hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-28 14:46:33 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
a66743192e72e7f12f7f214c74153d5ad783fc4a
codeql/javascript/ql/test/query-tests/Security
History
CodeQL CI 527c41520e Merge pull request #4951 from esbena/js/reintroduce-server-crash 
Approved by erik-krogh
2021-01-22 06:37:50 -08:00
..
CWE-020
JS: Add UntrustedDataToExternalApi query
2020-11-19 13:42:25 +00:00
CWE-022
better support for the &&=, ||=, and ??= operators
2020-08-13 09:22:32 +02:00
CWE-078
support sanitizers that sanitize individual chars in js/shell-command-constructed-from-input
2021-01-07 13:58:25 +01:00
CWE-079
JS: Add test for new sink
2021-01-18 10:55:34 +00:00
CWE-089
JavaScript: Add models for more Mongoose methods.
2020-11-30 16:32:13 +00:00
CWE-094
JS: Update test expectations
2020-12-03 15:01:50 +00:00
CWE-116
JS: only select non-nullable terms in the broken sanitizer
2021-01-12 08:50:19 +01:00
CWE-117
add test case
2020-12-01 09:18:40 +01:00
CWE-134
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-200
avoid reporting empty names in js/exposure-of-private-files
2020-11-23 14:24:42 +01:00
CWE-201
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-209
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-295
JS: add query js/disabling-certificate-validation
2020-06-11 12:32:01 +02:00
CWE-312
remove FPs in js/build-artifact-leak where the "leaked" properties are constrained to a safe subset
2020-11-18 10:35:02 +01:00
CWE-313
JS: whitelist some hardcoded dummy-passwords in two queries
2019-09-16 10:11:43 +02:00
CWE-327
add qhelp to js/biased-cryptographic-random
2020-06-16 11:10:09 +02:00
CWE-338
update inconsistency comment for CWE-338
2020-07-08 10:00:19 +02:00
CWE-346
update inconsistency comment for CWE-346
2020-07-08 10:01:04 +02:00
CWE-352
add support for more custom CSRF checking middlewares
2020-10-20 15:16:14 +02:00
CWE-400
JS: Move and rename test cases as well
2020-12-07 10:16:38 +00:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-506
update inconsistency comment for CWE-506
2020-07-08 10:01:40 +02:00
CWE-601
JS: Add test case
2020-12-03 15:08:43 +00:00
CWE-611
adjust test case for XML entity expansion
2020-09-24 09:53:06 +02:00
CWE-614
Update expected output
2020-08-26 23:50:15 +02:00
CWE-640
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-643
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-730
JS: reformulate js/server-crash. Support promises and shorter paths.
2021-01-19 09:08:52 +01:00
CWE-754
update consistency comments for CWE-754
2020-07-08 10:08:51 +02:00
CWE-770
JavaScript: Switch MissingRateLimiting.qll to API graphs.
2020-09-02 17:35:47 +01:00
CWE-776
update comment position to match alert location for CWE-776
2020-07-08 10:10:31 +02:00
CWE-798
only flag the secret key in JWT
2020-11-12 21:36:05 +01:00
CWE-807
JS: add js/conditional-bypass example as a test case
2020-12-22 09:34:25 +01:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-834
move comments to match alert location for CWE-834
2020-07-08 10:16:04 +02:00
CWE-843
JS: Add type confusion sink for prototype pollution checks
2020-12-07 10:16:38 +00:00
CWE-912
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-915
JS: Fix TypeofCheck
2020-12-07 10:46:00 +00:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
add JSDOM.fromUrl() as a request forgery sink
2020-11-02 17:05:56 +01:00
Summaries
JavaScript: Move flow summaries to experimental.
2020-03-09 12:57:20 +00:00