hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 01:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e3a99060716716222becb374adfcb8d080170655
codeql/javascript/ql/test/query-tests/Security
History
Max Schaefer e3a9906071 JavaScript: Switch MissingRateLimiting.qll to API graphs. 
The added test shows how this helps us avoid false positives.
2020-09-02 17:35:47 +01:00
..
CWE-020
more permissive path elements in js/incomplete-url-substring-sanitization
2020-08-13 11:46:13 +02:00
CWE-022
better support for the &&=, ||=, and ??= operators
2020-08-13 09:22:32 +02:00
CWE-078
Merge pull request #3876 from erik-krogh/CWE078-Correctness
2020-08-03 15:38:51 +01:00
CWE-079
Merge pull request #3876 from erik-krogh/CWE078-Correctness
2020-08-03 15:38:51 +01:00
CWE-089
Merge pull request #3876 from erik-krogh/CWE078-Correctness
2020-08-03 15:38:51 +01:00
CWE-094
add [INCONSISTENCY] comment in CodeInjection test
2020-07-08 09:48:12 +02:00
CWE-116
JS: initial version of IncompleteMultiCharacterSanitization.ql
2020-06-09 08:59:59 +02:00
CWE-134
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-200
add documentation examples as tests
2020-06-17 11:37:32 +02:00
CWE-201
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-209
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-295
JS: add query js/disabling-certificate-validation
2020-06-11 12:32:01 +02:00
CWE-312
update consistency comment in passwords.js
2020-07-08 09:55:00 +02:00
CWE-313
JS: whitelist some hardcoded dummy-passwords in two queries
2019-09-16 10:11:43 +02:00
CWE-327
add qhelp to js/biased-cryptographic-random
2020-06-16 11:10:09 +02:00
CWE-338
update inconsistency comment for CWE-338
2020-07-08 10:00:19 +02:00
CWE-346
update inconsistency comment for CWE-346
2020-07-08 10:01:04 +02:00
CWE-352
JS: Recognize req.user a cookie access
2020-01-24 09:44:20 +00:00
CWE-400
add test and change-note to prototype-polution
2020-05-05 13:49:11 +02:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-506
update inconsistency comment for CWE-506
2020-07-08 10:01:40 +02:00
CWE-601
Merge pull request #3835 from Raz0r/js/xss-protocol-sinks
2020-08-03 15:40:05 +01:00
CWE-611
update consistency comments for CWE-611
2020-07-08 10:03:03 +02:00
CWE-614
Update expected output
2020-08-26 23:50:15 +02:00
CWE-640
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-643
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-730
update consistency comment for CWE-730
2020-07-08 10:07:34 +02:00
CWE-754
update consistency comments for CWE-754
2020-07-08 10:08:51 +02:00
CWE-770
JavaScript: Switch MissingRateLimiting.qll to API graphs.
2020-09-02 17:35:47 +01:00
CWE-776
update comment position to match alert location for CWE-776
2020-07-08 10:10:31 +02:00
CWE-798
update comment position to match alert location for CWE-798
2020-07-08 10:12:12 +02:00
CWE-807
update comments to match alert location for CWE-807
2020-07-08 10:15:26 +02:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-834
move comments to match alert location for CWE-834
2020-07-08 10:16:04 +02:00
CWE-843
update inconsistency comment for CWE-843
2020-07-08 10:16:43 +02:00
CWE-912
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
update consistency comments for CWE-918
2020-07-08 10:24:55 +02:00
Summaries
JavaScript: Move flow summaries to experimental.
2020-03-09 12:57:20 +00:00