Skip to content

0.0.6.md

Latest commit

 

History

History
9 lines (5 loc) · 565 Bytes

0.0.6.md

File metadata and controls

9 lines (5 loc) · 565 Bytes

0.0.6

New Queries

  • Two new queries have been added for detecting Server-side request forgery (SSRF). Full server-side request forgery (py/full-ssrf) will only alert when the URL is fully user-controlled, and Partial server-side request forgery (py/partial-ssrf) will alert when any part of the URL is user-controlled. Only py/full-ssrf will be run by default.

Minor Analysis Improvements

  • To support the new SSRF queries, the PyPI package requests has been modeled, along with http.client.HTTP[S]Connection from the standard library.