Asger F 871bc3b84a JS: Port experimental CorsPermissiveConfiguration to ConfigSig ...

The tests show a new (source, sink) pair for an already-flagged sink.

Not sure why it was not flagged originally since the data flow path seems valid, given the steps provided by our models.

2024-12-03 14:30:20 +01:00

..

CWE-094

Remove label sanitizer because it is prone to race conditions

2023-04-03 23:28:31 +02:00

CWE-094-dataURL

JS: Port an experimental CodeInjection variant to ConfigSig

2024-12-03 14:30:15 +01:00

CWE-099

JS: Port experimental EnvValueInjection to ConfigSig

2024-12-03 14:30:17 +01:00

CWE-347

JS: Port experimental decodeJwtWithoutVerificationLocalSource

2024-12-03 14:30:19 +01:00

CWE-918

JS: Benign test output changes

2024-11-26 15:47:13 +01:00

CWE-942

JS: Port experimental CorsPermissiveConfiguration to ConfigSig

2024-12-03 14:30:20 +01:00