hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-01 00:27:24 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
c49311e69efbcd210d715eb16069fd796d7afe45
codeql/javascript/ql/test/query-tests/Security
History
semmle-qlci fe0c5a9ea6 Merge pull request #3892 from asger-semmle/js/redirect-starts-with-sanitizer 
Approved by esbena
2020-07-06 17:04:30 +01:00
..
CWE-020
Update javascript/ql/test/query-tests/Security/CWE-020/IncompleteUrlSchemeCheck.js
2020-05-22 13:33:34 +02:00
CWE-022
Merge pull request #3619 from erik-krogh/CWE022-Correctness
2020-07-01 20:07:58 +01:00
CWE-078
fix typo in js/shell-command-constructed-from-input
2020-07-06 10:33:49 +02:00
CWE-079
Merge remote-tracking branch 'upstream/master' into queryStuff
2020-07-02 16:08:05 +02:00
CWE-089
add noSQL tests for type-tracking req.query
2020-07-01 11:45:09 +02:00
CWE-094
update expected output
2020-06-16 21:52:59 +02:00
CWE-116
JS: initial version of IncompleteMultiCharacterSanitization.ql
2020-06-09 08:59:59 +02:00
CWE-134
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-200
add documentation examples as tests
2020-06-17 11:37:32 +02:00
CWE-201
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-209
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-295
JS: add query js/disabling-certificate-validation
2020-06-11 12:32:01 +02:00
CWE-312
add tests for js/build-artifact-leak
2020-06-12 10:21:37 +02:00
CWE-313
JS: whitelist some hardcoded dummy-passwords in two queries
2019-09-16 10:11:43 +02:00
CWE-327
add qhelp to js/biased-cryptographic-random
2020-06-16 11:10:09 +02:00
CWE-338
don't report insecure randomness when the insecure random is just a fallback
2020-06-23 15:53:19 +02:00
CWE-346
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-352
JS: Recognize req.user a cookie access
2020-01-24 09:44:20 +00:00
CWE-400
add test and change-note to prototype-polution
2020-05-05 13:49:11 +02:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-506
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-601
JS: Add StartsWith sanitizer
2020-07-03 14:46:07 +01:00
CWE-611
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-640
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-643
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-730
Revert "Merge pull request #3672 from esbena/js/server-crashing-route-handler"
2020-06-22 14:45:35 +02:00
CWE-754
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-770
Revert "Merge pull request #3702 from esbena/js/memory-exhaustion"
2020-06-22 14:46:51 +02:00
CWE-776
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-798
update expected output
2020-06-03 15:24:04 +02:00
CWE-807
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-834
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-843
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-912
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
refactor chrome-remote-interface to use type-tracking promise steps
2020-03-10 12:27:21 +01:00
Summaries
JavaScript: Move flow summaries to experimental.
2020-03-09 12:57:20 +00:00