Esben Sparre Andreasen 52d86471af JS: whitelist another emptiness check for the type-confusion query

2019-04-08 09:52:27 +02:00

..

CWE-020

JS: add test

2019-02-28 10:09:36 +00:00

CWE-022

JavaScript: Add model of adm-zip library for ZipSlip query.

2019-03-21 08:04:06 +00:00

CWE-078

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-079

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-089

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-094

JavaScript: Add models for popular base64 transcoders.

2019-03-13 08:20:58 +00:00

CWE-116

JS: use RegExpLiteral as a SourceNode

2019-04-01 09:19:25 +02:00

CWE-134

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-200

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-201

JavaScript: Extend suspiciousCredentials predicate to recognise authKey and similar.

2019-01-31 09:03:23 +00:00

CWE-209

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-312

JavaScript: Update qhelp example for CleartextStorage.

2019-02-08 08:43:22 +00:00

CWE-313

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-327

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-338

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-346

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-352

JS: review comments

2018-09-21 14:46:21 +01:00

CWE-400

JavaScript: Restrict RemotePropertyInjection query to avoid double-reporting.

2018-11-28 08:16:31 +00:00

CWE-451

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-502

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-506

JavaScript: Address review comments.

2018-11-29 10:48:44 +00:00

CWE-601

Merge pull request #1152 from esben-semmle/js/koa-improvements

2019-04-02 08:51:19 +01:00

CWE-611

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-640

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-643

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-730

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-754

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-770

JS: add tests for improved js/missing-rate-limiting

2018-08-06 15:15:44 +02:00

CWE-776

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-798

JS: Dont flag empty string as hardcoded username

2019-01-28 13:01:52 +00:00

CWE-807

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-843

JS: whitelist another emptiness check for the type-confusion query

2019-04-08 09:52:27 +02:00

CWE-912

JS: update test expectations

2019-03-06 08:41:03 +00:00

CWE-916

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-918

JS: be less conservative about incomplete nodes in prefix sanitizers

2019-04-03 15:20:03 +01:00

Summaries

JavaScript: Simplify flow-summary queries.

2019-03-19 10:58:49 +00:00