Commits

Breadcrumbs

History for

on1885b68

User selector

All users

All time

Commit History

Commits on Jul 22, 2021

• Python: Hotfix: Disable ReDoS queries

  tausbn

  authored
  e9a4114

  Copy full SHA for e9a4114

• Merge remote-tracking branch 'origin/jorgectf/python/ldapimproperauth' into jorgectf/python/ldapinsecureauth

  jorgectf

  committed
  edb273a

  Copy full SHA for edb273a

Commits on Jul 21, 2021

• Add `Python-Jose` modeling and tests

  jorgectf

  committed
  8d84d63

  Copy full SHA for 8d84d63

• Add `Authlib` modeling and tests

  jorgectf

  committed
  ce507be

  Copy full SHA for ce507be

• Divide JWT libraries

  jorgectf

  committed
  f1b3c70

  Copy full SHA for f1b3c70

Commits on Jul 19, 2021

• Python : Improve Xpath Injection Query

  

  Porcuiney Hairs

  committed
  c6c925d

  Copy full SHA for c6c925d

Commits on Jul 18, 2021

• Query only vulnerable methods

  mrthankyou

  committed
  9e01338

  Copy full SHA for 9e01338

Commits on Jul 5, 2021

• Add tornado source

  haby0

  committed
  e8d0827

  Copy full SHA for e8d0827

Commits on Jul 2, 2021

• Add CWE-348 ClientSuppliedIpUsedInSecurityCheck

  haby0

  committed
  b866f1b

  Copy full SHA for b866f1b

Commits on Jul 1, 2021

• Delete outdated comment

  jorgectf

  committed
  3d2b6f7

  Copy full SHA for 3d2b6f7

• Make `verifiesSignature()` a predicate

  jorgectf

  committed
  a1f48db

  Copy full SHA for a1f48db

• Add `JWT` framework to `Frameworks.qll`

  jorgectf

  committed
  4079e53

  Copy full SHA for 4079e53

• Move tests under `test/`

  jorgectf

  committed
  07422a1

  Copy full SHA for 07422a1

Commits on Jun 29, 2021

• Add SQLEscapySanitizerCall class

  mrthankyou

  committed
  0be2c6b

  Copy full SHA for 0be2c6b

• Add SQLEscape module

  mrthankyou

  committed
  986f2f4

  Copy full SHA for 986f2f4

• Fix qldocs typo

  jorgectf

  committed
  0819090

  Copy full SHA for 0819090

• Hardcode `ldap2` binding functions

  jorgectf

  committed
  2f9e645

  Copy full SHA for 2f9e645

• Python: Add taint-step for `sqlalchemy.text`

  RasmusWL

  committed
  a5a7f3e

  Copy full SHA for a5a7f3e

• Merge branch 'main' into python-use-sqlalchemy

  RasmusWL

  committed
  684f51a

  Copy full SHA for 684f51a

Commits on Jun 28, 2021

• Move `xmltodict` to its own file under `frameworks/`

  jorgectf

  committed
  51395d1

  Copy full SHA for 51395d1

• Apply suggestions from code review

  Show description for 3504408
  

  jorgectf

  and

  RasmusWL

  authored
  3504408

  Copy full SHA for 3504408

• Polish documentation, `mongoCollectionMethod()` and update `.expected`

  jorgectf

  committed
  68c6831

  Copy full SHA for 68c6831

• Fix tests

  jorgectf

  committed
  1d4d8ab

  Copy full SHA for 1d4d8ab

• Rephrase .qhelp

  jorgectf

  committed
  b942251

  Copy full SHA for b942251

• Python: Don't rely on `d = d.getOutput()` for `Decoding`

  Show description for 318694c
  RasmusWL

  committed
  318694c

  Copy full SHA for 318694c

• Python: Fix qhelp for NoSQL injection

  RasmusWL

  committed
  5971142

  Copy full SHA for 5971142

• Python: Minor refactoring cleanup

  RasmusWL

  committed
  5477b2e

  Copy full SHA for 5477b2e

• Python: Inline `LDAPImproperAuth.qll`

  Show description for 4a2c99a
  RasmusWL

  committed
  4a2c99a

  Copy full SHA for 4a2c99a

• Python: Fix select for py/improper-ldap-auth

  RasmusWL

  committed
  b33f6a3

  Copy full SHA for b33f6a3

• Python: Handle both positional and keyword args for LDAP bind

  RasmusWL

  committed
  dfe16aa

  Copy full SHA for dfe16aa

Commits on Jun 24, 2021

• Python: Port `py/clear-text-storage-sensitive-data`

  RasmusWL

  committed
  a9469b7

  Copy full SHA for a9469b7

Commits on Jun 22, 2021

• Merge pull request #6064 from tausbn/python-add-get-method-call

  Show description for e05d6e7
  RasmusWL

  authored
  e05d6e7

  Copy full SHA for e05d6e7

Commits on Jun 21, 2021

• Python: Address review comments

  Show description for 768cab3
  tausbn

  authored
  768cab3

  Copy full SHA for 768cab3

Commits on Jun 19, 2021

• Update HeaderDeclaration input naming

  jorgectf

  committed
  b10ade1

  Copy full SHA for b10ade1

Commits on Jun 18, 2021

• Merge remote-tracking branch 'upstream/main' into jorgectf/python/jwt-queries

  jorgectf

  committed
  058ade4

  Copy full SHA for 058ade4