Commits

Breadcrumbs

History for

on78ce196

User selector

All users

All time

Commit History

Commits on Feb 8, 2019

• Merge pull request #836 from markshannon/python-mutating-descriptor

  Show description for 90eccbd
  taus-semmle

  authored
  90eccbd

  Copy full SHA for 90eccbd

Commits on Feb 4, 2019

• Python: Make "Modification of parameter with default" flow-sensitive.

  taus-semmle

  committed
  895b237

  Copy full SHA for 895b237

Commits on Jan 31, 2019

• Python: Points-to; let values with no boolean constant value flow through pi-nodes.

  markshannon

  committed
  24d678b

  Copy full SHA for 24d678b

Commits on Jan 29, 2019

• Fix tests by stubbing relevant `os` functions.

  taus-semmle

  committed
  edd4468

  Copy full SHA for edd4468

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  authored
  6f7c96d

  Copy full SHA for 6f7c96d

• Add support for `os.tempnam` and `os.tmpnam`.

  taus-semmle

  committed
  9a9d902

  Copy full SHA for 9a9d902

• Merge branch 'master' into python-mutating-descriptor

  markshannon

  authored
  7fe3c3d

  Copy full SHA for 7fe3c3d

• Merge branch 'master' into python-incomplete-url-sanitize

  taus-semmle

  authored
  9adb19f

  Copy full SHA for 9adb19f

Commits on Jan 28, 2019

• Merge pull request #807 from markshannon/python-insecure-file-permission

  Show description for 0f5b21e
  taus-semmle

  authored
  0f5b21e

  Copy full SHA for 0f5b21e

• Python: Check os.open as well as os.chmod for weak file permissions.

  markshannon

  committed
  6d553ae

  Copy full SHA for 6d553ae

• Python: Fix up mutating-descriptor query to only flag mutation when they occur during descriptor protocol.

  markshannon

  committed
  3992346

  Copy full SHA for 3992346

• Python: add failing test for comparison using 'is' and enum members.

  markshannon

  committed
  5da209f

  Copy full SHA for 5da209f

Commits on Jan 25, 2019

• Merge pull request #796 from markshannon/python-import-used-in-doctest

  Show description for fc00e0a
  taus-semmle

  authored
  fc00e0a

  Copy full SHA for fc00e0a

Commits on Jan 24, 2019

• Python: Two new queries for URL and hostname sanitization (CWE-020).

  markshannon

  committed
  88d8cb5

  Copy full SHA for 88d8cb5

Commits on Jan 22, 2019

• Python: Fix 'unused import' to no longer give alerts for imported modules used in typehints.

  markshannon

  committed
  547b3eb

  Copy full SHA for 547b3eb

• Python: Weak file permissions query.

  markshannon

  committed
  a3b5769

  Copy full SHA for a3b5769

Commits on Jan 18, 2019

• Merge pull request #781 from kevinbackhouse/HashedButNoHash

  Show description for 261cd36
  markshannon

  authored
  261cd36

  Copy full SHA for 261cd36

• Python: Fix 'unused import' to no longer give alerts for imported modules used in doctests.

  markshannon

  committed
  9f93bf8

  Copy full SHA for 9f93bf8

Commits on Jan 17, 2019

• Add regression test for false positive result.

  kevinbackhouse

  committed
  5fc056b

  Copy full SHA for 5fc056b

• Add tests.

  taus-semmle

  committed
  ad429f5

  Copy full SHA for ad429f5

Commits on Jan 16, 2019

• Python: Support the `dill` pickling library.

  taus-semmle

  committed
  e8c092a

  Copy full SHA for e8c092a

• Merge pull request #564 from taus-semmle/python-insecure-ssl-version

  Show description for 65337ef
  markshannon

  authored
  65337ef

  Copy full SHA for 65337ef

Commits on Jan 14, 2019

• Python tests: Increase import depth to ensure sre_constants module is imported.

  markshannon

  committed
  c9a929f

  Copy full SHA for c9a929f

Commits on Jan 7, 2019

• Support `from ssl import PROTOCOL_...`.

  taus-semmle

  committed
  46973f4

  Copy full SHA for 46973f4

• Pass pyOpenSSL method as parameter instead of keyword argument.

  taus-semmle

  committed
  dfe3fc6

  Copy full SHA for dfe3fc6

• Add support for `ssl.SSLContext`.

  taus-semmle

  committed
  a893dca

  Copy full SHA for a893dca

• Python: Check for insecure versions of SSL and TLS.

  taus-semmle

  committed
  0a839f8

  Copy full SHA for 0a839f8

Commits on Dec 3, 2018

• Python: Fix off-by-one error in regex parsing.

  markshannon

  committed
  a5b79e9

  Copy full SHA for a5b79e9

Commits on Nov 28, 2018

• Python: Use consistent abbreviations in weak-crypto query message.

  markshannon

  committed
  b3eaa46

  Copy full SHA for b3eaa46

• Python: Weak crypto query.

  markshannon

  committed
  1065ad0

  Copy full SHA for 1065ad0

• Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.

  markshannon

  committed
  eefb45c

  Copy full SHA for eefb45c

• Python: Add missing test stub.

  markshannon

  committed
  1080525

  Copy full SHA for 1080525

• Python: New query to check for use of jinja2 templates without auto-escaping.

  

  Mark Shannon

  authored and

  markshannon

  committed
  243280d

  Copy full SHA for 243280d

Commits on Nov 27, 2018

• Merge pull request #528 from taus-semmle/python-flask-debug

  Show description for 31ac33e
  markshannon

  authored
  31ac33e

  Copy full SHA for 31ac33e

• Merge pull request #530 from markshannon/python-no-cert-validation

  Show description for 2b340b4
  taus-semmle

  authored
  2b340b4

  Copy full SHA for 2b340b4