hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-06 14:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
9d3a9d71f18fbf9fc6421e49beb725f8e3fe91ed
codeql/csharp/ql/src/Security Features
History
Tom Hvitved a4d933d1d6 C#: More results for cs/web/missing-x-frame-options 
Report an alert in _any_ `Web.config` file, as long as it does not have an
`X-Frame-Options` entry (as opposed to only reporting alerts when _all_
`Web.config` files lack the entry).
2020-05-04 09:17:08 +02:00
..
CWE-011
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-016
C#: Autoformat.
2020-01-29 13:15:00 +01:00
CWE-020
Merge pull request #2658 from calumgrant/cs/serialization-check-bypass-type
2020-02-12 10:26:01 +01:00
CWE-022
C#: ZipSlip query reports alert at source
2020-01-21 15:17:06 +00:00
CWE-078
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-079
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-089
C#: Add sources and sinks in Winforms. Update some queries with new sources and sinks.
2019-01-18 15:42:44 +00:00
CWE-090
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-091
C#: Move all predefined sources and sinks into security/dataflow/flow{sinks,sources}
2020-03-25 20:05:39 +01:00
CWE-094
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-099
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-112
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-114
C#: Move all predefined sources and sinks into security/dataflow/flow{sinks,sources}
2020-03-25 20:05:39 +01:00
CWE-117
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-119
C#: Autoformat QL.
2019-10-07 16:10:46 +01:00
CWE-134
C#: Move all predefined sources and sinks into security/dataflow/flow{sinks,sources}
2020-03-25 20:05:39 +01:00
CWE-201
C#: Introduce RemoteFlowSink class
2020-03-25 20:05:39 +01:00
CWE-209
C#: Introduce RemoteFlowSink class
2020-03-25 20:05:39 +01:00
CWE-248
C#: Autoformat follow-up changes
2019-01-02 13:51:30 +01:00
CWE-312
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-321
C#: Autoformat.
2020-01-29 13:15:00 +01:00
CWE-327
C#: Address review comment: an SQL
2020-01-29 11:46:28 +00:00
CWE-352
C#: Convert some multi-line comments
2019-01-14 14:08:54 +01:00
CWE-359
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-384
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-451
C#: More results for cs/web/missing-x-frame-options
2020-05-04 09:17:08 +02:00
CWE-502
C#: Address review comments
2019-11-04 13:43:39 +01:00
CWE-548
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-601
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-611
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-614
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-643
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-730
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-798
C#: Autoformat.
2020-01-29 13:15:00 +01:00
CWE-807
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CWE-838
C#: Move HtmlSinks from XSS.qll into separate file
2020-03-25 20:05:39 +01:00
CWE-937
C#: Autoformat.
2019-09-06 09:04:16 +02:00
CookieWithOverlyBroadDomain.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.ql
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CookieWithOverlyBroadDomainFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.ql
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
CookieWithOverlyBroadPathFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
Encryption using ECB.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
Encryption using ECB.ql
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
HeaderCheckingDisabled.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
HeaderCheckingDisabled.ql
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
InadequateRSAPadding.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.ql
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
InsecureRandomness.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InsecureRandomness.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InsecureRandomness.ql
C#: Move all predefined sources and sinks into security/dataflow/flow{sinks,sources}
2020-03-25 20:05:39 +01:00
InsufficientKeySize.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InsufficientKeySize.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InsufficientKeySize.ql
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
PersistentCookie.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.ql
C#: Autoformat QL queries
2019-01-02 12:59:07 +01:00
WeakEncryption.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.ql
C#: Autoformat.
2020-01-29 13:15:00 +01:00