

CWE-078

Update existing test (extra nodes, no extra alerts)

2023-11-15 15:33:09 +00:00

CWE-079

Update test expectations

2024-01-09 17:00:20 +01:00

CWE-089

Update test expectations

2024-01-09 17:00:20 +01:00

CWE-117

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-190

Make AllocationSizeOverflow use new API

2023-08-10 15:48:44 +01:00

CWE-209

Make DataFlowType a singleton

2022-12-14 14:40:15 +00:00

CWE-295/DisabledCertificateCheck

codeql-go merge prep: move into go/ directory

2022-05-20 10:07:19 -07:00

CWE-312

Use arg position instead of arg as class field to reduce number of instances

2024-01-10 14:12:29 +01:00

CWE-322

Make DataFlowType a singleton

2022-12-14 14:40:15 +00:00

CWE-326

Make DataFlowType a singleton

2022-12-14 14:40:15 +00:00

CWE-327

Accept test changes

2023-06-20 13:25:49 +01:00

CWE-338/InsecureRandomness

Go: Recognize unsafe candidate selection in go/insecure-randomness

2024-01-11 11:58:12 +01:00

CWE-352

Make ConstantOauth2State use new API

2023-08-10 15:49:08 +01:00

CWE-601

Make OpenURLRedirect use new API

2023-08-10 15:48:55 +01:00

CWE-640

Accept test changes

2023-04-12 15:05:04 +01:00

CWE-643

Add const XMLParseNoEnt to stub

2023-12-21 00:49:14 +00:00

CWE-681

Fix MaxIntOrMaxUint.isBoundFor

2023-12-17 06:16:33 +00:00

CWE-798

codeql-go merge prep: move into go/ directory

2022-05-20 10:07:19 -07:00

CWE-918

Make RequestForgery use new API

2023-08-10 15:48:53 +01:00