Napalys Klicius bafe22c50c Merge pull request #20048 from Napalys/js/xml_bomb_sinks ...

JS: Exclude patched libraries from `xml-bomb` sink

2025-08-29 08:10:55 +02:00

..

CWE-020

JS: exclude sinon module from regexp match calls

2025-06-23 20:25:17 +02:00

CWE-022

JS: moved execa test cases outside experimental

2025-06-24 09:08:13 +02:00

CWE-073

raw test output

2025-02-28 13:29:39 +01:00

CWE-078

add taint flow for arg/command-line-args with custom argv option

2025-08-01 13:34:08 +02:00

CWE-079

JS: track taint through serialize-javascript calls with object arguments

2025-06-16 10:38:20 +02:00

CWE-089

Add test case to ensure exec calls without middleware injection into Express are not flagged.

2025-03-30 14:09:15 +02:00

CWE-094

Merge pull request #19849 from asgerf/js/remove-legacy-actions-queries

2025-06-25 09:18:33 +02:00

CWE-116

Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js

2025-03-10 14:19:33 +01:00

CWE-117

raw test output

2025-02-28 13:29:39 +01:00

CWE-134

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-178

raw test output

2025-02-28 13:29:39 +01:00

CWE-200

Applied copilot suggestions.

2025-03-28 13:19:11 +01:00

CWE-201

raw test output

2025-02-28 13:29:39 +01:00

CWE-209

raw test output

2025-02-28 13:29:39 +01:00

CWE-295

raw test output

2025-02-28 13:29:39 +01:00

CWE-300

raw test output

2025-02-28 13:29:39 +01:00

CWE-312

JS: Remove js/actions/actions-artifact-leak

2025-06-23 14:39:28 +02:00

CWE-313

raw test output

2025-02-28 13:29:39 +01:00

CWE-326

raw test output

2025-02-28 13:29:39 +01:00

CWE-327

raw test output

2025-02-28 13:29:39 +01:00

CWE-338

raw test output

2025-02-28 13:29:39 +01:00

CWE-346

raw test output

2025-02-28 13:29:39 +01:00

CWE-347

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-352

raw test output

2025-02-28 13:29:39 +01:00

CWE-367

raw test output

2025-02-28 13:29:39 +01:00

CWE-377

raw test output

2025-02-28 13:29:39 +01:00

CWE-384

raw test output

2025-02-28 13:29:39 +01:00

CWE-400

Javascript: Update test files.

2025-04-23 15:41:41 +02:00

CWE-451

raw test output

2025-02-28 13:29:39 +01:00

CWE-502

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-506

raw test output

2025-02-28 13:29:39 +01:00

CWE-522-DecompressionBombs

Add TypedArrays flow summaries for Uint8Array and buffer property

2025-04-07 15:15:24 +02:00

CWE-598

raw test output

2025-02-28 13:29:39 +01:00

CWE-601

raw test output

2025-02-28 13:29:39 +01:00

CWE-611

JS: Remove duplicate '$ Alert' in libxml test

2025-03-10 14:23:44 +01:00

CWE-614

raw test output

2025-02-28 13:29:39 +01:00

CWE-640

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-643

raw test output

2025-02-28 13:29:39 +01:00

CWE-693

raw test output

2025-02-28 13:29:39 +01:00

CWE-730

Added new test cases for regexp injection with enviromental variable threat model enabled

2025-07-31 13:20:37 +02:00

CWE-754

raw test output

2025-02-28 13:29:39 +01:00

CWE-770

raw test output

2025-02-28 13:29:39 +01:00

CWE-776

Removed libxmljs from being marked as sink for xml-bomb.

2025-07-15 09:33:11 +02:00

CWE-798

Updated modeling of aws-sdk with MaD

2025-04-28 14:00:12 +02:00

CWE-807

raw test output

2025-02-28 13:29:39 +01:00

CWE-829

raw test output

2025-02-28 13:29:39 +01:00

CWE-830

raw test output

2025-02-28 13:29:39 +01:00

CWE-834

raw test output

2025-02-28 13:29:39 +01:00

CWE-843

raw test output

2025-02-28 13:29:39 +01:00

CWE-862

raw test output

2025-02-28 13:29:39 +01:00

CWE-912

Added NodeJSFileSystemVectorWrite class for vectored write.

2025-03-28 13:07:23 +01:00

CWE-915

raw test output

2025-02-28 13:29:39 +01:00

CWE-916

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-918

Merge pull request #19784 from Napalys/js/express_middleware

2025-06-20 15:36:26 +02:00

CWE-1004

raw test output

2025-02-28 13:29:39 +01:00

CWE-1275

raw test output

2025-02-28 13:29:39 +01:00