hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-20 08:53:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
b9d409279bf38b8e3200c07d453ea1581a78b0fe
codeql/java/ql/src/Security/CWE
History
Jonathan Leitschuh b9d409279b Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp 
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
2023-03-31 23:36:07 -04:00
..
CWE-020
Refactor ExternalAPIs.qll
2023-03-29 22:33:08 -04:00
CWE-022
Move ZipSlip configurations to Query.qll library
2023-03-29 17:59:33 -04:00
CWE-023
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp
2023-03-31 23:36:07 -04:00
CWE-074
Refactor to DataFlow::Global
2023-03-24 10:04:46 -04:00
CWE-078
Fix ExecUnescaped
2023-03-29 11:45:09 -04:00
CWE-079
Move XssConfig to XssQuery.qll
2023-03-29 17:59:33 -04:00
CWE-089
Fix SqlConcatenated
2023-03-27 13:06:31 -04:00
CWE-090
Move LdapInjectionLib to LdapInjectionQuery.qll
2023-03-29 17:59:33 -04:00
CWE-094
Move InsecureBeanValidation configuration to Query.qll
2023-03-29 17:59:33 -04:00
CWE-113
Move ResponseSplitting configuration to ResponseSplittingQuery.qll
2023-03-29 17:59:33 -04:00
CWE-117
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-129
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-134
Fix StringFormat import
2023-03-30 11:20:35 -04:00
CWE-190
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-200
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-209
Java/C++: Autoformat
2023-03-23 13:06:19 +01:00
CWE-266
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-273
Refactor UnsafeCertTrustQuery
2023-03-29 22:33:08 -04:00
CWE-295
Refactor InsecureTrustManager
2023-03-29 22:33:09 -04:00
CWE-297
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-312
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-319
Refactor HttpsUrlsQuery.qll
2023-03-29 22:33:09 -04:00
CWE-326
Refactor InsufficientKeySize
2023-03-29 22:33:09 -04:00
CWE-327
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-335
Java: Add cwe-377 tag to predictable-seed
2022-05-03 12:28:14 +01:00
CWE-338
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-347
Refactor MissingJWTSignatureCheck
2023-03-29 22:33:09 -04:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-367
update two more queries to better follow the style-guide
2022-10-01 10:59:59 +02:00
CWE-421
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-441
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-470
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-489
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-502
Refactor CWE-502/UnsafeDeserialization
2023-03-29 22:33:08 -04:00
CWE-522
Refactor InsecureBasicAuth
2023-03-29 22:33:09 -04:00
CWE-524
Apply suggestion from docs review
2022-11-16 10:54:14 +00:00
CWE-532
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-601
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-611
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-614
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-643
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-676
Add security-severity metadata
2021-06-10 20:11:08 +01:00
CWE-681
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-730
Refactor to DataFlow::Global
2023-03-24 10:04:46 -04:00
CWE-732
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-749
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-780
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-798
Refactor HardcodedCredentialsApiCall.qll
2023-03-29 22:33:08 -04:00
CWE-807
Refactor ConditionalBypass
2023-03-29 22:33:08 -04:00
CWE-829
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
CWE-833
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-835
Java: Make JumpStmt a proper superclass
2022-03-30 00:30:27 +02:00
CWE-917
Refactor to DataFlow::Global
2023-03-24 10:04:46 -04:00
CWE-918
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-925
spelling: receiver
2022-10-12 04:40:26 -04:00
CWE-926
Reword first sentence of documentation
2022-10-11 11:02:37 -04:00
CWE-927
Refactor ImplicitPendingIntents
2023-03-29 22:33:09 -04:00
CWE-940
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-1104
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00
CWE-1204
Refactor StaticInitializationVector
2023-03-29 22:33:09 -04:00