hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-16 07:54:52 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
d1df251b9225b47f35facc121f0ed5a72fee0734
codeql/javascript/ql/src/Security
History
Asger Feldthaus d1df251b92 JS: Proto pollution: Add is-plain-object sanitizer
2020-02-21 14:38:33 +00:00
..
CWE-020
JS: Add qldoc to HostnameRegexpShared
2019-11-15 09:27:21 +00:00
CWE-022
JavaScript: Fix inconisstency in TaintedPath.qhelp.
2019-08-12 10:29:41 +01:00
CWE-078
JS: add query js/shell-command-injection-from-environment
2019-10-21 23:31:55 +02:00
CWE-079
JS: address doc-review comments
2020-01-31 19:33:04 +01:00
CWE-089
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-094
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-116
JavaScript: Simplify DoubleEscaping.
2019-11-22 09:24:34 +00:00
CWE-134
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-200
JavaScript: Assign FileAccessToHttp and HttpToFileAccess a precision.
2019-02-07 09:48:05 +00:00
CWE-201
JavaScript: Reclassify PostMessageStar as CWE-201.
2019-01-31 08:08:52 +00:00
CWE-209
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-312
JavaScript: Update qhelp example for CleartextStorage.
2019-02-08 08:43:22 +00:00
CWE-313
JS: whitelist some hardcoded dummy-passwords in two queries
2019-09-16 10:11:43 +02:00
CWE-327
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-338
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-346
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-352
Apply suggestions from code review
2020-01-28 12:46:51 +00:00
CWE-400
JS: Proto pollution: Add is-plain-object sanitizer
2020-02-21 14:38:33 +00:00
CWE-451
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-502
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-506
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-601
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-611
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-640
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-643
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-730
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-754
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-770
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-776
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-798
JS: exclude keys from whitelist
2019-09-16 10:13:18 +02:00
CWE-807
Javascript: Autoformat.
2019-01-11 11:02:42 +01:00
CWE-834
change precision of js/loop-bound-injection and fix a false positive
2019-10-22 09:21:19 +02:00
CWE-843
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-912
JS: sharpen js/http-to-file-access
2019-09-11 12:05:33 +02:00
CWE-916
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-918
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
Summaries
JavaScript: Collapse flow labels at start/end nodes to avoid duplication.
2019-10-29 15:24:40 +00:00