Erik Krogh Kristensen f67219965e Merge pull request #11082 from erik-krogh/shellArr ...

JS: treat arrays that gets executed with shell:true as a sink for `js/shell-command-constructed-from-input`

2022-11-22 13:03:50 +01:00

..

CWE-020

don't report every non-ascii range in js/overly-large-range

2022-09-13 20:43:52 +02:00

CWE-022

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-073

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-078

Merge pull request #11082 from erik-krogh/shellArr

2022-11-22 13:03:50 +01:00

CWE-079

JS: don't use deprecated files in tests

2022-11-17 22:12:50 +01:00

CWE-089

JS: don't use deprecated files in tests

2022-11-17 22:12:50 +01:00

CWE-094

Merge pull request #11157 from asgerf/js/yaml-locations

2022-11-09 15:57:54 +01:00

CWE-116

fix getCanonicalCharClass in NfaUtils

2022-11-01 21:35:07 +01:00

CWE-117

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-134

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-178

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-200

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-201

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-209

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-295

add some API-nodes to js/disabling-certificate-validation

2022-03-14 21:33:13 +01:00

CWE-300

add js/http-dependency query

2022-01-19 10:05:39 +01:00

CWE-312

fix comment that wasn't updated in test

2022-11-10 15:56:44 +01:00

CWE-313

remove some FPs in js/password-in-configuration-file

2022-10-26 11:51:56 +02:00

CWE-326

don't include mode-of-operation into the algorithm names

2021-11-03 14:54:50 +01:00

CWE-327

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-338

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-346

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-347

update expected output

2022-01-28 12:21:33 +01:00

CWE-352

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-367

fix that js/file-system-race could have FPs related to loops

2022-10-11 13:41:51 +02:00

CWE-377

add query for detecting insecure temprary files

2022-01-18 14:54:56 +01:00

CWE-384

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-400

don't sanitize calls through substring calls that just remove the start

2022-11-01 22:51:07 +01:00

CWE-451

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-502

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-506

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-598

fix wrong comment

2022-05-31 08:38:03 +02:00

CWE-601

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-611

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-614

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-640

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-643

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-730

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-754

update expected files

2022-02-04 12:28:17 +00:00

CWE-770

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-776

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-798

update expected output

2022-09-29 22:48:41 +02:00

CWE-807

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-829

recognize sensitive files by file-system writes

2020-06-25 15:19:42 +02:00

CWE-830

CWE 830 polish error messages

2022-02-22 11:41:54 +01:00

CWE-834

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-843

JS: Expand test case

2022-09-07 14:18:01 +02:00

CWE-862

add a js/empty-password-in-configuration-file query

2022-01-19 10:48:45 +01:00

CWE-912

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-915

Merge pull request #11095 from erik-krogh/exportRead

2022-11-09 12:39:41 +01:00

CWE-916

JavaScript: Update expected output.

2019-10-29 15:36:24 +00:00

CWE-918

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-1004

add session{key,id} as sensitive info

2021-10-26 13:46:59 +02:00

CWE-1275

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00