hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 12:46:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
a0ae8b3a9787daefd2256f8a4f8e76d33db3aa33
codeql/java/ql/src/Security/CWE
History
Joe Farebrother 59e400d2e0 Merge pull request #7723 from joefarebrother/redos 
Java: Add ReDoS queries
2022-05-12 13:50:38 +01:00
..
CWE-020
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-022
Use EqualityTest for either value or ref comparions, and ReferenceEqualityTest for strictly ref comparison.
2022-05-10 19:51:17 +01:00
CWE-074
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-078
Deduplicate shared body of regular and experimental versions of java/command-line-injection query.
2021-07-01 14:53:56 +01:00
CWE-079
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-089
Update Sql Injection queries
2022-04-06 10:57:14 +02:00
CWE-090
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-094
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-113
Remove CAPC and add CWE-93
2022-02-09 12:31:53 -05:00
CWE-117
Update java/ql/src/Security/CWE/CWE-117/LogInjection.ql
2022-01-11 16:25:32 +01:00
CWE-129
Java: Make JumpStmt a proper superclass
2022-03-30 00:30:27 +02:00
CWE-134
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-190
Kotlin: Add types for the different kinds of casts that Kotlin has
2022-05-10 19:51:13 +01:00
CWE-200
Add additional File taint value flow models
2022-04-26 10:42:53 -04:00
CWE-209
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-266
Don't capitalize the term content provider
2022-01-20 13:23:52 +01:00
CWE-273
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-295
Update InsecureTrustManager.qhelp
2022-01-20 10:24:46 +01:00
CWE-297
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-312
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-319
Simplify non-https-url query
2022-05-02 15:43:07 +02:00
CWE-327
Merge pull request #7318 from RasmusWL/java-cwe-328
2021-12-07 11:39:48 +01:00
CWE-335
Java: Add cwe-377 tag to predictable-seed
2022-05-03 12:28:14 +01:00
CWE-338
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-347
Apply suggestions from code review
2021-08-04 13:15:49 +02:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-367
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-421
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-470
Update java/ql/src/Security/CWE/CWE-470/FragmentInjection.inc.qhelp
2022-01-17 11:20:39 +01:00
CWE-502
Add change note and update qhelp
2021-10-12 12:35:05 +01:00
CWE-522
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-532
Add security severity
2022-03-15 10:42:41 +00:00
CWE-601
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-611
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-614
Insecure cookie query: accept ServletRequest.isSecure(), and allow more than one possible input to a setSecure(...) call.
2022-05-11 11:59:37 +01:00
CWE-643
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-676
Add security-severity metadata
2021-06-10 20:11:08 +01:00
CWE-681
Use EqualityTest for either value or ref comparions, and ReferenceEqualityTest for strictly ref comparison.
2022-05-10 19:51:17 +01:00
CWE-730
Fix codescanning alerts
2022-05-04 15:58:30 +01:00
CWE-732
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-749
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-798
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
CWE-807
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-829
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00
CWE-833
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-835
Java: Make JumpStmt a proper superclass
2022-03-30 00:30:27 +02:00
CWE-917
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-918
Update Security-Severity for CWE-918
2021-08-04 12:17:21 +02:00
CWE-927
Update java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.qhelp
2022-01-21 11:57:11 +01:00
CWE-940
Apply suggestions from code review
2021-11-04 10:08:53 +01:00
CWE-1104
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00