Commits

Breadcrumbs

History for

on7949acc

User selector

All users

All time

Commit History

Commits on Apr 4, 2019

• Python: make sure all django and flask request sources conform to interface.

  markshannon

  committed
  f8c43ca

  Copy full SHA for f8c43ca

• Python: Use new taint-tracking query in unsafe deserialization query.

  markshannon

  committed
  61e6ae7

  Copy full SHA for 61e6ae7

• Python: Use new taint-tracking query in code-injection query.

  markshannon

  committed
  3c1a5bb

  Copy full SHA for 3c1a5bb

• Python: Use new taint-tracking query in reflected-xss query.

  markshannon

  committed
  64e8be6

  Copy full SHA for 64e8be6

• Python: Use new taint-tracking query in SQL-injection query.

  markshannon

  committed
  7fc5d69

  Copy full SHA for 7fc5d69

Commits on Mar 26, 2019

• Merge pull request #1142 from taus-semmle/python-use-new-moduleobject-api

  Show description for 058ae7b
  markshannon

  authored
  058ae7b

  Copy full SHA for 058ae7b

Commits on Mar 21, 2019

• Fix false positive and add test.

  taus-semmle

  committed
  5eb63ae

  Copy full SHA for 5eb63ae

• Use correct named argument for `ssl.SSLContext`.

  taus-semmle

  committed
  9cb35a8

  Copy full SHA for 9cb35a8

Commits on Mar 20, 2019

• Use `attr` instead of `getAttribute`.

  taus-semmle

  committed
  391e111

  Copy full SHA for 391e111

• Python: Use `ModuleObject::named` more consistently.

  taus-semmle

  committed
  f14f7b5

  Copy full SHA for f14f7b5

Commits on Mar 19, 2019

• Address review comments.

  taus-semmle

  committed
  c7c6c83

  Copy full SHA for c7c6c83

Commits on Mar 18, 2019

• Python: Add query for insecure SSH host key policies in Paramiko.

  taus-semmle

  committed
  52278b2

  Copy full SHA for 52278b2

Commits on Mar 5, 2019

• Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

  markshannon

  committed
  38a5fb7

  Copy full SHA for 38a5fb7

Commits on Mar 4, 2019

• Python: Add missing `@kind` for `py/insecure-temporary-file`.

  taus-semmle

  committed
  63893fe

  Copy full SHA for 63893fe

Commits on Feb 26, 2019

• Fix interpolation.

  taus-semmle

  committed
  e47b391

  Copy full SHA for e47b391

• Make query alert refer to AST nodes rather than CFG nodes.

  taus-semmle

  committed
  7daaf77

  Copy full SHA for 7daaf77

• Change query description.

  taus-semmle

  committed
  504cb64

  Copy full SHA for 504cb64

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  committed
  8d774cd

  Copy full SHA for 8d774cd

Commits on Feb 20, 2019

• Python: Add 'attr' predicate as a synomnym for 'getAttribute' to help readability.

  markshannon

  committed
  98be27a

  Copy full SHA for 98be27a

• Python move various theXXX() predicates into the appropriate module.

  markshannon

  committed
  35fa5d8

  Copy full SHA for 35fa5d8

Commits on Jan 29, 2019

• Implement `getACall` suggestion.

  taus-semmle

  authored
  08fcb98

  Copy full SHA for 08fcb98

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  authored
  6f7c96d

  Copy full SHA for 6f7c96d

• Add support for `os.tempnam` and `os.tmpnam`.

  taus-semmle

  committed
  9a9d902

  Copy full SHA for 9a9d902

• Merge branch 'master' into python-incomplete-url-sanitize

  taus-semmle

  authored
  9adb19f

  Copy full SHA for 9adb19f

Commits on Jan 28, 2019

• Python: Check os.open as well as os.chmod for weak file permissions.

  markshannon

  committed
  6d553ae

  Copy full SHA for 6d553ae

Commits on Jan 25, 2019

• Make qhelp for 'Incomplete URL substring sanitization' consistent across languages.

  markshannon

  committed
  3850f87

  Copy full SHA for 3850f87

• Python: Minor tweaks to qldoc and release note.

  markshannon

  committed
  6ddbed7

  Copy full SHA for 6ddbed7

Commits on Jan 24, 2019

• Python: Two new queries for URL and hostname sanitization (CWE-020).

  markshannon

  committed
  88d8cb5

  Copy full SHA for 88d8cb5

Commits on Jan 22, 2019

• Python: Weak file permissions query.

  markshannon

  committed
  a3b5769

  Copy full SHA for a3b5769

Commits on Jan 17, 2019

• Add query and qhelp.

  taus-semmle

  committed
  7c3dc92

  Copy full SHA for 7c3dc92

Commits on Jan 7, 2019

• Add a few more insecure versions

  taus-semmle

  committed
  9ac5018

  Copy full SHA for 9ac5018

• Address documentation comments.

  taus-semmle

  committed
  1af503a

  Copy full SHA for 1af503a

• Support `from ssl import PROTOCOL_...`.

  taus-semmle

  committed
  46973f4

  Copy full SHA for 46973f4

• Add documentation.

  taus-semmle

  committed
  e8a41f7

  Copy full SHA for e8a41f7

• Pass pyOpenSSL method as parameter instead of keyword argument.

  taus-semmle

  committed
  dfe3fc6

  Copy full SHA for dfe3fc6