codeql

CWE-020

support that two indexOf() calls use the same string-concatenation in getAnEquivalentIndexOfCall()

2025-01-21 09:43:57 +01:00

CWE-022

JS: Update output from tests that changed on main

2024-12-19 15:25:47 +01:00

CWE-073

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-078

JS: Move a test failure explanation into the test suite

2025-01-09 09:57:44 +01:00

CWE-079

Updated tests

2025-01-24 16:52:11 +00:00

CWE-089

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-094

JS: Updates to nodes/edges in tests

2024-10-29 08:32:13 +01:00

CWE-116

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-117

JS: Benign test output changes

2024-11-26 15:47:13 +01:00

CWE-134

JS: Port TaintedFormatString

2023-10-13 13:15:05 +02:00

CWE-178

Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql

2024-11-25 12:12:12 +01:00

CWE-200

JS: Updates to nodes/edges in tests

2024-10-29 08:32:13 +01:00

CWE-201

JS: Updates to nodes/edges in tests

2024-10-29 08:32:13 +01:00

CWE-209

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-295

add test for https.createServer in DisablingCertificateValidation.ql

2023-03-30 14:15:25 +02:00

CWE-300

…

CWE-312

fix example in clear-text-logging qhelp to actually be bad

2025-01-27 11:31:28 +01:00

CWE-313

remove some FPs in js/password-in-configuration-file

2022-10-26 11:51:56 +02:00

CWE-326

Add support for importing NPM modules in XSJS sources

2024-08-13 14:45:03 +02:00

CWE-327

JS: Update test output with provenance column

2024-06-25 10:30:56 +02:00

CWE-338

JS: Rename file to foo.test.js

2024-11-26 13:44:00 +01:00

CWE-346

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-347

…

CWE-352

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-367

fix that js/file-system-race could have FPs related to loops

2022-10-11 13:41:51 +02:00

CWE-377

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-384

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-400

JS: Update output from tests that changed on main

2024-12-19 15:25:47 +01:00

CWE-451

…

CWE-502

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-506

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-522-DecompressionBombs

JS: Port experimental DecompressionBombs to ConfigSig

2024-12-03 14:30:21 +01:00

CWE-598

…

CWE-601

JS: Add test

2025-02-11 10:40:04 +01:00

CWE-611

JS: Update a JS test case

2025-02-03 11:31:03 +01:00

CWE-614

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-640

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-643

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-693

Fixed expected test results for Helmet query

2024-06-26 11:31:57 +01:00

CWE-730

JS: Update output from tests that changed on main

2024-12-19 15:25:47 +01:00

CWE-754

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-770

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-776

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-798

JS: Update test output

2024-08-22 14:27:15 +02:00

CWE-807

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-829

JS: Update lost result in insecure-download

2024-11-21 13:33:10 +01:00

CWE-830

Moved from experimental into default queries

2024-07-11 11:44:01 +01:00

CWE-834

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-843

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-862

…

CWE-912

JS: Update some tests with provenance columns

2024-06-26 13:51:44 +02:00

CWE-915

JS: Update output from tests that changed on main

2024-12-19 15:25:47 +01:00

CWE-916

JS: Port InsufficientPasswordHash

2023-10-13 13:15:05 +02:00

CWE-918

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

CWE-1004

…

CWE-1275

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00