Napalys Klicius c8c15a0899 Merge pull request #17910 from Napalys/napalys/matchAll-support ...

JS: Support for matchAll

2024-11-14 15:36:20 +01:00

..

CWE-020

Update javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql

2024-11-05 10:29:22 +01:00

CWE-022

Apply suggestions from code review

2023-11-21 10:07:11 +00:00

CWE-073

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-078

Apply suggestions from code review

2023-07-13 12:10:57 +01:00

CWE-079

Restore XssThroughDom.ql's severity

2023-11-14 11:20:51 -08:00

CWE-089

fix nits from doc review

2023-06-05 19:06:07 +02:00

CWE-094

Single quote was preventing the shell from expanding the BODY variable

2023-06-20 11:38:27 +01:00

CWE-116

re-appearing -> reappearing

2023-08-07 09:57:52 +02:00

CWE-117

Adjust query severities

2023-10-09 12:52:09 -07:00

CWE-134

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CWE-178

use RegExpTreeView insteaed of RegexTreeView in JS

2022-11-22 12:55:48 +01:00

CWE-200

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-201

JavaScript: Remove references to LGTM

2022-12-19 15:15:17 +00:00

CWE-209

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-295

Added check to disabling certificate validation query

2023-03-27 12:16:20 -04:00

CWE-300

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

CWE-312

fix: add "actions" tag to ActionsArtifactLeak

2024-11-05 15:58:46 +01:00

CWE-313

remove some FPs in js/password-in-configuration-file

2022-10-26 11:51:56 +02:00

CWE-326

add qhelp

2021-11-02 14:45:33 +01:00

CWE-327

Remove unwanted period from query name

2023-11-30 14:31:17 +00:00

CWE-338

add an example of how to get a floating point value between 0 and 1

2024-05-16 11:15:07 +02:00

CWE-346

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CWE-347

add missing severities to JS queries

2022-03-16 10:40:34 +01:00

CWE-352

JS: recognize tiny-csrf

2022-12-14 12:30:15 +01:00

CWE-367

fix that js/file-system-race could have FPs related to loops

2022-10-11 13:41:51 +02:00

CWE-377

fix leftover todo in js/insecure-temporary-file

2022-09-06 10:05:50 +02:00

CWE-384

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-400

delete an .expected file outside the test directories

2023-10-10 21:35:19 +02:00

CWE-451

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

CWE-502

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CWE-506

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-598

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

CWE-601

Make suggestion to replace example.com more explicit.

2023-09-12 16:54:05 +01:00

CWE-611

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CWE-614

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-640

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-643

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CWE-693

Update JS helmet model structure

2024-08-15 16:08:48 -04:00

CWE-730

Update javascript/ql/src/Security/CWE-730/ServerCrash.qhelp

2023-08-01 17:03:05 +01:00

CWE-754

Fix javascript

2022-12-20 12:45:59 +09:00

CWE-770

change the defaults in the qhelp for missing-rate-limit to something more reasonable

2023-08-10 13:40:17 +02:00

CWE-776

JS: add heuristic variants of queries that use RemoteFlowSource

2022-12-19 12:01:22 +01:00

CWE-798

add qhelp recommendation that you can use an obvious placeholder value

2024-05-03 19:37:31 +02:00

CWE-807

JavaScript: Use gender-neutral language in qhelp for js/user-controlled-bypass

2023-05-12 14:21:40 +01:00

CWE-829

spelling: executables

2022-10-11 00:23:36 -04:00

CWE-830

Added links to eventual location of CUSTOMIZING.md

2024-07-12 14:21:50 +01:00

CWE-834

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-843

Apply suggestions from code review

2022-01-04 10:07:34 +00:00

CWE-862

update the empty-password-in-config-file qhelp

2022-01-24 13:39:54 +01:00

CWE-912

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CWE-915

add another example of how to fix the prototype pollution issue

2023-05-15 17:24:02 +02:00

CWE-916

Update InsufficientPasswordHash.qhelp

2023-04-17 13:18:47 -04:00

CWE-918

Update RequestForgeryBad.js

2022-12-02 14:17:37 +01:00

CWE-1004

fix good/bad mixup in ClientExposedCookie qhelp

2022-01-24 15:34:30 +01:00

CWE-1275

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00