This repository has been archived by the owner on Aug 23, 2022. It is now read-only.

Commits

Commits on Apr 22, 2011

Merge branch 'master' of github.com:SecurityInnovation/YASAT
Joe Basirico
committed

Commits on Apr 21, 2011

This rule includes many common issues using random numbers. Casting them, using rand when you should use a secure RNG and using a secure random number generator improperly.
Joe Basirico
committed

Commits on Mar 24, 2011

modified .gitignore
Joe Basirico
committed

Commits on Mar 18, 2011

Update rule for poor exception handling
kaizoku
committed

Commits on Mar 9, 2011

Fixed a typo and added more _by_sql rules
Joe Basirico
committed

Commits on Mar 7, 2011

Updated SSL bypass with an additional link to MSDN article
Joe Basirico
committed
Merge branch 'master' of github.com:SecurityInnovation/YASAT
Joe Basirico
committed
Added Rule to look for CheckValidationResult which can lead to a potential SSL validation checking bypass.
Joe Basirico
committed

Commits on Mar 4, 2011

Edited ReadMe.markdown via GitHub
joebasirico
committed
Added ReadMe.markdown
Joe Basirico
committed
Deleted unnecessary .sou
Joe Basirico
committed
Added commenting for C# style triple forward slash comments (///)
Joe Basirico
committed
Will now verify the rules directory exists before trying to load from it
Joe Basirico
committed
Removed Debug and Bin directories.
Joe Basirico
committed
Merge branch 'master' of github.com:SecurityInnovation/YASAT
Joe Basirico
committed
Changed Rules.xml file in the source tree to be a demo rule
Joe Basirico
committed
Rewrote or updated most of the rules. Should provide better results when finding SQL injection and commenting issues especially.
Joe Basirico
committed

Commits on Feb 18, 2011

added gitignore
Joe Basirico
committed

Commits on Sep 30, 2010

Fixed errors in Apple Regex's
Ian Gallagher
committed
Another duplicate Regex entry (removed)
Ian Gallagher
committed
Removed duplicate RegularExpressionPattern in Apple.xml
Ian Gallagher
committed
Added start of Apple (Carbon/Cocoa framework) rules file
Ian Gallagher
committed

Commits on Sep 29, 2010

Joe's crazy commit!
Joe Basirico
committed

Commits on Sep 8, 2010

Added two Ruby on Rails rules to find potential XSS (using <%= instead of <%=h and potential SQLi (using find_by_sql)
joebasirico
committed

Commits on Aug 3, 2010

Added "XXX" to the comment rule
Matthew
committed

Commits on Jul 6, 2010

Fixed typos
kaizoku
committed

Commits on Jul 5, 2010

Added per file LoC reporting
Joe Basirico
committed

Commits on Jul 3, 2010

Commits on Jul 2, 2010

Initial Commit
Joe Basirico
committed