Commits

Breadcrumbs

History for

on2f3172e

User selector

All users

All time

Commit History

Commits on Apr 7, 2022

• Python: Model `pymongo.mongo_client.MongoClient`

  RasmusWL

  committed
  0ce2ced

  Copy full SHA for 0ce2ced

• Python: Move last XXE/XML bomb out of experimental

  RasmusWL

  committed
  8191be9

  Copy full SHA for 8191be9

• Python: Rename sink definitions for XXE/XML bomb

  RasmusWL

  committed
  405480c

  Copy full SHA for 405480c

• refactor uses of API::Node::getAUse() that should have been something else

  erik-krogh

  committed
  50bfc8e

  Copy full SHA for 50bfc8e

• refactor more python type-trackers to API-graphs

  erik-krogh

  committed
  4e5afab

  Copy full SHA for 4e5afab

• Python: Change XmlBomb vulnerability kind

  RasmusWL

  committed
  7728b6c

  Copy full SHA for 7728b6c

Commits on Apr 5, 2022

• Update CopyFile.qll

  ahmed-farid-dev

  authored
  dfe7f53

  Copy full SHA for dfe7f53

• Rename Zip.qll to CopyFile.qll

  ahmed-farid-dev

  authored
  0d6d078

  Copy full SHA for 0d6d078

• Update Frameworks.qll

  ahmed-farid-dev

  authored
  8882bc1

  Copy full SHA for 8882bc1

• Update Zip.qll

  ahmed-farid-dev

  authored
  68bfe38

  Copy full SHA for 68bfe38

• Python: Rename to `XmlParsingVulnerabilityKind`

  Show description for 1f285b8
  RasmusWL

  committed
  1f285b8

  Copy full SHA for 1f285b8

• Python: Rename to `XmlParsing`

  Show description for ab59d5c
  RasmusWL

  committed
  ab59d5c

  Copy full SHA for ab59d5c

Commits on Mar 31, 2022

• Python: Fix `SimpleXmlRpcServer.ql`

  RasmusWL

  committed
  d2b03bb

  Copy full SHA for d2b03bb

• Python: Promote XXE and XML-bomb queries

  Show description for 4abab22
  RasmusWL

  committed
  4abab22

  Copy full SHA for 4abab22

• Python: Remove last bits of experimental XML modeling

  RasmusWL

  committed
  b8d3c5e

  Copy full SHA for b8d3c5e

• Python: Promote `xml.sax` and `xml.dom.*` modeling

  RasmusWL

  committed
  e112697

  Copy full SHA for e112697

• Python: Promote `xml.etree` modeling

  RasmusWL

  committed
  64aa503

  Copy full SHA for 64aa503

• Python: Promote `xmltodict` modeling

  RasmusWL

  committed
  7f5f767

  Copy full SHA for 7f5f767

• Python: Promote lxml parsing modeling

  RasmusWL

  committed
  80b5cde

  Copy full SHA for 80b5cde

• Python: Make `XMLParsing` a `Decoding` subclass

  RasmusWL

  committed
  1ea4bcc

  Copy full SHA for 1ea4bcc

• Python: => `XMLParsingVulnerabilityKind`

  Show description for e45288e
  RasmusWL

  committed
  e45288e

  Copy full SHA for e45288e

• Python: Promote `XMLParsing` concept

  RasmusWL

  committed
  e005a5c

  Copy full SHA for e005a5c

• Python: Add PortSwigger link to `Xxe.qhelp`

  Show description for 9caf4be
  RasmusWL

  committed
  9caf4be

  Copy full SHA for 9caf4be

• Python: Adjust `XmlBomb.qhelp` from JS

  RasmusWL

  committed
  56b9c89

  Copy full SHA for 56b9c89

• Python: Adjust XXE qhelp

  Show description for b00766b
  RasmusWL

  committed
  b00766b

  Copy full SHA for b00766b

• Python: Delete `XmlEntityInjection.ql`

  Show description for c365337
  RasmusWL

  committed
  c365337

  Copy full SHA for c365337

• Python: Adjust Xxe/XmlBomb for Python

  Show description for e45f9d6
  RasmusWL

  committed
  e45f9d6

  Copy full SHA for e45f9d6

• Python: Copy Xxe/XmlBomb queries from JS

  Show description for 65907c9
  RasmusWL

  committed
  65907c9

  Copy full SHA for 65907c9

Commits on Mar 30, 2022

• Update python/ql/src/experimental/semmle/python/security/injection/CsvInjection.qll

  Show description for 1e6893e
  

  haby0

  and

  yoff

  authored
  1e6893e

  Copy full SHA for 1e6893e

• Simplify StartsWithCheck

  haby0

  committed
  8f2013c

  Copy full SHA for 8f2013c

Commits on Mar 29, 2022

• Python : Add query to detect PAM authorization bypass

  Show description for 9203304
  

  Porcupiney Hairs

  committed
  9203304

  Copy full SHA for 9203304

• Added Sanitizer Guard

  haby0

  committed
  bf8c7a2

  Copy full SHA for bf8c7a2

Commits on Mar 28, 2022

• Update zipslip_bad.py

  ahmed-farid-dev

  authored
  d89ed8b

  Copy full SHA for d89ed8b

• Update zipslip_bad.py

  ahmed-farid-dev

  authored
  cafbd98

  Copy full SHA for cafbd98

• Update ZipSlip.qll

  ahmed-farid-dev

  authored
  ddba3b7

  Copy full SHA for ddba3b7