Max Schaefer f1c538a97b JavaScript: Restrict RemotePropertyInjection query to avoid double-reporting. ...

This query now only flags user-controlled property and header writes, method calls are handled by the new unsafe/unvalidated method call queries.

2018-11-28 08:16:31 +00:00

..

CWE-022

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-078

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-079

Merge remote-tracking branch 'origin/next' into bump/master-next

2018-11-19 10:37:07 +00:00

CWE-089

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-094

JS: handle both data() and taint() source labels

2018-11-22 09:59:31 +00:00

CWE-116

JavaScript: Teach IncompleteSanitization to recognize incomplete URL {en,de}coding.

2018-08-09 12:44:16 +01:00

CWE-134

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-200

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-209

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-312

JS: sharpen js/clear-text-logging (ODASA-7485)

2018-11-22 13:38:43 +01:00

CWE-313

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-327

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-338

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-346

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-352

JS: review comments

2018-09-21 14:46:21 +01:00

CWE-400

JavaScript: Restrict RemotePropertyInjection query to avoid double-reporting.

2018-11-28 08:16:31 +00:00

CWE-451

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-502

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-601

JS: recognize sanitizing slashes in URL redirection queries

2018-11-16 10:43:25 +00:00

CWE-611

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-640

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-643

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-730

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-754

JavaScript: Add new query UnvalidatedDynamicMethodCall.

2018-11-28 08:16:31 +00:00

CWE-770

JS: add tests for improved js/missing-rate-limiting

2018-08-06 15:15:44 +02:00

CWE-776

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-798

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-807

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-843

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-912

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-916

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

CWE-918

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00