retanoj 9cfeaeb18e Merge branch 'main' into MybatisSqli

2022-12-07 21:19:08 +08:00

..

CWE-016

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-020

Java: Convert log4j-injection to data extensions.

2022-11-28 12:30:35 +01:00

CWE-036

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-073

Java: Remove unneeded imports of ExternalFlow.qll.

2022-12-05 09:49:38 +01:00

CWE-078

java guidance: experimental version of exectainted

2022-10-03 11:18:17 -07:00

CWE-089

consider blankspace / comma /dot field

2022-12-07 10:06:39 +08:00

CWE-094

spelling: response

2022-10-12 04:40:26 -04:00

CWE-200

Java: Convert android-web-resource-response to data extensions.

2022-11-28 12:30:35 +01:00

CWE-208

Use EqualityTest for either value or ref comparions, and ReferenceEqualityTest for strictly ref comparison.

2022-05-10 19:51:17 +01:00

CWE-295

Move from experimental

2022-01-20 10:23:18 +01:00

CWE-297

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-299

Java: Fix typo: ceritificate

2022-11-23 12:12:32 +00:00

CWE-321

Java: Convert hardcoded-jwt-key models to data extensions.

2022-11-28 12:30:35 +01:00

CWE-327

spelling: currently

2022-10-11 00:23:36 -04:00

CWE-346

Move to experimental and review feedback

2021-03-05 07:26:29 +05:30

CWE-348

Fix references to logging library

2021-11-04 09:15:57 +01:00

CWE-352

Java: Fix incorrect annotation handling for SpringControllerRequestMappingGetMethod

2022-09-16 15:49:16 +01:00

CWE-400

Java: Convert thread-resource-abuse to data extensions.

2022-11-28 12:30:35 +01:00

CWE-470

spelling: application

2022-10-11 00:23:35 -04:00

CWE-489

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-502

spelling: deserialization

2022-10-11 00:23:36 -04:00

CWE-522

make some acronyms camelCase

2022-08-22 21:22:35 +02:00

CWE-548

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-552

Java: Convert unsafe-url-forward to data extensions.

2022-11-28 12:30:35 +01:00

CWE-555

update java/password-in-configuration to match csharp

2022-08-22 21:41:46 +02:00

CWE-598

use matches instead of regexpMatch

2021-11-18 15:41:25 +01:00

CWE-600

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-601

Share SpringUrlRedirect library

2022-08-17 10:43:43 +02:00

CWE-611

make some acronyms camelCase

2022-08-22 21:22:35 +02:00

CWE-625

Java: Convert permissve-dot-regex-query to data extensions.

2022-11-28 12:30:35 +01:00

CWE-652

move the query to experimental folder

2021-03-05 14:38:04 +08:00

CWE-665

spelling: initialization

2022-10-11 03:59:08 -04:00

CWE-755

rename more acronyms

2022-08-25 20:52:27 +02:00

CWE-759

delete all dead code

2022-03-14 13:03:31 +01:00

CWE-939

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-1004

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00