hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
d249b51a5e94a2682b3aec519e7f31e82df12d59
codeql/javascript/ql/test/query-tests/Security/CWE-079
History
Erik Krogh Kristensen fd05156298 clarifying comment on the last jQuery inconsistency
2020-09-04 10:30:42 +02:00
..
addEventListener.js
JS: Add XSS test case for new PostMessageEventHandler cases
2019-10-21 11:32:22 +01:00
Consistency.expected
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
Consistency.ql
add consistency-checking for CWE-089
2020-07-06 19:02:50 +02:00
cookies.js
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
encodeuri.js
JS: Block XSS flow through encodeURIComponent
2019-10-28 17:12:40 +00:00
etherpad.js
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
exception-xss.js
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
ExceptionXss.expected
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
ExceptionXss.qlref
Added query for detecting XSS that happens through an exception
2019-11-14 17:04:00 +01:00
externs.js
JS: Update test externs and include array indices
2020-06-11 09:53:55 +01:00
formatting.js
JS: mark PrintfStyleCall as a taint step
2018-08-21 09:02:35 +02:00
jquery.js
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
nodemailer.js
JS: add email HTML body as XSS sink
2018-11-07 11:31:40 +00:00
optionalSanitizer.js
sanitize optionally sanitized values
2020-05-26 00:09:11 +02:00
partial.js
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
promises.js
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
react-native.js
JavaScript: Add WebView-related taint sinks for CodeInjection, DomBasedXss and ServerSideUrlRedirect.
2018-08-10 15:59:27 +01:00
ReflectedXss.expected
add test for type-tracking req.params
2020-07-01 11:38:54 +02:00
ReflectedXss.js
add test for type-tracking req.params
2020-07-01 11:38:54 +02:00
ReflectedXss.qlref
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
ReflectedXssContentTypes.js
refactor header checks to be based on dominance
2020-03-03 12:04:31 +01:00
ReflectedXssGood2.js
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
ReflectedXssGood3.js
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
ReflectedXssGood.js
recognize barrier guard where the result is stored in a variable
2020-05-28 10:24:42 +02:00
ReflectedXssWithCustomSanitizer.expected
add test for type-tracking req.params
2020-07-01 11:38:54 +02:00
ReflectedXssWithCustomSanitizer.ql
Javascript: Autoformat.
2019-01-11 11:02:42 +01:00
sanitiser.js
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
stored-xss.js
add a sanitizer guard for safe attribute string concatenations
2020-05-26 12:36:47 +02:00
StoredXss.expected
JS: add security tests for malicious torrents
2019-11-14 13:54:19 +01:00
StoredXss.qlref
JS: add query: js/stored-xss
2018-09-14 15:30:44 +02:00
string-manipulations.js
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
translate.js
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
tst2.js
JavaScript: Generalise ConstantComparison sanitisers.
2019-04-25 07:38:31 +01:00
tst3.js
add setAttributeNS('xlink', 'href',..) example in XSS test
2019-09-09 09:41:08 +01:00
tst.js
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
typeahead.js
adjust comment about inconsistency for XSS in typeahead
2020-09-03 10:50:40 +02:00
unsafe-jquery-plugin.js
clarifying comment on the last jQuery inconsistency
2020-09-04 10:30:42 +02:00
UnsafeJQueryPlugin.expected
regain the lost property presence result
2020-09-04 10:30:38 +02:00
UnsafeJQueryPlugin.qlref
JS: add query "Unsafe jQuery plugin"
2020-01-31 19:33:04 +01:00
v-html.vue
JS: add XSS vector for Vue's v-html
2019-02-25 12:17:56 +01:00
winjs.js
JavaScript: Teach Xss query about WinJS HTML injection functions.
2018-12-06 09:13:21 +00:00
xss-through-dom.js
allow the empty string to flow to a JQuery XSS sink
2020-04-23 16:45:37 +02:00
xss-through-filenames.js
JS: add query: js/stored-xss
2018-09-14 15:30:44 +02:00
xss-through-torrent.js
JS: add security tests for malicious torrents
2019-11-14 13:54:19 +01:00
Xss.expected
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
Xss.qlref
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
XssThroughDom.expected
JS: Rephrase XSS queries that use exception/dom text as source
2020-06-22 10:44:46 +01:00
XssThroughDom.qlref
Xss through DOM
2020-04-17 10:54:14 +02:00
XssWithAdditionalSources.expected
add consistency checking for CWE-079
2020-07-06 13:42:35 +02:00
XssWithAdditionalSources.ql
JS: Really autoformat everything
2020-03-02 10:48:33 +00:00