Skip to content

Replace dead link in qhelp files #22880

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
geoffw0 wants to merge 1 commit into
base: main
Choose a base branch
from
+23 −23
Open

Replace dead link in qhelp files #22880

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion cpp/ql/src/Security/CWE/CWE-078/ExecTainted.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ should be safe against command injection.</p>
Sanitize data passed to complex subsystems</a>.</li>
<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>


Expand Down
2 changes: 1 addition & 1 deletion cpp/ql/src/experimental/Security/CWE/CWE-078/WordexpTainted.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ is performed, making this safe from command injection.</p>
Sanitize data passed to complex subsystems</a>.</li>
<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>


Expand Down
2 changes: 1 addition & 1 deletion csharp/ql/src/Security Features/CWE-078/CommandInjection.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ without examining it first.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

<!-- LocalWords: CWE untrusted unsanitized Runtime
Expand Down
2 changes: 1 addition & 1 deletion go/ql/src/Security/CWE-078/CommandInjection.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ not interpreted as flags, or verify that the argument does not start with <code>
</example>
<references>
<li>
OWASP: <a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
OWASP: <a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
</references>
</qhelp>
2 changes: 1 addition & 1 deletion go/ql/src/Security/CWE-078/StoredCommand.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ ensure that commands are checked against a whitelist:

<references>
<li>
OWASP: <a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
OWASP: <a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
</references>
</qhelp>
2 changes: 1 addition & 1 deletion go/ql/src/Security/CWE-089/StringBreak.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,6 @@ that it has two limitations:

<references>
<li>Wikipedia: <a href="https://en.wikipedia.org/wiki/SQL_injection">SQL injection</a>.</li>
<li>OWASP: <a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.</li>
<li>OWASP: <a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.</li>
</references>
</qhelp>
2 changes: 1 addition & 1 deletion java/ql/src/Security/CWE/CWE-078/ExecTainted.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ without examining it first.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
<li>SEI CERT Oracle Coding Standard for Java:
<a href="https://wiki.sei.cmu.edu/confluence/display/java/IDS07-J.+Sanitize+untrusted+data+passed+to+the+Runtime.exec()+method">IDS07-J. Sanitize untrusted data passed to the Runtime.exec() method</a>.</li>
Expand Down
2 changes: 1 addition & 1 deletion java/ql/src/Security/CWE/CWE-078/ExecUnescaped.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ an argument.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
<li>SEI CERT Oracle Coding Standard for Java:
<a href="https://wiki.sei.cmu.edu/confluence/display/java/IDS07-J.+Sanitize+untrusted+data+passed+to+the+Runtime.exec()+method">IDS07-J. Sanitize untrusted data passed to the Runtime.exec() method</a>.</li>
Expand Down
2 changes: 1 addition & 1 deletion java/ql/src/experimental/Security/CWE/CWE-078/CommandInjectionRuntimeExec.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ without examining it first.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
<li>SEI CERT Oracle Coding Standard for Java:
<a href="https://wiki.sei.cmu.edu/confluence/display/java/IDS07-J.+Sanitize+untrusted+data+passed+to+the+Runtime.exec()+method">IDS07-J. Sanitize untrusted data passed to the Runtime.exec() method</a>.</li>
Expand Down
2 changes: 1 addition & 1 deletion java/ql/src/experimental/Security/CWE/CWE-078/CommandInjectionRuntimeExecLocal.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ without examining it first.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
<li>SEI CERT Oracle Coding Standard for Java:
<a href="https://wiki.sei.cmu.edu/confluence/display/java/IDS07-J.+Sanitize+untrusted+data+passed+to+the+Runtime.exec()+method">IDS07-J. Sanitize untrusted data passed to the Runtime.exec() method</a>.</li>
Expand Down
2 changes: 1 addition & 1 deletion java/ql/src/experimental/Security/CWE/CWE-078/ExecTainted.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ without examining it first.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
<li>SEI CERT Oracle Coding Standard for Java:
<a href="https://wiki.sei.cmu.edu/confluence/display/java/IDS07-J.+Sanitize+untrusted+data+passed+to+the+Runtime.exec()+method">IDS07-J. Sanitize untrusted data passed to the Runtime.exec() method</a>.</li>
Expand Down
2 changes: 1 addition & 1 deletion javascript/ql/src/Security/CWE-078/CommandInjection.inc.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ against an allowlist of safe characters before using it:</p>
<references>
<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
<li>
npm:
Expand Down
2 changes: 1 addition & 1 deletion javascript/ql/src/Security/CWE-078/IndirectCommandInjection.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -106,7 +106,7 @@ into an array of arguments instead.

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

<li>
Expand Down
2 changes: 1 addition & 1 deletion javascript/ql/src/Security/CWE-078/SecondOrderCommandInjection.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ being passed to the shell command.
<references>
<li>Max Justicz: <a href="https://justi.cz/security/2021/04/20/cocoapods-rce.html">Hacking 3,000,000 apps at once through CocoaPods</a>.</li>
<li>Git: <a href="https://git-scm.com/docs/git-ls-remote/2.22.0#Documentation/git-ls-remote.txt---upload-packltexecgt">Git - git-ls-remote Documentation</a>.</li>
<li>OWASP: <a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.</li>
<li>OWASP: <a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.</li>

</references>
</qhelp>
2 changes: 1 addition & 1 deletion javascript/ql/src/Security/CWE-078/ShellCommandInjectionFromEnvironment.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -96,7 +96,7 @@

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

</references>
Expand Down
2 changes: 1 addition & 1 deletion javascript/ql/src/Security/CWE-078/UnsafeShellCommandConstruction.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -102,7 +102,7 @@

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

<li>
Expand Down
2 changes: 1 addition & 1 deletion javascript/ql/src/Security/CWE-078/UselessUseOfCat.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ and if the input is user-controlled, a command injection attack can happen.</p>
</example>
<references>

<li>OWASP: <a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.</li>
<li>OWASP: <a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.</li>
<li>Node.js: <a href="https://nodejs.org/api/fs.html">File System API</a>.</li>
<li><a href="http://porkmail.org/era/unix/award.html#cat">The Useless Use of Cat Award</a>.</li>

Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-078/CommandInjection.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ The second is safe as it selects the command from a predefined allowlist.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

</references>
Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-078/UnsafeShellCommandConstruction.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

</references>
Expand Down
2 changes: 1 addition & 1 deletion ruby/ql/src/queries/security/cwe-078/CommandInjection.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ without examining it first.</p>

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

<!-- LocalWords: CWE untrusted unsanitized Runtime
Expand Down
2 changes: 1 addition & 1 deletion ruby/ql/src/queries/security/cwe-078/KernelOpen.inc.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ user-supplied file path.

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
<a href="https://cheatsheetseries.owasp.org/cheatsheets/Ruby_on_Rails_Cheat_Sheet.html#command-injection">Ruby on Rails Cheat Sheet: Command Injection</a>.
</li>

Expand Down
2 changes: 1 addition & 1 deletion ruby/ql/src/queries/security/cwe-078/UnsafeShellCommandConstruction.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@

<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>

</references>
Expand Down
2 changes: 1 addition & 1 deletion swift/ql/src/queries/Security/CWE-078/CommandInjection.qhelp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ meanings:
<references>
<li>
OWASP:
<a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
<a href="https://community.owasp.org/attacks/Command_Injection">Command Injection</a>.
</li>
</references>
</qhelp>
Loading