Commits

Breadcrumbs

History for

on39acc9a

User selector

All users

All time

Commit History

Commits on Dec 17, 2020

• Merge pull request #4735 from RasmusWL/python-untrusted-flow

  Show description for 39acc9a
  yoff

  authored
  39acc9a

  Copy full SHA for 39acc9a

• Merge pull request #4749 from RasmusWL/command-injection-tests

  Show description for 9dd6439
  yoff

  authored
  9dd6439

  Copy full SHA for 9dd6439

Commits on Dec 8, 2020

• Python: Add example FP

  yoff

  committed
  a757a69

  Copy full SHA for a757a69

• Merge pull request #4773 from RasmusWL/path-injection-improvements

  Show description for 3bddb94
  yoff

  authored
  3bddb94

  Copy full SHA for 3bddb94

Commits on Dec 7, 2020

• Python: Add command injection regex restricted FP

  RasmusWL

  committed
  5aa2c2f

  Copy full SHA for 5aa2c2f

• Python: Add example of bad command injection sanitizer

  RasmusWL

  committed
  32b547b

  Copy full SHA for 32b547b

• Python: Adjust whitespace in command injection test

  RasmusWL

  committed
  8444654

  Copy full SHA for 8444654

Commits on Dec 3, 2020

• Python: Add examples of Path Injection FPs seen

  Show description for a9ce067
  RasmusWL

  committed
  a9ce067

  Copy full SHA for a9ce067

• Python: Model abspath and realpath (for Path Injection)

  RasmusWL

  committed
  e8f6331

  Copy full SHA for e8f6331

• Python: Add Path Injection tests for realpath and abspath

  Show description for bd5cf80
  RasmusWL

  committed
  bd5cf80

  Copy full SHA for bd5cf80

• Python: Rewrite path injection tests

  Show description for 4d9f24a
  RasmusWL

  committed
  4d9f24a

  Copy full SHA for 4d9f24a

Commits on Dec 2, 2020

• Merge pull request #4700 from RasmusWL/python-add-code-injection-FP

  Show description for e266ced
  codeql-ci

  authored
  e266ced

  Copy full SHA for e266ced

Commits on Nov 30, 2020

• Python: Fix untrusted data to external API example

  Show description for 4ab3fff
  RasmusWL

  committed
  4ab3fff

  Copy full SHA for 4ab3fff

Commits on Nov 26, 2020

• Python: Untrusted data used in external APIs

  Show description for 9e4910f
  RasmusWL

  committed
  9e4910f

  Copy full SHA for 9e4910f

Commits on Nov 20, 2020

• Remove unit tests for duplicate-code detection, take II

  Show description for a2a4938
  

  Henning Makholm

  committed
  a2a4938

  Copy full SHA for a2a4938

Commits on Nov 19, 2020

• Python: Add example of Code Injection FP

  RasmusWL

  committed
  4c7c940

  Copy full SHA for 4c7c940

Commits on Nov 18, 2020

• Remove unit tests for duplicate-code detection

  Show description for a86679a
  

  Henning Makholm

  committed
  a86679a

  Copy full SHA for a86679a

Commits on Nov 10, 2020

• Python: update test expectations

  Show description for 0710963
  yoff

  committed
  0710963

  Copy full SHA for 0710963

Commits on Nov 2, 2020

• Python: Fixup CWE-022 tests

  Show description for b620b9b
  tausbn

  committed
  b620b9b

  Copy full SHA for b620b9b

• Python: Fixup CWE-079 tests

  tausbn

  committed
  af7626a

  Copy full SHA for af7626a

• Python: Fixup CWE-094 tests

  tausbn

  committed
  57b5109

  Copy full SHA for 57b5109

• Python: Fixup CWE-089 tests

  tausbn

  committed
  ebb5934

  Copy full SHA for ebb5934

• Python: Fixup CWE-078 tests.

  tausbn

  committed
  7a395bf

  Copy full SHA for 7a395bf

• Python: Fixup CWE-502 tests.

  tausbn

  committed
  52dc905

  Copy full SHA for 52dc905

Commits on Sep 30, 2020

• Python: Fix command injection example code

  Show description for 4adc26e
  RasmusWL

  committed
  4adc26e

  Copy full SHA for 4adc26e

Commits on Aug 14, 2020

• Merge pull request #4062 from tausbn/python-fix-unknown-import-star

  Show description for e9a36b2
  codeql-ci

  authored
  e9a36b2

  Copy full SHA for e9a36b2

Commits on Aug 13, 2020

• Python: Ignore `from foo import *` when `foo` is absent.

  tausbn

  committed
  a1a1218

  Copy full SHA for a1a1218

• Python: Add test case for missing modules

  tausbn

  committed
  dc5c0f8

  Copy full SHA for dc5c0f8

Commits on Jul 21, 2020

• Python : Add query to detect Server Side Template Injection

  

  Porcupiney Hairs

  committed
  49df416

  Copy full SHA for 49df416

Commits on Jul 7, 2020

• Python: Autoformat everything using `qlformat`.

  Show description for f07a7bf
  tausbn

  committed
  f07a7bf

  Copy full SHA for f07a7bf

Commits on Jul 2, 2020

• Merge branch 'master' into python-fix-django-taint-sinks

  RasmusWL

  committed
  67be45f

  Copy full SHA for 67be45f

Commits on Jun 25, 2020

• Python: Move lxml.etree library stub to reduce clutter

  RasmusWL

  committed
  1e5eeb8

  Copy full SHA for 1e5eeb8

• Merge pull request #3500 from yoff/UnmatchableDollar

  Show description for b36c23e
  RasmusWL

  authored
  b36c23e

  Copy full SHA for b36c23e

• Merge pull request #3522 from porcupineyhairs/pythonXpath

  Show description for 0b36cd4
  RasmusWL

  authored
  0b36cd4

  Copy full SHA for 0b36cd4

Commits on Jun 24, 2020

• Merge branch 'master' of github.com:github/codeql into UnmatchableDollar

  Show description for f6c59ab
  yoff

  committed
  f6c59ab

  Copy full SHA for f6c59ab