hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-24 00:16:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
bca25869031d166801faf33da3d0ff1f0cefd36b
codeql/java/ql/src/Security/CWE
History
Tony Torralba f19eb783be Generalize file/path taint steps 
This is needed by PathSanitizer but also helps simplify ZipSlip.ql
2022-10-04 12:27:01 +02:00
..
CWE-020
apply changes based on docs review
2022-08-09 13:51:40 +02:00
CWE-022
Generalize file/path taint steps
2022-10-04 12:27:01 +02:00
CWE-023
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-074
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-078
get a few more queries in sync with other languages
2022-10-01 11:17:48 +02:00
CWE-079
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-089
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-090
get a few more queries in sync with other languages
2022-10-01 11:17:48 +02:00
CWE-094
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-113
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-117
make a few more queries consistent with the other languages
2022-10-02 22:38:25 +02:00
CWE-129
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-134
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-190
make a few more queries consistent with the other languages
2022-10-02 22:38:25 +02:00
CWE-200
add explicit this
2022-08-17 13:33:31 +02:00
CWE-209
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-266
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-273
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-295
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-297
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-312
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-319
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-327
Java: Replace uses of deprecated variableTrack.
2022-09-13 13:30:40 +02:00
CWE-335
Java: Add cwe-377 tag to predictable-seed
2022-05-03 12:28:14 +01:00
CWE-338
add all remaining explicit this
2021-11-26 13:50:10 +01:00
CWE-347
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-352
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-367
update two more queries to better follow the style-guide
2022-10-01 10:59:59 +02:00
CWE-421
Update security-severity scores
2021-06-15 13:25:17 +01:00
CWE-470
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-489
Remove 'here'.
2022-09-26 13:36:14 +01:00
CWE-502
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-522
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-532
Add security severity
2022-03-15 10:42:41 +00:00
CWE-601
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-611
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-614
Insecure cookie query: accept ServletRequest.isSecure(), and allow more than one possible input to a setSecure(...) call.
2022-05-11 11:59:37 +01:00
CWE-643
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-676
Add security-severity metadata
2021-06-10 20:11:08 +01:00
CWE-681
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-730
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-732
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-749
Add missing security-severity scores
2022-03-14 09:50:14 +01:00
CWE-780
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-798
Convert tests to inline expectations and fix one bug revealed doing so
2022-08-13 14:02:05 +01:00
CWE-807
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-829
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00
CWE-833
Java: Performance tweaks
2022-02-21 17:05:00 +00:00
CWE-835
Java: Make JumpStmt a proper superclass
2022-03-30 00:30:27 +02:00
CWE-917
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-918
make a few more queries consistent with the other languages
2022-10-02 22:38:25 +02:00
CWE-925
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-926
update query description
2022-08-22 12:41:22 -04:00
CWE-927
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-940
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-1104
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00
CWE-1204
Apply doc suggestions
2022-08-17 10:35:16 +01:00