Erik Krogh Kristensen e13b2df86f Merge pull request #8185 from erik-krogh/amdImp ...

JS: recognize modules imported by AMD imports as library inputs

2022-02-23 20:21:45 +01:00

..

CWE-020

update expected output

2021-11-15 13:50:12 +01:00

CWE-022

update locations of expected output

2022-02-07 15:23:26 +01:00

CWE-073

JS: Use routing trees to detect deeply tainted req.body

2021-12-07 10:46:18 +01:00

CWE-078

recognize modules imported by AMD imports as library inputs

2022-02-23 10:39:45 +01:00

CWE-079

model hapi handler returns as reflected-xss sinks

2022-02-22 14:12:01 +01:00

CWE-089

JS: Recognize "sql" option as a query string

2022-01-13 13:04:41 +01:00

CWE-094

add values written to the global scope as exports

2022-02-07 13:34:18 +01:00

CWE-116

add a bad-tag-filter query for Python and JavaScript

2021-09-21 15:04:03 +02:00

CWE-117

Merge branch 'main' into logs

2021-07-16 11:21:25 +02:00

CWE-134

…

CWE-200

…

CWE-201

…

CWE-209

…

CWE-295

…

CWE-300

add js/http-dependency query

2022-01-19 10:05:39 +01:00

CWE-312

…

CWE-313

update tests for password patterns

2022-02-16 13:22:19 +01:00

CWE-326

don't include mode-of-operation into the algorithm names

2021-11-03 14:54:50 +01:00

CWE-327

…

CWE-338

…

CWE-346

…

CWE-347

update expected output

2022-01-28 12:21:33 +01:00

CWE-352

JS: Fix handling of fastify-plugin

2021-12-15 16:04:46 +01:00

CWE-367

add a js/file-system-race query

2022-01-28 09:41:12 +01:00

CWE-384

add js/session-fixation query

2021-11-03 13:04:41 +01:00

CWE-400

…

CWE-451

…

CWE-502

…

CWE-506

Document and format event-stream-orig.js

2022-02-04 09:27:47 +01:00

CWE-598

add test that requires flowToExpr

2021-11-08 12:25:45 +01:00

CWE-601

…

CWE-611

…

CWE-614

assume that setting the secure/httpOnly flag to some unknown value is good

2021-10-26 13:47:28 +02:00

CWE-640

…

CWE-643

…

CWE-730

…

CWE-754

update expected files

2022-02-04 12:28:17 +00:00

CWE-770

JS: Add test for fastify-rate-limit

2021-12-15 16:18:22 +01:00

CWE-776

…

CWE-798

ignore deliberately hardcoded password strings

2022-02-16 09:47:01 +01:00

CWE-807

…

CWE-829

…

CWE-830

CWE 830 polish error messages

2022-02-22 11:41:54 +01:00

CWE-834

…

CWE-843

…

CWE-862

add a js/empty-password-in-configuration-file query

2022-01-19 10:48:45 +01:00

CWE-912

…

CWE-915

support more property writes in js/prototype-pollution-utility, and generalize ObjectDefinePropertyAsPropWrite

2022-02-22 13:23:34 +01:00

CWE-916

…

CWE-918

JS: Add consistency test

2022-02-16 13:35:01 +01:00

CWE-1004

add session{key,id} as sensitive info

2021-10-26 13:46:59 +02:00

CWE-1275

add a js/samesite-none-cookie cookie

2022-01-24 21:39:41 +01:00

Summaries

…