Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

C#: Add query for Insecure Direct Object Reference #13882

Merged
merged 25 commits into from
Sep 25, 2023
Merged

C#: Add query for Insecure Direct Object Reference #13882

merged 25 commits into from
Sep 25, 2023

Commits on Sep 15, 2023

  1. Add insecure direct object reference definitions and factor out those… 

    … from missing access control
    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    a510a7b View commit details
    Browse the repository at this point in the history

  2. Add IDOR query

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    5d12896 View commit details
    Browse the repository at this point in the history

  3. Fix filenme typo

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    251f875 View commit details
    Browse the repository at this point in the history

  4. Fix typos in filepath + metadata, add severity

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    2edd73e View commit details
    Browse the repository at this point in the history

  5. Add tests for webforms case

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    20d42df View commit details
    Browse the repository at this point in the history

  6. Add MVC tests

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    009a7bf View commit details
    Browse the repository at this point in the history

  7. Update alert message and make user checks more precise

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    f8b1b38 View commit details
    Browse the repository at this point in the history

  8. Add documentation

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    3e6750b View commit details
    Browse the repository at this point in the history

  9. Add change note + update query ID

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    4967fe0 View commit details
    Browse the repository at this point in the history

  10. Apply minor reveiw suggstions

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    9f25c71 View commit details
    Browse the repository at this point in the history

  11. Update test options

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    86abd33 View commit details
    Browse the repository at this point in the history

  12. Add additional example to qhelp + additional resource

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    a022893 View commit details
    Browse the repository at this point in the history

  13. Minor changes from review suggestions to shared logic between this an… 

    …d missing access control

Use case insensitive regex, factor out page load to improve possible bad joins make needsAuth not a member predicate
    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    0a27da0 View commit details
    Browse the repository at this point in the history

  14. Add checks for authorization attributes

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    ac45050 View commit details
    Browse the repository at this point in the history

  15. Add test cases for authorization from attributes

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    6a95ed6 View commit details
    Browse the repository at this point in the history

  16. Check for authorize attributes in more namespaces and on overridden m… 

    …ethods
    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    a2dce6b View commit details
    Browse the repository at this point in the history

  17. Rewrite checks for index expressions in terms of dataflow

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    6d704be View commit details
    Browse the repository at this point in the history

  18. Restrict logic for checking for id parameters on index expressions fo… 

    …r performance
    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    68ad5b7 View commit details
    Browse the repository at this point in the history

  19. Fix typos

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    eb2f589 View commit details
    Browse the repository at this point in the history

  20. Update severity

    @joefarebrother
    joefarebrother committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    868836e View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2023

  1. Attempt to improve performance in checksUser

    @joefarebrother
    joefarebrother committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    475fe3a View commit details
    Browse the repository at this point in the history

  2. Add an additional example and additional test cases for authorize att… 

    …ribute cases
    @joefarebrother
    joefarebrother committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    4497e22 View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2023

  1. Apply suggestions from docs review 

    Co-authored-by: Sam Browning <[email protected]>
    @joefarebrother @sabrowning1
    joefarebrother and sabrowning1 authored Sep 25, 2023
    Configuration menu
    Copy the full SHA
    df5fcc9 View commit details
    Browse the repository at this point in the history

  2. Elaborate 'guess' to 'guess or determine'

    @joefarebrother
    joefarebrother committed Sep 25, 2023
    Configuration menu
    Copy the full SHA
    3efbbb3 View commit details
    Browse the repository at this point in the history

  3. Fix codescanning alert by tweaking imported modules

    @joefarebrother
    joefarebrother committed Sep 25, 2023
    Configuration menu
    Copy the full SHA
    d7c1be4 View commit details
    Browse the repository at this point in the history