hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
d844e0025a10b3862211f347731bc7011ae5f030
codeql/javascript/ql/test/query-tests/Security
History
Asger F d844e0025a Merge pull request #3651 from esbena/js/bad-multicharacter-sanitization 
JS: initial version of IncompleteMultiCharacterSanitization.ql
2020-06-12 16:25:22 +01:00
..
CWE-020
Update javascript/ql/test/query-tests/Security/CWE-020/IncompleteUrlSchemeCheck.js
2020-05-22 13:33:34 +02:00
CWE-022
share implementation between TaintedPath and ZipSlip
2020-05-20 10:10:04 +02:00
CWE-078
use simpler taint-step for DestructingPattern
2020-06-11 23:16:46 +02:00
CWE-079
JS: Update test externs and include array indices
2020-06-11 09:53:55 +01:00
CWE-089
JS: model marsdb and minimongo
2020-05-13 08:28:59 +02:00
CWE-094
fix compilation and update expected output
2020-06-11 11:16:38 +02:00
CWE-116
JS: initial version of IncompleteMultiCharacterSanitization.ql
2020-06-09 08:59:59 +02:00
CWE-134
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-200
add query to detect accidential leak of private files
2020-06-08 23:41:14 +02:00
CWE-201
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-209
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-295
JS: add query js/disabling-certificate-validation
2020-06-11 12:32:01 +02:00
CWE-312
JS: Update some queries that used data as source
2020-03-18 11:55:13 +00:00
CWE-313
JS: whitelist some hardcoded dummy-passwords in two queries
2019-09-16 10:11:43 +02:00
CWE-327
less heuristics when flagging division that is rounded
2020-06-11 12:55:13 +02:00
CWE-338
JS: Update test output
2020-05-18 22:45:59 +01:00
CWE-346
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-352
JS: Recognize req.user a cookie access
2020-01-24 09:44:20 +00:00
CWE-400
add test and change-note to prototype-polution
2020-05-05 13:49:11 +02:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-506
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-601
all split()[0] are safe for url-redirect
2020-05-07 10:55:17 +02:00
CWE-611
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-640
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-643
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-730
JS: replace class with two predicates (and improve alert message)
2020-06-11 13:20:46 +02:00
CWE-754
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-770
JavaScript: Add support for rate-limiter-flexible package.
2019-09-18 12:25:33 +01:00
CWE-776
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-798
update expected output
2020-06-03 15:24:04 +02:00
CWE-807
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-834
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-843
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-912
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
refactor chrome-remote-interface to use type-tracking promise steps
2020-03-10 12:27:21 +01:00
Summaries
JavaScript: Move flow summaries to experimental.
2020-03-09 12:57:20 +00:00