hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 12:46:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
fe28657c7da69df42bbfb7c6aec72f86cdc93b11
codeql/java/ql/src/Security/CWE
History
Jami Cogswell 335c59792c Java: remove unnecessary anchor and update page name
2024-10-18 09:26:56 -04:00
..
CWE-020
Refactor ExternalAPIs.qll
2023-03-29 22:33:08 -04:00
CWE-022
delete imports to a deleted file
2024-09-03 20:31:00 +02:00
CWE-023
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-074
Java: fix typo in JndiInjection.qhelp
2024-02-06 15:17:30 +01:00
CWE-078
Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.
2024-05-01 13:07:20 +02:00
CWE-079
Java: Deprecate the content of XssLocalQuery and remove the Xss local query variant.
2024-05-01 08:59:50 +02:00
CWE-089
Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.
2024-05-01 13:07:21 +02:00
CWE-090
Move LdapInjectionLib to LdapInjectionQuery.qll
2023-03-29 17:59:33 -04:00
CWE-094
Move InsecureBeanValidation configuration to Query.qll
2023-03-29 17:59:33 -04:00
CWE-113
Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.
2024-05-01 13:07:21 +02:00
CWE-117
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-129
Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.
2024-05-01 13:07:21 +02:00
CWE-134
Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.
2024-05-01 13:07:21 +02:00
CWE-190
Merge pull request #16362 from michaelnebel/java/removelocalqueries
2024-05-16 14:34:04 +02:00
CWE-200
Remove period from 'name'
2024-02-22 10:50:45 +00:00
CWE-209
Minor changes to formulations for java/error-message-exposure
2024-07-29 16:48:15 +02:00
CWE-266
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-273
Refactor UnsafeCertTrustQuery
2023-03-29 22:33:08 -04:00
CWE-287
Apply suggestions from documentation review
2024-02-22 10:11:49 +00:00
CWE-295
Java: Deprecate RefType.nestedName(), and add RefType.getNestedName()
2024-09-16 17:16:25 +01:00
CWE-297
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-312
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-319
Java: Tag java/non-https-url with CWE-345
2024-07-11 13:37:09 +01:00
CWE-326
Refactor InsufficientKeySize
2023-03-29 22:33:09 -04:00
CWE-327
Java: Generelize MaybeBrokenCryptoAlgorithmQuery.qll
2023-12-22 10:15:40 +01:00
CWE-330
Docs review suggestions
2023-12-11 11:18:40 -05:00
CWE-335
Mass rename L/RValue -> VarWrite/Read
2023-10-24 10:58:29 +01:00
CWE-338
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-347
Java: Further alert message improvement
2023-09-18 12:25:31 +02:00
CWE-352
Java: remove unnecessary anchor and update page name
2024-10-18 09:26:56 -04:00
CWE-367
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-421
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-441
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-470
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-489
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-501
Switch source and sink in TrustBoundaryViolation.ql
2024-05-23 15:53:12 +02:00
CWE-502
Java: Add JMS sink to java/unsafe-deserialization
2023-10-26 16:46:19 +02:00
CWE-522
Refactor InsecureBasicAuth
2023-03-29 22:33:09 -04:00
CWE-524
Apply suggestion from docs review
2022-11-16 10:54:14 +00:00
CWE-532
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-552
docs wording updates
2024-03-28 16:15:05 -04:00
CWE-601
Java: Deprecate the local content of UrlRedirectLocalQuery and remove the local query variant.
2024-05-01 13:07:21 +02:00
CWE-611
Java: Reword recommendation section of XXE query
2024-05-22 11:34:19 +02:00
CWE-614
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
CWE-643
Add XPathInjectionQuery
2023-05-04 10:14:59 -04:00
CWE-676
Java: Clean up some instances of getQualifiedName.
2024-05-13 13:06:44 +02:00
CWE-681
Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.
2024-05-01 13:07:21 +02:00
CWE-730
Update dead link.
2023-11-07 09:26:07 +00:00
CWE-732
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-749
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-780
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-798
Add aliases for public, importable renamed classes and predicates.
2023-10-24 10:54:35 +01:00
CWE-807
Autoformat
2023-10-24 11:06:19 +01:00
CWE-829
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
CWE-833
Autoformat
2023-10-24 11:06:19 +01:00
CWE-835
Java: Make JumpStmt a proper superclass
2022-03-30 00:30:27 +02:00
CWE-917
Refactor to DataFlow::Global
2023-03-24 10:04:46 -04:00
CWE-918
Java: Rename references.
2023-03-23 13:06:19 +01:00
CWE-925
spelling: receiver
2022-10-12 04:40:26 -04:00
CWE-926
Reword first sentence of documentation
2022-10-11 11:02:37 -04:00
CWE-927
Deprecate sensitiveResultReceiver
2023-04-13 23:06:16 -04:00
CWE-940
Update to DataFlow::Global
2023-03-24 09:54:53 -04:00
CWE-1104
rename existing getUrl predicate to getRepositoryUrl
2022-04-06 15:32:33 +02:00
CWE-1204
Refactor StaticInitializationVector
2023-03-29 22:33:09 -04:00