Commits

Breadcrumbs

History for

on877bfa2

User selector

All users

All time

Commit History

Commits on Apr 24, 2024

• Update instances of experimental concept to the main one, and anotate missing experimental test results.

  joefarebrother

  committed
  cf8db4e

  Copy full SHA for cf8db4e

• Add documentation

  joefarebrother

  committed
  daa31b5

  Copy full SHA for daa31b5

• Fix qldoc + remove deprecation from experimental concepts (as they are still used in another experimental query)

  joefarebrother

  committed
  8636a50

  Copy full SHA for 8636a50

• Implemented sinks for bulk header updates, and added corresponding tests.

  joefarebrother

  committed
  a88ad62

  Copy full SHA for a88ad62

• Add to header write concept a specification of whether the name or value arg allows newlines.

  Show description for 68d9091
  joefarebrother

  committed
  68d9091

  Copy full SHA for 68d9091

• Move headers injection query and concept from experimental to main

  joefarebrother

  committed
  6021d92

  Copy full SHA for 6021d92

Commits on Apr 22, 2024

• Python: Autoformat everything

  Show description for b484aee
  tausbn

  committed
  b484aee

  Copy full SHA for b484aee

• Python: Change all remaining occurrences of `StrConst`

  Show description for 1c68c98
  tausbn

  committed
  1c68c98

  Copy full SHA for 1c68c98

Commits on Mar 15, 2024

• use of a single var "op" of type Cmpop

  

  Sim4n6

  authored and

  yoff

  committed
  26a16b7

  Copy full SHA for 26a16b7

• Fix p tag in UnicodeDoS.qhelp

  

  Sim4n6

  authored and

  yoff

  committed
  a717bf1

  Copy full SHA for a717bf1

• Fix UnicodeDoS vulnerability in CWE-770 code

  

  Sim4n6

  authored and

  yoff

  committed
  af19a03

  Copy full SHA for af19a03

• Fix UnicodeDoS vulnerability in CWE-770

  

  Sim4n6

  authored and

  yoff

  committed
  085d803

  Copy full SHA for 085d803

• Update request parameter name in good_1() function

  

  Sim4n6

  authored and

  yoff

  committed
  31dc542

  Copy full SHA for 31dc542

• Refactor Unicode normalization code

  

  Sim4n6

  authored and

  yoff

  committed
  70ebc58

  Copy full SHA for 70ebc58

• Update python/ql/src/experimental/Security/CWE-770/UnicodeDoS.ql

  Show description for 658b88e
  

  Sim4n6

  and

  yoff

  committed
  658b88e

  Copy full SHA for 658b88e

• Add some comments and docs

  

  Sim4n6

  authored and

  yoff

  committed
  1f767b8

  Copy full SHA for 1f767b8

• Add UnicodeDoS sink for werkzeug secure_filename

  

  Sim4n6

  authored and

  yoff

  committed
  5cc9170

  Copy full SHA for 5cc9170

• Add Unicode DoS (CWE-770)

  

  Sim4n6

  authored and

  yoff

  committed
  3424650

  Copy full SHA for 3424650

Commits on Feb 14, 2024

• Fix QLDoc issues

  am0o0

  committed
  09d8a75

  Copy full SHA for 09d8a75

• Python: Fix test exclusion for stdlib Python 3.12

  RasmusWL

  committed
  eb401a2

  Copy full SHA for eb401a2

• Python: Change name/id to `Decompression Bomb`

  Show description for e5bd633
  RasmusWL

  committed
  e5bd633

  Copy full SHA for e5bd633

• Python: Use dataflow instead of taint-tracking

  RasmusWL

  committed
  69c8ef9

  Copy full SHA for 69c8ef9

• Python: Delete duplicated file

  RasmusWL

  committed
  ba7dd38

  Copy full SHA for ba7dd38

• Python: Remove spurious results in stdlib

  RasmusWL

  committed
  9ae3ea8

  Copy full SHA for 9ae3ea8

• Python: Use helper predicate

  Show description for d8fd457
  RasmusWL

  committed
  d8fd457

  Copy full SHA for d8fd457

• Python: Use `Unit` class

  RasmusWL

  committed
  e7772f1

  Copy full SHA for e7772f1

• Merge branch 'main' into amammad-python-bombs

  RasmusWL

  committed
  9399258

  Copy full SHA for 9399258

Commits on Jan 22, 2024

• delete outdated deprecations

  erik-krogh

  committed
  8be7ead

  Copy full SHA for 8be7ead

Commits on Dec 14, 2023

• Python: Remove references to FlowStateString.

  aschackmull

  committed
  8ef4821

  Copy full SHA for 8ef4821

Commits on Dec 7, 2023

• added inline tests

  am0o0

  committed
  5795c72

  Copy full SHA for 5795c72

• Merge branch 'main' into amammad-python-bombs

  am0o0

  committed
  6ebdae3

  Copy full SHA for 6ebdae3

• fix some qldocs, change Sink extenstion model, deduct some not necessarily checks :)

  am0o0

  committed
  2d0067d

  Copy full SHA for 2d0067d

Commits on Nov 16, 2023

• Remove @precision values, correct missing tags

  ctcampbell

  committed
  114b694

  Copy full SHA for 114b694

Commits on Oct 9, 2023

• clean up unused vars,fix tests

  am0o0

  committed
  4283bb7

  Copy full SHA for 4283bb7

• move library file to experimental lib directory

  am0o0

  committed
  9d86e79

  Copy full SHA for 9d86e79