Commits

Breadcrumbs

History for

on811815a

User selector

All users

All time

Commit History

Commits on Mar 18, 2019

• Python: Add query for insecure SSH host key policies in Paramiko.

  taus-semmle

  committed
  52278b2

  Copy full SHA for 52278b2

Commits on Mar 5, 2019

• Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

  markshannon

  committed
  38a5fb7

  Copy full SHA for 38a5fb7

Commits on Mar 4, 2019

• Python: Add missing `@kind` for `py/insecure-temporary-file`.

  taus-semmle

  committed
  63893fe

  Copy full SHA for 63893fe

Commits on Feb 26, 2019

• Fix interpolation.

  taus-semmle

  committed
  e47b391

  Copy full SHA for e47b391

• Make query alert refer to AST nodes rather than CFG nodes.

  taus-semmle

  committed
  7daaf77

  Copy full SHA for 7daaf77

• Change query description.

  taus-semmle

  committed
  504cb64

  Copy full SHA for 504cb64

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  committed
  8d774cd

  Copy full SHA for 8d774cd

Commits on Feb 20, 2019

• Python: Add 'attr' predicate as a synomnym for 'getAttribute' to help readability.

  markshannon

  committed
  98be27a

  Copy full SHA for 98be27a

• Python move various theXXX() predicates into the appropriate module.

  markshannon

  committed
  35fa5d8

  Copy full SHA for 35fa5d8

Commits on Jan 29, 2019

• Implement `getACall` suggestion.

  taus-semmle

  authored
  08fcb98

  Copy full SHA for 08fcb98

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  authored
  6f7c96d

  Copy full SHA for 6f7c96d

• Add support for `os.tempnam` and `os.tmpnam`.

  taus-semmle

  committed
  9a9d902

  Copy full SHA for 9a9d902

• Merge branch 'master' into python-incomplete-url-sanitize

  taus-semmle

  authored
  9adb19f

  Copy full SHA for 9adb19f

Commits on Jan 28, 2019

• Python: Check os.open as well as os.chmod for weak file permissions.

  markshannon

  committed
  6d553ae

  Copy full SHA for 6d553ae

Commits on Jan 25, 2019

• Make qhelp for 'Incomplete URL substring sanitization' consistent across languages.

  markshannon

  committed
  3850f87

  Copy full SHA for 3850f87

• Python: Minor tweaks to qldoc and release note.

  markshannon

  committed
  6ddbed7

  Copy full SHA for 6ddbed7

Commits on Jan 24, 2019

• Python: Two new queries for URL and hostname sanitization (CWE-020).

  markshannon

  committed
  88d8cb5

  Copy full SHA for 88d8cb5

Commits on Jan 22, 2019

• Python: Weak file permissions query.

  markshannon

  committed
  a3b5769

  Copy full SHA for a3b5769

Commits on Jan 17, 2019

• Add query and qhelp.

  taus-semmle

  committed
  7c3dc92

  Copy full SHA for 7c3dc92

Commits on Jan 7, 2019

• Add a few more insecure versions

  taus-semmle

  committed
  9ac5018

  Copy full SHA for 9ac5018

• Address documentation comments.

  taus-semmle

  committed
  1af503a

  Copy full SHA for 1af503a

• Support `from ssl import PROTOCOL_...`.

  taus-semmle

  committed
  46973f4

  Copy full SHA for 46973f4

• Add documentation.

  taus-semmle

  committed
  e8a41f7

  Copy full SHA for e8a41f7

• Pass pyOpenSSL method as parameter instead of keyword argument.

  taus-semmle

  committed
  dfe3fc6

  Copy full SHA for dfe3fc6

• Fix `insecure_version_name` comments.

  taus-semmle

  committed
  d604f5c

  Copy full SHA for d604f5c

• Add support for `ssl.SSLContext`.

  taus-semmle

  committed
  a893dca

  Copy full SHA for a893dca

• Python: Check for insecure versions of SSL and TLS.

  taus-semmle

  committed
  0a839f8

  Copy full SHA for 0a839f8

Commits on Nov 28, 2018

• Python fix up tags in qhelp.

  markshannon

  committed
  a345727

  Copy full SHA for a345727

• Python: Use consistent abbreviations in weak-crypto query message.

  markshannon

  committed
  b3eaa46

  Copy full SHA for b3eaa46

• Python: Tweak name of new query and add change note.

  markshannon

  committed
  4f0a666

  Copy full SHA for 4f0a666

• Python: Add qhelp for new query.

  markshannon

  committed
  3c4c8cf

  Copy full SHA for 3c4c8cf

• Python: Weak crypto query.

  markshannon

  committed
  1065ad0

  Copy full SHA for 1065ad0

• Python: clean up change notes and query help.

  markshannon

  committed
  21246dc

  Copy full SHA for 21246dc

• Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.

  markshannon

  committed
  eefb45c

  Copy full SHA for eefb45c

• Python: New query to check for use of jinja2 templates without auto-escaping.

  

  Mark Shannon

  authored and

  markshannon

  committed
  243280d

  Copy full SHA for 243280d