Tony Torralba bfa14fa066 Merge pull request #7823 from JLLeitschuh/improve/JLL/combined_http_headers ...

Java: Add HTTP Request Splitting to Netty Query

2022-02-15 10:24:36 +01:00

..

CWE-020

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-022

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-074

Apply suggestion from code review

2021-09-27 12:00:21 +02:00

CWE-078

Deduplicate shared body of regular and experimental versions of java/command-line-injection query.

2021-07-01 14:53:56 +01:00

CWE-079

Remove JSF XSS Example

2021-09-14 11:47:37 +01:00

CWE-089

Downgrade precision of java/concatenated-sql-query

2021-08-24 10:46:01 +01:00

CWE-090

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-094

Update SpelInjection.qhelp

2021-09-27 11:40:51 +02:00

CWE-113

Remove CAPC and add CWE-93

2022-02-09 12:31:53 -05:00

CWE-117

Update java/ql/src/Security/CWE/CWE-117/LogInjection.ql

2022-01-11 16:25:32 +01:00

CWE-129

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-134

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-190

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-200

Review feedback and improve temp dir vulnerable/safe code sugestion

2022-02-14 11:29:16 -05:00

CWE-209

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-266

Don't capitalize the term content provider

2022-01-20 13:23:52 +01:00

CWE-273

Apply suggestions from code review

2022-01-19 16:43:48 +01:00

CWE-295

Update InsecureTrustManager.qhelp

2022-01-20 10:24:46 +01:00

CWE-297

Apply suggestions from code review

2021-10-05 09:40:22 +02:00

CWE-312

Apply suggestions from code review

2022-01-21 16:55:42 +01:00

CWE-319

Refactored HttpsUrls.ql

2021-09-15 17:20:28 +02:00

CWE-327

Merge pull request #7318 from RasmusWL/java-cwe-328

2021-12-07 11:39:48 +01:00

CWE-335

Split up Random.qll

2021-07-02 10:00:49 +01:00

CWE-338

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-347

Apply suggestions from code review

2021-08-04 13:15:49 +02:00

CWE-352

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-367

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-421

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-470

Update java/ql/src/Security/CWE/CWE-470/FragmentInjection.inc.qhelp

2022-01-17 11:20:39 +01:00

CWE-502

Add change note and update qhelp

2021-10-12 12:35:05 +01:00

CWE-522

Fix scope issues in the Java example

2021-09-15 17:20:28 +02:00

CWE-601

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-611

Document XXE sanitisation policy

2021-11-24 12:03:28 +00:00

CWE-614

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-643

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-676

Add security-severity metadata

2021-06-10 20:11:08 +01:00

CWE-681

remove redundant inline casts in arguments where the type is inferred by the call target

2021-10-29 14:37:56 +02:00

CWE-732

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-749

Apply suggestions from code review

2021-08-02 09:56:40 +02:00

CWE-798

Java: Deprecate StringLiteral.getRepresentedString()

2021-10-29 14:50:15 +02:00

CWE-807

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-829

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-833

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-835

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-917

Doc improvements

2021-07-29 15:35:39 +02:00

CWE-918

Update Security-Severity for CWE-918

2021-08-04 12:17:21 +02:00

CWE-927

Update java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.qhelp

2022-01-21 11:57:11 +01:00

CWE-940

Apply suggestions from code review

2021-11-04 10:08:53 +01:00

CWE-1104

Add security-severity metadata

2021-06-10 20:11:08 +01:00