Commits

Breadcrumbs

History for

onmaster

User selector

All users

All time

Commit history

Commits on Nov 8, 2018

• Optimization: look for CSRF only in Controller based classes

  JarLob

  committed
  e6d1260

  Copy full SHA for e6d1260

• Inherited csrf token tests

  JarLob

  committed
  c849a06

  Copy full SHA for c849a06

Commits on Nov 7, 2018

• Add NonAction attribute check. Closes #90

  JarLob

  committed
  5615a53

  Copy full SHA for 5615a53

Commits on Nov 6, 2018

• More aliased tests added

  JarLob

  committed
  4984594

  Copy full SHA for 4984594

• Renamed test category "Ignore" into "Safe" to avoid confusion with ignored tests.

  JarLob

  committed
  81805fe

  Copy full SHA for 81805fe

Commits on Nov 4, 2018

• Merge branch '#49' of https://github.com/eloisetaylor5693/security-code-scan into #49

  

  eloisetaylor5693

  committed
  45db919

  Copy full SHA for 45db919

• merge

  

  eloisetaylor5693

  committed
  7f2cc1d

  Copy full SHA for 7f2cc1d

Commits on Nov 3, 2018

• Fix null reference exception in vb helper

  JarLob

  committed
  2fd69bd

  Copy full SHA for 2fd69bd

• Fixed Behavior to support extension methods.

  JarLob

  committed
  b037085

  Copy full SHA for b037085

• Added test to show False Negative

  

  eloisetaylor5693

  committed
  6c4da78

  Copy full SHA for 6c4da78

• Merging

  

  eloisetaylor5693

  committed
  683f23a

  Copy full SHA for 683f23a

• Included commented out code again, and added tests to show the false positives. Also numbering the test classes for ease of troubleshooting when the tests fail.

  

  eloisetaylor5693

  committed
  3cb58b5

  Copy full SHA for 3cb58b5

• Added todo to explain this does not work: Private Shared Parser As New XmlDocument()I

  

  eloisetaylor5693

  committed
  d7e7211

  Copy full SHA for d7e7211

Commits on Nov 2, 2018

• Added search for XPath injection in XPathExpression.Compile, XPathSelectElement, XPathSelectElements and XPathEvaluate.

  Show description for 12fc7fd
  zaichenko

  committed
  12fc7fd

  Copy full SHA for 12fc7fd

Commits on Oct 31, 2018

• Changed XPathInjectionAnalyzerTest by analogy with SqlInjectionAnalyzerTest.

  zaichenko

  committed
  85080bd

  Copy full SHA for 85080bd

Commits on Oct 30, 2018

• Added search for XPath injection in several methods

  zaichenko

  committed
  eb975c3

  Copy full SHA for eb975c3

Commits on Oct 29, 2018

• Trailing spaces and formatting fix

  JarLob

  committed
  59c48f7

  Copy full SHA for 59c48f7

Commits on Oct 28, 2018

• Removed optimisation which allowed false negatives for AllowHtml attribute (when using alias directives)

  

  eloisetaylor5693

  committed
  107611c

  Copy full SHA for 107611c

• Added test categories, and extracted expected var into field where appropriate.

  

  eloisetaylor5693

  committed
  07ea53a

  Copy full SHA for 07ea53a

• Moved expected var to field, added test categories, and changed var to const string

  

  eloisetaylor5693

  committed
  d2368ad

  Copy full SHA for d2368ad

• Added alias directive test case, and test category attributes

  

  eloisetaylor5693

  committed
  27a9fbc

  Copy full SHA for 27a9fbc

• Refactored XxeAnalyzerTest. Split out other classes into separate files, mad var declarations more consistent, removed comments which appear to not be useful, added TestCategory tags and made Expec…

  Show description for e1b3cef
  

  eloisetaylor5693

  committed
  e1b3cef

  Copy full SHA for e1b3cef

Commits on Oct 27, 2018

• Made CookieWithoutFlags test a DataTestMethod and included the Alias Directive test

  

  eloisetaylor5693

  committed
  3fbac07

  Copy full SHA for 3fbac07

• Added search for LINQ injection in method DataContext.ExecuteCommand.

  Show description for 7837726
  zaichenko

  committed
  7837726

  Copy full SHA for 7837726

• Fixed breaking change in one of the tests

  

  eloisetaylor5693

  committed
  425f2db

  Copy full SHA for 425f2db

• Merge branch 'master' into #49

  

  eloisetaylor5693@yahoo.co.uk

  committed
  cd86e2a

  Copy full SHA for cd86e2a

Commits on Oct 25, 2018

• Formatting and minor fixes

  JarLob

  committed
  c7207fa

  Copy full SHA for c7207fa

Commits on Oct 24, 2018

• Corrected sink SqlQuery

  zaichenko

  committed
  801b947

  Copy full SHA for 801b947

• Separated sinks: SqlDataSource, SqlDataAdapter, Entity Framework and Microsoft Enterprise Library.

  Show description for a566d81
  zaichenko

  committed
  a566d81

  Copy full SHA for a566d81

Commits on Oct 23, 2018

• Merge branch 'master' of git://github.com/security-code-scan/security-code-scan

  zaichenko

  committed
  4be1b12

  Copy full SHA for 4be1b12

Commits on Oct 22, 2018

• Added search for sql injection in methods of Entity Framework and Microsoft Enterprise Library

  zaichenko

  committed
  a9e48d6

  Copy full SHA for a9e48d6

Commits on Oct 21, 2018

• Added test to see if analyzer handles aliased directives, and added categories

  

  eloisetaylor5693@yahoo.co.uk

  committed
  672b14e

  Copy full SHA for 672b14e

• Moved Alias directive tests into UnsafeDeserializationAnalyzerTests class and added categories to the tests

  

  eloisetaylor5693@yahoo.co.uk

  committed
  f045891

  Copy full SHA for f045891

Commits on Oct 20, 2018

• Remove the need to specify expected file name in unit tests.

  JarLob

  committed
  e906c75

  Copy full SHA for e906c75

• AuditMode added to InsecureCookieAnalyzer

  JarLob

  committed
  e3a12b3

  Copy full SHA for e3a12b3