hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 20:56:33 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
bc7cb1ec476201248288dfabc34a5634f162e92a
codeql/javascript/ql/test/query-tests/Security
History
Asger F 76a8e9827e Merge pull request #13283 from asgerf/js/restrict-regex-search-function 
JS: Be more conservative about flagging "search" call arguments as regex
2023-06-08 10:50:51 +02:00
..
CWE-020
JS: Update test and expectations for MissingRegExpAnchor
2023-05-26 14:07:34 +02:00
CWE-022
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-073
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-078
require arguments to be shell interpreted to be flagged by indirect-command-injection
2023-05-17 11:07:45 +02:00
CWE-079
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
CWE-089
put string/object in the alert-message for sql-injection
2023-05-31 08:06:04 +02:00
CWE-094
Merge pull request #12748 from JarLob/yi
2023-05-15 11:03:00 +02:00
CWE-116
recognize "-->" as a bad tag filter
2023-01-10 18:09:56 +01:00
CWE-117
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-134
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-178
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-200
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-201
JavaScript: Remove references to LGTM
2022-12-19 15:15:17 +00:00
CWE-209
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-295
add test for https.createServer in DisablingCertificateValidation.ql
2023-03-30 14:15:25 +02:00
CWE-300
add js/http-dependency query
2022-01-19 10:05:39 +01:00
CWE-312
fix comment that wasn't updated in test
2022-11-10 15:56:44 +01:00
CWE-313
remove some FPs in js/password-in-configuration-file
2022-10-26 11:51:56 +02:00
CWE-326
don't include mode-of-operation into the algorithm names
2021-11-03 14:54:50 +01:00
CWE-327
JS: add a missing space in alert message for js/weak-cryptographic-algorithm
2023-03-22 11:12:13 +00:00
CWE-338
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-346
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-347
update expected output
2022-01-28 12:21:33 +01:00
CWE-352
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-367
fix that js/file-system-race could have FPs related to loops
2022-10-11 13:41:51 +02:00
CWE-377
add query for detecting insecure temprary files
2022-01-18 14:54:56 +01:00
CWE-384
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-400
add expected output
2023-05-23 09:56:06 +02:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
JS: Add tests
2023-04-26 12:46:20 +02:00
CWE-506
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-598
fix wrong comment
2022-05-31 08:38:03 +02:00
CWE-601
recognize more express URL related sources
2023-03-15 10:14:31 +01:00
CWE-611
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-614
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-640
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-643
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-730
JS: Update RegExpInjection test and expectations
2023-05-26 14:05:36 +02:00
CWE-754
Fix associated test
2022-12-20 12:51:13 +09:00
CWE-770
Updated express-rate-limit example to match implementation examples found on packages README
2023-01-18 14:42:40 -05:00
CWE-776
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-798
update expected output
2022-09-29 22:48:41 +02:00
CWE-807
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-830
CWE 830 polish error messages
2022-02-22 11:41:54 +01:00
CWE-834
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-843
JS: Expand test case
2022-09-07 14:18:01 +02:00
CWE-862
add a js/empty-password-in-configuration-file query
2022-01-19 10:48:45 +01:00
CWE-912
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-915
JS: Fix the ExtendCall restriction
2023-04-17 12:30:08 +02:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
add encodeURIComponent as a sanitizer for request-forgery
2023-01-23 13:53:53 +01:00
CWE-1004
add session{key,id} as sensitive info
2021-10-26 13:46:59 +02:00
CWE-1275
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00