hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-19 10:23:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
dd31be43e07d901bafb543c8f65be8e9b5abb364
codeql/javascript/ql/test/query-tests/Security
History
erik-krogh 02da718786 add code-injection sink for node-pty
2023-01-30 15:14:25 +01:00
..
CWE-020
don't report every non-ascii range in js/overly-large-range
2022-09-13 20:43:52 +02:00
CWE-022
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-073
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-078
Merge pull request #11859 from erik-krogh/moreShell
2023-01-23 22:26:17 +01:00
CWE-079
JS: don't use deprecated files in tests
2022-11-17 22:12:50 +01:00
CWE-089
JS: don't use deprecated files in tests
2022-11-17 22:12:50 +01:00
CWE-094
add code-injection sink for node-pty
2023-01-30 15:14:25 +01:00
CWE-116
recognize "-->" as a bad tag filter
2023-01-10 18:09:56 +01:00
CWE-117
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-134
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-178
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-200
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-201
JavaScript: Remove references to LGTM
2022-12-19 15:15:17 +00:00
CWE-209
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-295
add some API-nodes to js/disabling-certificate-validation
2022-03-14 21:33:13 +01:00
CWE-300
add js/http-dependency query
2022-01-19 10:05:39 +01:00
CWE-312
fix comment that wasn't updated in test
2022-11-10 15:56:44 +01:00
CWE-313
remove some FPs in js/password-in-configuration-file
2022-10-26 11:51:56 +02:00
CWE-326
don't include mode-of-operation into the algorithm names
2021-11-03 14:54:50 +01:00
CWE-327
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-338
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-346
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-347
update expected output
2022-01-28 12:21:33 +01:00
CWE-352
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-367
fix that js/file-system-race could have FPs related to loops
2022-10-11 13:41:51 +02:00
CWE-377
add query for detecting insecure temprary files
2022-01-18 14:54:56 +01:00
CWE-384
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-400
Merge pull request #11853 from erik-krogh/assignMore
2023-01-10 17:04:29 +01:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-506
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-598
fix wrong comment
2022-05-31 08:38:03 +02:00
CWE-601
fix that the TypeTracker was unrestricted for the base-case of nonFirstLocationType
2023-01-10 13:39:50 +01:00
CWE-611
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-614
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-640
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-643
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-730
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-754
Fix associated test
2022-12-20 12:51:13 +09:00
CWE-770
Updated express-rate-limit example to match implementation examples found on packages README
2023-01-18 14:42:40 -05:00
CWE-776
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-798
update expected output
2022-09-29 22:48:41 +02:00
CWE-807
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-830
CWE 830 polish error messages
2022-02-22 11:41:54 +01:00
CWE-834
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-843
JS: Expand test case
2022-09-07 14:18:01 +02:00
CWE-862
add a js/empty-password-in-configuration-file query
2022-01-19 10:48:45 +01:00
CWE-912
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-915
expand what is parsed as the stem of a pathexpr
2023-01-17 21:28:21 +01:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
CWE-1004
add session{key,id} as sensitive info
2021-10-26 13:46:59 +02:00
CWE-1275
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00