hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 00:35:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
c2b342f1a007d3abd08e56d81b4d13da8c845282
codeql/java/ql/test/query-tests/security
History
Arthur Baars c2b342f1a0 Merge pull request #18084 from github/aibaars/java-sha3 
Java: add SHA3 family to list of secure crypto algorithms
2024-11-25 15:07:43 +01:00
..
CWE-020
rename query to overly-large-range, and rewrite the @description
2022-07-12 16:02:46 +02:00
CWE-022/semmle/tests
Update expected test output
2024-09-18 13:51:02 +02:00
CWE-023/semmle/tests
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-074
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-078
Update expected test output
2024-09-24 14:21:38 +02:00
CWE-079/semmle/tests
Merge pull request #13235 from atorralba/atorralba/java/hudson-models
2023-06-14 12:33:18 +02:00
CWE-089/semmle/examples
Update expected test output
2024-11-04 12:07:06 +01:00
CWE-090
Update expected test output
2024-11-04 12:07:06 +01:00
CWE-094
Update expected test output
2024-11-04 12:07:06 +01:00
CWE-113/semmle/tests
Update expected test output
2024-11-04 12:07:06 +01:00
CWE-117
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-129/semmle/tests
Java: use post-process provenance pretty-printing in query-tests
2024-07-28 18:12:17 -04:00
CWE-134/semmle/tests
Update expected test output
2024-09-18 13:51:02 +02:00
CWE-190/semmle/tests
Java: use post-process provenance pretty-printing in query-tests
2024-07-28 18:12:17 -04:00
CWE-200/semmle/tests
Update expected test output
2024-11-04 12:07:06 +01:00
CWE-209/semmle/tests
Now alerts about exposing exception.getMessage() in servlet responses are split out of java/stack-trace-exposure into its own alert java/error-message-exposure because this is a better fit.
2024-07-25 18:12:45 +02:00
CWE-266
Consolidate all InlineFlowTest libraries in the dataflow qlpack
2023-08-24 21:38:46 +02:00
CWE-273
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-287
Address reveiws - Add BAD example to doc, add doc example to tests and fix typo.
2024-02-16 12:00:51 +00:00
CWE-295
Update tests so they still work
2024-07-07 00:24:28 +01:00
CWE-297
Update expected test output
2024-09-18 13:51:02 +02:00
CWE-311
Update expected test output
2024-09-18 13:51:02 +02:00
CWE-312/android
Java: Re-enable Widget.qll flow steps
2024-02-23 13:07:35 +01:00
CWE-326
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-327/semmle/tests
Merge pull request #18084 from github/aibaars/java-sha3
2024-11-25 15:07:43 +01:00
CWE-330
Rename test
2023-12-13 11:15:27 +01:00
CWE-335/semmle/tests
…
CWE-338/semmle/tests
…
CWE-347
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-352
Disable csrf for ServerHttpSecurity
2024-05-30 23:08:57 +02:00
CWE-367/semmle/tests
update two more queries to better follow the style-guide
2022-10-01 10:59:59 +02:00
CWE-421/semmle
Java: fix javac errors in test code
2021-02-09 09:16:57 -05:00
CWE-441
Consolidate all InlineFlowTest libraries in the dataflow qlpack
2023-08-24 21:38:46 +02:00
CWE-470
Consolidate all InlineFlowTest libraries in the dataflow qlpack
2023-08-24 21:38:46 +02:00
CWE-489
Consolidate all InlineFlowTest libraries in the dataflow qlpack
2023-08-24 21:38:46 +02:00
CWE-501
Consolidate all InlineFlowTest libraries in the dataflow qlpack
2023-08-24 21:38:46 +02:00
CWE-502
Java: Add JMS sink to java/unsafe-deserialization
2023-10-26 16:46:19 +02:00
CWE-522
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-524
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-532
Add "tokenizer" to sensitive variable name FPs
2024-07-30 15:38:32 +01:00
CWE-552
Java: use InlineFlowTest instead of InlineExpectationsTest
2024-03-27 08:44:17 -04:00
CWE-601/semmle/tests
Update expected test output
2024-11-04 12:07:06 +01:00
CWE-611
Java: Add missing flow step for ThreadLocal.initialValue.
2023-09-22 13:33:45 +02:00
CWE-643
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-676/semmle/tests
…
CWE-681/semmle/tests
Java: use post-process provenance pretty-printing in query-tests
2024-07-28 18:12:17 -04:00
CWE-730
Java: Fix test comment.
2023-09-13 17:58:31 +01:00
CWE-732/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-749
Add failing test
2023-07-10 17:40:15 +02:00
CWE-780
Java: Remove redundant inline expectation test imports
2023-08-25 00:18:55 +02:00
CWE-798/semmle/tests
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-807/semmle/tests
Java: use post-process provenance pretty-printing in query-tests
2024-07-28 18:12:17 -04:00
CWE-829/semmle/tests
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
CWE-833/semmle/tests
Java: accept changes in expected output
2021-02-09 09:17:35 -05:00
CWE-835/semmle/tests
Java: Adjust toString() for statements
2021-06-03 16:27:36 +02:00
CWE-917
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-918
Java: Update request forgery expected output.
2024-10-21 15:19:30 +02:00
CWE-925
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-926
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
CWE-927
Java: use MISSING inline annotation
2024-08-21 13:40:40 +02:00
CWE-940
Java: Post-processing query for inline test expectations
2024-10-29 13:35:32 +01:00
CWE-1104/semmle/tests
Fix typo in test output
2021-02-22 13:26:51 -05:00
CWE-1204
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00