[Go] Add Unicode Bypass Validation query, test and help file - #12994

Open

Sim4n6 wants to merge 41 commits into

github:mainfrom

Sim4n6:golang-UBV

Commits on May 2, 2023

Add Unicode Bypass Validation query, test and help file
Sim4n6
committed
d6ee953

Commits on May 27, 2023

Update go/ql/lib/semmle/go/security/UnicodeBypassValidationQuery.qll

Sim4n6
and
smowton
authored
e3bc19a
Merge branch 'golang-UBV' of https://github.com/sim4n6/codeql-pun into golang-UBV
Sim4n6
committed
f40417d
Update go/ql/lib/semmle/go/security/UnicodeBypassValidationQuery.qll

Sim4n6
and
smowton
authored
09dad11
Merge branch 'golang-UBV' of https://github.com/sim4n6/codeql-pun into golang-UBV
Sim4n6
committed
8654e2a
Update go/ql/lib/semmle/go/security/UnicodeBypassValidationQuery.qll

Sim4n6
and
smowton
authored
940a669
Merge branch 'golang-UBV' of https://github.com/sim4n6/codeql-pun into golang-UBV
Sim4n6
committed
2a5f94c
Use of callee including ext
Sim4n6
committed
b304196
Removed an image from qhelp file
Sim4n6
committed
1917d8f
Removed repeating subtitle
Sim4n6
committed
7e760fc
No redundant imports
Sim4n6
committed
84e071c
all forms are vulnerable
Sim4n6
committed
d5d6776
Copied a go.mod and more
Sim4n6
committed
4ce9aa9
update some metadata
Sim4n6
committed
0111776
add CWE-180 to metadata
Sim4n6
committed
df556e9
String manipulation incorporated
Sim4n6
committed
07bbfde

Commits on May 30, 2023

Delete change note for UBV
Sim4n6
committed
3c90261
Update go/ql/src/experimental/CWE-176/UnicodeBypassValidation.qhelp

Sim4n6
and
smowton
authored
f6394bb
Merge branch 'golang-UBV' of https://github.com/sim4n6/codeql-pun into golang-UBV
Sim4n6
committed
f9e9aa9
hasQualifiedName use rather than getACallee
Sim4n6
committed
5ff385e
Use of getResult and more
Sim4n6
committed
8cc03c6
use of sink instanceof Sink
Sim4n6
committed
1499372

Commits on Jun 1, 2023

Add test using strings.Index()
Sim4n6
committed
e885080
Consider the guard of Untrusted Unicode Chararacters with some checks
Sim4n6
committed
8dec3a5
Update exptected file
Sim4n6
committed
63bd853

Commits on Jun 6, 2023

Use of intCheck and boolCheck as barrierGuards
Sim4n6
committed
2971c2a
Added two Good test samples
Sim4n6
committed
a9650d8
Updated the expected file
Sim4n6
committed
ece84b5

Commits on Jun 13, 2023

Added a missing bad example
Sim4n6
committed
92f3f83
UntrustedUnicodeCharCheckBarrier is part of Sink, all samples are BAD
Sim4n6
committed
c9c6054
Update expected test results
Sim4n6
committed
7f42af5

Commits on Jun 26, 2023

Updated the test cases with more
Sim4n6
committed
3ad7088
Update go/ql/lib/semmle/go/security/UnicodeBypassValidationQuery.qll

Sim4n6
and
smowton
authored
61959d4
Merge branch 'golang-UBV' of https://github.com/sim4n6/codeql-pun into golang-UBV
Sim4n6
committed
0b6a1ca
Regex match function calls could be considered a barrier guard checks
Sim4n6
committed
a64a998
Comment in details.
Sim4n6
committed
b3abf6c
Use of compare calls as a check for barrier
Sim4n6
committed
2a22dec
count check against zero
Sim4n6
committed
c2f723a
Fix the count check is for a count function call only.
Sim4n6
committed
e0761a7

Commits on Jun 28, 2023

Added an example code to support strings.Count()
Sim4n6
committed
ab97d15
Use of RelationalComparisonNode
Sim4n6
committed
1eaf71a