hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-29 03:38:17 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
7bf55fbc497457d85cd250503dd67d811fe9c5c3
codeql/javascript/ql/test/query-tests/Security
History
Erik Krogh Kristensen 8569d261f7 add test
2021-09-13 20:43:31 +02:00
..
CWE-020
JS: Sharpen recognition of string 'match' calls
2021-06-16 09:27:02 +02:00
CWE-022
add the cwd option to shell executions as a sink to js/path-injection
2021-08-23 07:32:05 +02:00
CWE-073
…
CWE-078
add a getMaybePromisifiedCall method in API graphs, and use it to model child_process
2021-08-25 10:27:09 +02:00
CWE-079
add test
2021-09-13 20:43:31 +02:00
CWE-089
add support for graphql in @actions/github
2021-06-15 09:43:11 +02:00
CWE-094
JS: Remove use of deprecated API
2021-08-12 09:30:43 +02:00
CWE-116
exclude char classes that match everything
2021-08-18 08:59:17 +00:00
CWE-117
Merge branch 'main' into logs
2021-07-16 11:21:25 +02:00
CWE-134
…
CWE-200
model serve-handler in js/exposure-of-private-files
2021-06-08 09:52:56 +02:00
CWE-201
…
CWE-209
…
CWE-295
support all ClientRequests in js/disabling-certificate-validation
2021-04-12 15:06:10 +02:00
CWE-312
add support for the debug library
2021-06-02 23:11:15 +02:00
CWE-313
…
CWE-327
…
CWE-338
fix casing on the uid regexp
2021-05-13 23:04:30 +02:00
CWE-346
…
CWE-352
…
CWE-400
…
CWE-451
…
CWE-502
…
CWE-506
…
CWE-601
refactor the history library model, add support for the global variable
2021-06-07 15:42:13 +02:00
CWE-611
JS: Update expectations with new sources
2021-03-16 13:28:12 +00:00
CWE-614
Cookies without HttpOnly
2021-04-27 16:28:32 +03:00
CWE-640
…
CWE-643
JS: Update expectations with new sources
2021-03-16 13:28:12 +00:00
CWE-730
JS: Update RegExpInjection test case
2021-06-22 12:00:04 +02:00
CWE-754
…
CWE-770
JS: Use function-forwarding steps when tracking rate limiters
2021-04-20 13:00:42 +01:00
CWE-776
JS: Update expectations with new sources
2021-03-16 13:28:12 +00:00
CWE-798
don't report dummy authentication headers as hardcoded-crendentials
2021-08-02 22:56:14 +02:00
CWE-807
…
CWE-829
…
CWE-834
…
CWE-843
…
CWE-912
…
CWE-915
JS: Remove use of deprecated API
2021-08-12 09:30:43 +02:00
CWE-916
…
CWE-918
add taint-step for URL construction in js/request-forgery
2021-04-08 11:10:33 +02:00
CWE-1004
update test message
2021-05-04 00:32:01 +03:00
Summaries
…