Erik Krogh Kristensen 0720fa75df Merge pull request #10286 from erik-krogh/js-followMsg ...

JS: change alert messages of path queries to use the same template

2022-09-20 16:12:45 +02:00

..

CWE-020

don't report every non-ascii range in js/overly-large-range

2022-09-13 20:43:52 +02:00

CWE-022

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-073

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-078

apply suggestions from doc review

2022-09-12 13:16:39 +02:00

CWE-079

apply another suggestion from doc review

2022-09-12 15:36:02 +02:00

CWE-089

JS: Recognize "sql" option as a query string

2022-01-13 13:04:41 +01:00

CWE-094

apply suggestions from doc review

2022-09-12 13:16:39 +02:00

CWE-116

Rename IncompleteMultiCharacterSanitization[Query]

2022-08-17 16:03:49 +12:00

CWE-117

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-134

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-178

print the endpointExample in the alert-messsage, and only report one working example

2022-08-24 13:09:48 +02:00

CWE-200

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-201

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-209

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-295

add some API-nodes to js/disabling-certificate-validation

2022-03-14 21:33:13 +01:00

CWE-300

add js/http-dependency query

2022-01-19 10:05:39 +01:00

CWE-312

update alert-messages of the sensitive data queries to match #10314

2022-09-06 12:25:36 +02:00

CWE-313

update tests for password patterns

2022-02-16 13:22:19 +01:00

CWE-326

don't include mode-of-operation into the algorithm names

2021-11-03 14:54:50 +01:00

CWE-327

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-338

Merge branch 'main' into js-followMsg

2022-09-12 13:21:16 +02:00

CWE-346

update inconsistency comment for CWE-346

2020-07-08 10:01:04 +02:00

CWE-347

update expected output

2022-01-28 12:21:33 +01:00

CWE-352

JS: Fix handling of fastify-plugin

2021-12-15 16:04:46 +01:00

CWE-367

filter out "file read after existence check" from js/file-system-race

2022-09-19 13:26:10 +02:00

CWE-377

add query for detecting insecure temprary files

2022-01-18 14:54:56 +01:00

CWE-384

remove support for passport in the session-fixation query

2022-05-23 12:55:11 +02:00

CWE-400

apply suggestions from doc review

2022-09-12 13:16:39 +02:00

CWE-451

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

CWE-502

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-506

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-598

fix wrong comment

2022-05-31 08:38:03 +02:00

CWE-601

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-611

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-614

assume that setting the secure/httpOnly flag to some unknown value is good

2021-10-26 13:47:28 +02:00

CWE-640

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-643

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-730

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-754

update expected files

2022-02-04 12:28:17 +00:00

CWE-770

JS: Remove Buffer.from as sink for js/resource-exhaustion

2022-05-24 14:18:05 +02:00

CWE-776

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-798

ignore deliberately hardcoded password strings

2022-02-16 09:47:01 +01:00

CWE-807

JS: add js/conditional-bypass example as a test case

2020-12-22 09:34:25 +01:00

CWE-829

recognize sensitive files by file-system writes

2020-06-25 15:19:42 +02:00

CWE-830

CWE 830 polish error messages

2022-02-22 11:41:54 +01:00

CWE-834

apply suggestions from doc review

2022-09-12 13:16:39 +02:00

CWE-843

JS: Expand test case

2022-09-07 14:18:01 +02:00

CWE-862

add a js/empty-password-in-configuration-file query

2022-01-19 10:48:45 +01:00

CWE-912

make the alert messages of taint-tracking queries more consistent

2022-09-05 14:04:52 +02:00

CWE-915

Merge pull request #10388 from erik-krogh/exportNew

2022-09-13 13:45:16 +02:00

CWE-916

JavaScript: Update expected output.

2019-10-29 15:36:24 +00:00

CWE-918

JS: Add consistency test

2022-02-16 13:35:01 +01:00

CWE-1004

add session{key,id} as sensitive info

2021-10-26 13:46:59 +02:00

CWE-1275

add a js/samesite-none-cookie cookie

2022-01-24 21:39:41 +01:00

Summaries

JavaScript: Move flow summaries to experimental.

2020-03-09 12:57:20 +00:00