hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-06 15:49:08 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
e86a3b5e577fc603c5cf1dd171c191b7e692e373
codeql/javascript/ql/src/Security
History
Erik Krogh Kristensen e86a3b5e57 add js/html-constructed-from-input query
2021-05-06 11:04:49 +02:00
..
CWE-020
Autoformat.
2020-11-30 14:42:38 +01:00
CWE-022
Fix OWASP broken links
2020-10-01 13:09:52 +01:00
CWE-073
Apply suggestions from code review
2021-03-15 12:39:56 +01:00
CWE-078
add link to source in alert-message for js/shell-command-constructed-from-input
2021-03-18 13:37:18 +01:00
CWE-079
add js/html-constructed-from-input query
2021-05-06 11:04:49 +02:00
CWE-089
JavaScript: Add models for more Mongoose methods.
2020-11-30 16:32:13 +00:00
CWE-094
JS: Update with new AdditionalTaintStep subclasses
2021-03-17 13:29:16 +00:00
CWE-116
JS: only select non-nullable terms in the broken sanitizer
2021-01-12 08:50:19 +01:00
CWE-117
changes based on doc review
2021-01-13 10:38:19 +01:00
CWE-134
JS: fix some FNs in the qhelp examples
2020-05-15 12:40:38 +02:00
CWE-200
change description for source root folder
2020-11-23 23:46:44 +01:00
CWE-201
JavaScript: Reclassify PostMessageStar as CWE-201.
2019-01-31 08:08:52 +00:00
CWE-209
Fix OWASP broken links
2020-10-01 13:09:52 +01:00
CWE-295
support all ClientRequests in js/disabling-certificate-validation
2021-04-12 15:06:10 +02:00
CWE-312
add dot after bullet-point
2020-06-17 17:15:39 +02:00
CWE-313
JS: whitelist some hardcoded dummy-passwords in two queries
2019-09-16 10:11:43 +02:00
CWE-327
JS: BadRandomness can just use type-tracking now
2021-03-23 14:53:14 +00:00
CWE-338
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-346
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-352
add support for more custom CSRF checking middlewares
2020-10-20 15:16:14 +02:00
CWE-400
Fix all dead qhelp links
2021-04-23 15:20:21 +01:00
CWE-451
Update links to OWASP cheat sheet
2019-11-06 20:21:47 -08:00
CWE-502
JS: fix some FNs in the qhelp examples
2020-05-15 12:40:38 +02:00
CWE-506
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-601
JS: fix some FNs in the qhelp examples
2020-05-15 12:40:38 +02:00
CWE-611
Fix all dead qhelp links
2021-04-23 15:20:21 +01:00
CWE-640
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-643
Fix OWASP broken links
2020-10-01 13:09:52 +01:00
CWE-730
Update javascript/ql/src/Security/CWE-730/examples/server-crash.GOOD-B.js
2021-01-22 14:03:21 +01:00
CWE-754
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
CWE-770
Revert "Merge pull request #3702 from esbena/js/memory-exhaustion"
2020-06-22 14:46:51 +02:00
CWE-776
JS: fix some FNs in the qhelp examples
2020-05-15 12:40:38 +02:00
CWE-798
JS: fix some FNs in the qhelp examples
2020-05-15 12:40:38 +02:00
CWE-807
Use .inc.qhelp extension for included help files
2021-03-04 22:04:48 +01:00
CWE-829
Fix all dead qhelp links
2021-04-23 15:20:21 +01:00
CWE-834
change precision of js/loop-bound-injection and fix a false positive
2019-10-22 09:21:19 +02:00
CWE-843
JS: Autoformat
2020-12-07 10:16:39 +00:00
CWE-912
JS: sharpen js/http-to-file-access
2019-09-11 12:05:33 +02:00
CWE-915
use strings in isTypeofGard
2020-12-22 13:55:32 +01:00
CWE-916
JS: fix some FNs in the qhelp examples
2020-05-15 12:40:38 +02:00
CWE-918
JS: fix some FNs in the qhelp examples
2020-05-15 12:40:38 +02:00