Tom Hvitved 3027ed2ca8 C#: Include arguments to ILogger extension method calls in LogMessageSink

2023-05-16 16:04:58 +02:00

..

CWE-011

C#: Move the existing tests into separate folders to emulate separate projects and add some more tests.

2023-03-27 10:42:14 +02:00

CWE-016

Merge branch 'master' of git.semmle.com:Semmle/ql into ASPNetPagesValidateRequest

2019-12-05 15:58:47 +00:00

CWE-020

C#: Since NameValueCollection now has a flow summary for the string indexer it is no longer consider an unsafe external api, which is why it has disappared from the result.

2022-05-25 08:28:14 +02:00

CWE-022

C#: Update expected test output

2023-05-15 09:35:20 +02:00

CWE-078

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-079

C#: Update expected output.

2023-04-27 10:24:24 +02:00

CWE-089

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-090

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-091/XMLInjection

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-094

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-099

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-112

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-114/AssemblyPathInjection

update cs/assembly-path-injection and cs/hardcoded-key to path-problems

2022-11-11 10:55:36 +01:00

CWE-117

C#: Include arguments to ILogger extension method calls in LogMessageSink

2023-05-16 16:04:58 +02:00

CWE-119

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-134

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-201/ExposureInTransmittedData

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-209

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-248/MissingASPNETGlobalErrorHandler

Trim test files + remove duplicate newlines

2021-07-01 16:09:11 +02:00

CWE-312

Add test for cleartext storage

2023-04-05 13:57:23 +01:00

CWE-321/HardcodedSymmetricEncryptionKey

C#: Use stubs for CWE-321/HardcodedSymmetricEncryptionKey.

2023-01-31 13:21:00 +01:00

CWE-327

C#: Use stubs for CWE-327 test cases.

2023-01-31 13:21:00 +01:00

CWE-338

C#: Update expected output.

2023-04-27 10:24:24 +02:00

CWE-352

Add adjusted expected files

2021-07-01 16:09:11 +02:00

CWE-359

Add unit tests for private information query

2023-04-05 13:57:23 +01:00

CWE-384

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-451/MissingXFrameOptions

Trim test files + remove duplicate newlines

2021-07-01 16:09:11 +02:00

CWE-502

C#: Update expected test output.

2023-05-03 13:09:35 +02:00

CWE-539/PersistentCookie

Add adjusted expected files

2021-07-01 16:09:11 +02:00

CWE-548

C#: Fix whitespaces

2018-11-07 08:52:38 +01:00

CWE-601/UrlRedirect

C#: Use ASP.NET Core stub instead of Microsoft.Extensions.Primitives and manual written ASP.NET Core stubs.

2022-08-09 13:08:34 +02:00

CWE-611

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-614/RequireSSL

Trim test files + remove duplicate newlines

2021-07-01 16:09:11 +02:00

CWE-643

change more queries to start with "This "

2022-09-30 13:29:18 +02:00

CWE-730

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-798

C#: Re-factor HardcodedConnectionString to use the new API.

2023-04-13 10:08:39 +02:00

CWE-807

update the alert-messages of csharp queries

2022-09-26 14:01:39 +02:00

CWE-838

C#: Use stubs for the CWE-838 testcase

2021-11-30 15:32:19 +01:00