hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-28 05:42:58 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
bbc8cb32be820be6738570ef3a8626802af71dd8
codeql/csharp/ql/src/Security Features
History
Michael Nebel c8ede58704 C#: Flow summaries has now been added for Exception stack trace, but not for ToString. The latter will be encoded as an extra taintstep in the analysis. To reduce noise for all uses of an exception itself an isSanitizerIn is introduced.
2022-05-25 08:28:15 +02:00
..
CWE-011
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-016
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-020
delete redundant imports
2022-04-22 12:55:28 +02:00
CWE-022
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-078
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-079
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-089
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-090
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-091
C#: Convert xml injection query to a path problem.
2022-05-05 10:43:23 +02:00
CWE-094
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-099
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-112
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-114
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-117
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-119
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-134
delete redundant imports
2022-04-22 12:55:28 +02:00
CWE-201
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-209
C#: Flow summaries has now been added for Exception stack trace, but not for ToString. The latter will be encoded as an extra taintstep in the analysis. To reduce noise for all uses of an exception itself an isSanitizerIn is introduced.
2022-05-25 08:28:15 +02:00
CWE-248
delete redundant imports
2022-04-22 12:55:28 +02:00
CWE-312
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-321
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-327
C#: Use data flow instead of taint tracking in InsecureSQLConnection.ql
2021-08-26 13:48:57 +02:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-359
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-384
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-451
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-502
Merge with main
2021-08-04 14:25:34 +03:00
CWE-548
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CWE-601
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-611
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-614
comments
2021-07-12 01:13:40 +03:00
CWE-643
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-730
Python/C#: Add CWE-1333 to redos queries
2021-11-09 16:10:38 +01:00
CWE-798
C#: Downgrade hardcoded credentials queries to medium precision
2022-02-15 09:34:20 +01:00
CWE-807
C#: Remove Query.qll top-level modules
2021-07-04 09:35:27 +02:00
CWE-838
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CookieWithOverlyBroadDomain.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadDomain.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
CookieWithOverlyBroadDomainFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CookieWithOverlyBroadPath.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
CookieWithOverlyBroadPathFix.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
Encryption using ECB.qhelp
Grammatical issues in Encryption using ECB.qhelp
2020-06-30 15:33:05 +10:00
Encryption using ECB.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
HeaderCheckingDisabled.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
HeaderCheckingDisabled.ql
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
InadequateRSAPadding.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InadequateRSAPadding.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
InsecureRandomness.cs
Fix minor quality issues in comment and change note
2021-08-19 09:30:23 +02:00
InsecureRandomness.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
InsecureRandomness.ql
Fixing query & test
2021-08-04 19:37:57 -07:00
InsufficientKeySize.cs
C#: Increasing required size of RSA key to 2048
2020-09-22 11:09:49 +02:00
InsufficientKeySize.qhelp
C#: Increasing required size of RSA key to 2048
2020-09-22 11:09:49 +02:00
InsufficientKeySize.ql
C#: Fix CWE tag for cs/insufficient-key-size
2021-09-07 12:59:10 +02:00
PersistentCookie.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
PersistentCookie.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00
WeakEncryption.cs
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.qhelp
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
WeakEncryption.ql
Update security-severity scores
2021-06-15 13:25:17 +01:00