Commits

Breadcrumbs

History for

on7949acc

User selector

All users

All time

Commit History

Commits on Jan 23, 2020

• Merge pull request #2664 from RasmusWL/python-fix-redirect-example

  Show description for 618a35b
  tausbn

  authored
  618a35b

  Copy full SHA for 618a35b

Commits on Jan 22, 2020

• Python: Autoformat

  RasmusWL

  committed
  7d9f1f0

  Copy full SHA for 7d9f1f0

• Python: Make py/weak-cryptographic-algorithm a path-problem

  Show description for 12bb055
  RasmusWL

  committed
  12bb055

  Copy full SHA for 12bb055

• Python: Make py/hardcoded-credentials a path-problem

  Show description for c5091f1
  RasmusWL

  committed
  c5091f1

  Copy full SHA for c5091f1

Commits on Jan 21, 2020

• Python: Remove unused variable in example for py/url-redirection

  RasmusWL

  committed
  422658b

  Copy full SHA for 422658b

Commits on Nov 26, 2019

• Python: Use `import python` consistently in all queries.

  taus-semmle

  committed
  118275e

  Copy full SHA for 118275e

Commits on Nov 11, 2019

• Python: Modernise flask library

  RasmusWL

  committed
  a9d43a2

  Copy full SHA for a9d43a2

Commits on Nov 7, 2019

• Update links to OWASP cheat sheet

  

  Sauyon Lee

  committed
  0040c9f

  Copy full SHA for 0040c9f

Commits on Oct 29, 2019

• Python: Don't quote %s in django example

  Show description for 4713183
  RasmusWL

  committed
  4713183

  Copy full SHA for 4713183

Commits on Oct 3, 2019

• Add bind-socket-all-network-interfaces Python query (#2048)

  Show description for 3e6f8fb
  AlexTereshenkov

  authored
  3e6f8fb

  Copy full SHA for 3e6f8fb

Commits on Aug 30, 2019

• Python: Update CWE-312 queries to use new taint-tracking configuration.

  markshannon

  committed
  3f740d6

  Copy full SHA for 3f740d6

• Merge branch 'master' into python-cwe-312

  markshannon

  committed
  811815a

  Copy full SHA for 811815a

Commits on Aug 29, 2019

• Python: Reorganise code a bit to minimize diff for PR.

  markshannon

  committed
  91aefab

  Copy full SHA for 91aefab

• Python taint-tracking: Avoid ambiguous flows through calls. Fix up tests.

  markshannon

  committed
  d31e55f

  Copy full SHA for d31e55f

• Python taint-tracking: Fix up SQL injection query.

  markshannon

  committed
  78ce196

  Copy full SHA for 78ce196

• Python: Fix up pi-node handling in taint-tracking.

  markshannon

  committed
  2d9d292

  Copy full SHA for 2d9d292

Commits on Aug 23, 2019

• Python: Fix tags and message for CWE-312 queries.

  markshannon

  committed
  8909c3d

  Copy full SHA for 8909c3d

Commits on Aug 22, 2019

• Add missing html tag

  markshannon

  committed
  81c65cd

  Copy full SHA for 81c65cd

• Python add new queries for clear-text logging and storage.

  markshannon

  committed
  15bb8b5

  Copy full SHA for 15bb8b5

Commits on Jul 26, 2019

• Python: Update all remaining taint-tracking queries to use configurations.

  markshannon

  committed
  3e5fddd

  Copy full SHA for 3e5fddd

Commits on Jun 19, 2019

• Python: Tarslip query: Fix up sanitizers.

  markshannon

  committed
  39b7a69

  Copy full SHA for 39b7a69

• Python: Fix typos in qhelp file.

  markshannon

  committed
  a15a892

  Copy full SHA for a15a892

• Python: Tarslip query; Add sink for members and sanitizers for tarinfo objects.

  markshannon

  committed
  6f15c84

  Copy full SHA for 6f15c84

• Python: Tarslip query; track info objects and handle sanitization.

  markshannon

  committed
  e14f7ef

  Copy full SHA for e14f7ef

• Python: Initial version and help of tar-slip (CWE-022) query.

  markshannon

  committed
  ea4e263

  Copy full SHA for ea4e263

Commits on Jun 3, 2019

• Python: Reduce the number of strings and ints identified and possible hard-coded credentials.

  markshannon

  committed
  8d4a8a6

  Copy full SHA for 8d4a8a6

Commits on Apr 25, 2019

• Python: Fix false positive in 'Incomplete URL substring sanitization' query.

  markshannon

  committed
  2879944

  Copy full SHA for 2879944

Commits on Apr 9, 2019

• Merge pull request #1203 from markshannon/python-taint-tracking-configuration-2

  Show description for adf8cdc
  taus-semmle

  authored
  adf8cdc

  Copy full SHA for adf8cdc

Commits on Apr 8, 2019

• Fix typo.

  markshannon

  committed
  52b3f77

  Copy full SHA for 52b3f77

Commits on Apr 4, 2019

• Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation

  Show description for 2ba1223
  markshannon

  authored
  2ba1223

  Copy full SHA for 2ba1223

• Fix CWE tag for Code injection query.

  markshannon

  committed
  c2e814a

  Copy full SHA for c2e814a

• Python change 'SimpleHttpResponseTaintSink' to 'HttpResponseTaintSink'.

  markshannon

  committed
  3bcd445

  Copy full SHA for 3bcd445

• Python: make sure unsafe deserialization query is using correct sources and that pickle is included in sinks.

  markshannon

  committed
  8b01bac

  Copy full SHA for 8b01bac

• Python: make sure code injection query is using correct sources.

  markshannon

  committed
  bc19769

  Copy full SHA for bc19769

• Python revert .getNode() to .getSink()/.getSource() to keep expected test output the same.

  markshannon

  committed
  35e82dc

  Copy full SHA for 35e82dc