hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-23 12:16:33 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
fa5e03a53d03b1182b76c46c536ce06a9aa5c72c
codeql/javascript/ql/test/query-tests/Security
History
Asger F 11ba0f0bbe Merge pull request #10253 from asgerf/js/type-defs-squashed 
JS: Add generated typings to SQL models
2022-09-23 11:34:01 +02:00
..
CWE-020
don't report every non-ascii range in js/overly-large-range
2022-09-13 20:43:52 +02:00
CWE-022
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-073
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-078
apply suggestions from doc review
2022-09-12 13:16:39 +02:00
CWE-079
apply another suggestion from doc review
2022-09-12 15:36:02 +02:00
CWE-089
JS: Add generated typings to SQL models
2022-09-20 11:40:16 +02:00
CWE-094
apply suggestions from doc review
2022-09-12 13:16:39 +02:00
CWE-116
Rename IncompleteMultiCharacterSanitization[Query]
2022-08-17 16:03:49 +12:00
CWE-117
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-134
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-178
print the endpointExample in the alert-messsage, and only report one working example
2022-08-24 13:09:48 +02:00
CWE-200
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-201
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-209
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-295
add some API-nodes to js/disabling-certificate-validation
2022-03-14 21:33:13 +01:00
CWE-300
add js/http-dependency query
2022-01-19 10:05:39 +01:00
CWE-312
update alert-messages of the sensitive data queries to match #10314
2022-09-06 12:25:36 +02:00
CWE-313
update tests for password patterns
2022-02-16 13:22:19 +01:00
CWE-326
don't include mode-of-operation into the algorithm names
2021-11-03 14:54:50 +01:00
CWE-327
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-338
Merge branch 'main' into js-followMsg
2022-09-12 13:21:16 +02:00
CWE-346
update inconsistency comment for CWE-346
2020-07-08 10:01:04 +02:00
CWE-347
update expected output
2022-01-28 12:21:33 +01:00
CWE-352
JS: Fix handling of fastify-plugin
2021-12-15 16:04:46 +01:00
CWE-367
filter out "file read after existence check" from js/file-system-race
2022-09-19 13:26:10 +02:00
CWE-377
add query for detecting insecure temprary files
2022-01-18 14:54:56 +01:00
CWE-384
remove support for passport in the session-fixation query
2022-05-23 12:55:11 +02:00
CWE-400
apply suggestions from doc review
2022-09-12 13:16:39 +02:00
CWE-451
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
CWE-502
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-506
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-598
fix wrong comment
2022-05-31 08:38:03 +02:00
CWE-601
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-611
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-614
assume that setting the secure/httpOnly flag to some unknown value is good
2021-10-26 13:47:28 +02:00
CWE-640
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-643
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-730
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-754
update expected files
2022-02-04 12:28:17 +00:00
CWE-770
JS: Remove Buffer.from as sink for js/resource-exhaustion
2022-05-24 14:18:05 +02:00
CWE-776
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-798
ignore deliberately hardcoded password strings
2022-02-16 09:47:01 +01:00
CWE-807
JS: add js/conditional-bypass example as a test case
2020-12-22 09:34:25 +01:00
CWE-829
recognize sensitive files by file-system writes
2020-06-25 15:19:42 +02:00
CWE-830
CWE 830 polish error messages
2022-02-22 11:41:54 +01:00
CWE-834
apply suggestions from doc review
2022-09-12 13:16:39 +02:00
CWE-843
JS: Expand test case
2022-09-07 14:18:01 +02:00
CWE-862
add a js/empty-password-in-configuration-file query
2022-01-19 10:48:45 +01:00
CWE-912
make the alert messages of taint-tracking queries more consistent
2022-09-05 14:04:52 +02:00
CWE-915
Merge pull request #10388 from erik-krogh/exportNew
2022-09-13 13:45:16 +02:00
CWE-916
JavaScript: Update expected output.
2019-10-29 15:36:24 +00:00
CWE-918
JS: Add consistency test
2022-02-16 13:35:01 +01:00
CWE-1004
add session{key,id} as sensitive info
2021-10-26 13:46:59 +02:00
CWE-1275
add a js/samesite-none-cookie cookie
2022-01-24 21:39:41 +01:00