Commits

Breadcrumbs

History for

on39acc9a

User selector

All users

All time

Commit History

Commits on Dec 17, 2020

• Merge pull request #4735 from RasmusWL/python-untrusted-flow

  Show description for 39acc9a
  yoff

  authored
  39acc9a

  Copy full SHA for 39acc9a

Commits on Dec 8, 2020

• Merge pull request #4773 from RasmusWL/path-injection-improvements

  Show description for 3bddb94
  yoff

  authored
  3bddb94

  Copy full SHA for 3bddb94

• Python: Reword qhelp text

  Show description for 9765598
  

  RasmusWL

  and

  felicitymay

  authored
  9765598

  Copy full SHA for 9765598

Commits on Dec 3, 2020

• Python: Highlight os.path.join behavior with absolute paths

  RasmusWL

  committed
  e53ed47

  Copy full SHA for e53ed47

Commits on Nov 30, 2020

• Python: Remove leftover note to self in qhelp file

  RasmusWL

  committed
  a08e1db

  Copy full SHA for a08e1db

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Nov 27, 2020

• Python: Fix UntrustedDataToExternalAPI.qhelp

  RasmusWL

  committed
  cbfcfdf

  Copy full SHA for cbfcfdf

Commits on Nov 26, 2020

• Python: Untrusted data used in external APIs

  Show description for 9e4910f
  RasmusWL

  committed
  9e4910f

  Copy full SHA for 9e4910f

Commits on Nov 6, 2020

• Python: Move UnsafeDeserialization configuration to own file

  RasmusWL

  committed
  9ebe59d

  Copy full SHA for 9ebe59d

• Python: Move ReflectedXSS configuration to own file

  RasmusWL

  committed
  d38c48d

  Copy full SHA for d38c48d

• Python: Move PathInjection configuration to own file

  Show description for 1897a0d
  RasmusWL

  committed
  1897a0d

  Copy full SHA for 1897a0d

• Python: Move SqlInjection configuration to own file

  RasmusWL

  committed
  0c6bd84

  Copy full SHA for 0c6bd84

• Python: Move CommandInjection configuration to own file

  RasmusWL

  committed
  6299b73

  Copy full SHA for 6299b73

• Python: Move CodeInjection configuration to own file

  Show description for 7c04c59
  RasmusWL

  committed
  7c04c59

  Copy full SHA for 7c04c59

Commits on Nov 2, 2020

• Python: More import fixups

  tausbn

  committed
  fb6a02e

  Copy full SHA for fb6a02e

Commits on Oct 30, 2020

• Python: Promote experimental queries

  Show description for f903e4f
  tausbn

  committed
  f903e4f

  Copy full SHA for f903e4f

Commits on Oct 1, 2020

• Fix OWASP broken links

  smowton

  committed
  578ea1a

  Copy full SHA for 578ea1a

Commits on Sep 30, 2020

• changed to AES

  fatenhealy

  authored
  03d8fc7

  Copy full SHA for 03d8fc7

Commits on Sep 13, 2020

• Update broken_crypto.py to AES instead of Blowfish

  fatenhealy

  authored
  6f20516

  Copy full SHA for 6f20516

• Update BrokenCryptoAlgorithm - Blowfish to AES

  fatenhealy

  authored
  826fc0a

  Copy full SHA for 826fc0a

Commits on Aug 26, 2020

• JS: make sanitization a "common" technique rather than "important"

  esbena

  committed
  8930586

  Copy full SHA for 8930586

Commits on Jul 7, 2020

• Python: Autoformat everything using `qlformat`.

  Show description for f07a7bf
  tausbn

  committed
  f07a7bf

  Copy full SHA for f07a7bf

Commits on Jul 2, 2020

• Merge branch 'master' into python-fix-django-taint-sinks

  RasmusWL

  committed
  67be45f

  Copy full SHA for 67be45f

Commits on Jun 19, 2020

• Python: Get rid of deprecated terms in code and `.qhelp`.

  tausbn

  committed
  01fb1e3

  Copy full SHA for 01fb1e3

Commits on May 26, 2020

• Python: Model Django response sinks that are not vuln to XSS

  Show description for 6cba2fe
  RasmusWL

  committed
  6cba2fe

  Copy full SHA for 6cba2fe

• Python: Extend command-injection to handle fabric.api.execute

  RasmusWL

  committed
  9c75a39

  Copy full SHA for 9c75a39

Commits on May 25, 2020

• Python: Use proper import for semmle.python.dataflow.TaintTracking

  Show description for f602f3e
  RasmusWL

  committed
  f602f3e

  Copy full SHA for f602f3e

Commits on Mar 30, 2020

• Python: Autoformat one final straggler.

  tausbn

  committed
  ab4cef5

  Copy full SHA for ab4cef5

• Python: Autoformat all `.ql` files.

  tausbn

  committed
  87a9f51

  Copy full SHA for 87a9f51

Commits on Mar 25, 2020

• Merge pull request #3111 from RasmusWL/python-fabric-command-injection

  Show description for ac7c74d
  semmle-qlci

  authored
  ac7c74d

  Copy full SHA for ac7c74d

Commits on Mar 23, 2020

• Python: Add abstract class CommandSink

  Show description for d475bb9
  RasmusWL

  committed
  d475bb9

  Copy full SHA for d475bb9

Commits on Feb 20, 2020

• Python: TarSlip sanitizer: handle not

  RasmusWL

  committed
  1029f04

  Copy full SHA for 1029f04

• Python: TarSlip sanitizer: only clear taint on false edge

  Show description for 3c317ed
  RasmusWL

  committed
  3c317ed

  Copy full SHA for 3c317ed

Commits on Feb 17, 2020

• Python: Use StringValue instead of Value::forString

  RasmusWL

  committed
  f3ab52b

  Copy full SHA for f3ab52b

• Python: Fix typos

  RasmusWL

  committed
  6d5a8e4

  Copy full SHA for 6d5a8e4