Commits

Breadcrumbs

History for

on8c3349f

User selector

All users

All time

Commit History

Commits on Oct 28, 2021

• Python: Properly model `flask.send_from_directory`

  Show description for 8c3349f
  RasmusWL

  committed
  8c3349f

  Copy full SHA for 8c3349f

• Python: Add flask specific path-injection test

  RasmusWL

  committed
  6648a69

  Copy full SHA for 6648a69

Commits on Oct 14, 2021

• Merge pull request #6693 from yoff/python/promote-regex-injection

  Show description for 7cd5e68
  RasmusWL

  authored
  7cd5e68

  Copy full SHA for 7cd5e68

Commits on Oct 12, 2021

• Merge branch 'main' of github.com:github/codeql into python/promote-regex-injection

  yoff

  committed
  61008fd

  Copy full SHA for 61008fd

• Python: Update test expectation following rename

  yoff

  committed
  f34d1ee

  Copy full SHA for f34d1ee

Commits on Sep 21, 2021

• Python: Merge SQLAlchemy TextClause injection into `py/sql-injection`

  Show description for a83bb39
  RasmusWL

  committed
  a83bb39

  Copy full SHA for a83bb39

• Python: Fix .expected for new `subpaths` query predicate

  RasmusWL

  committed
  f8e6ba6

  Copy full SHA for f8e6ba6

• Merge branch 'main' into promote-sqlalchemy

  RasmusWL

  committed
  c7c8e2f

  Copy full SHA for c7c8e2f

Commits on Sep 14, 2021

• Python: Move query tests over

  yoff

  committed
  1c7982b

  Copy full SHA for 1c7982b

Commits on Sep 10, 2021

• ReDoS: fix unpaired surrogate test

  Show description for 38cc9be
  smowton

  committed
  38cc9be

  Copy full SHA for 38cc9be

Commits on Sep 7, 2021

• Dataflow: Update test expected outputs.

  aschackmull

  committed
  f30dad7

  Copy full SHA for f30dad7

Commits on Sep 2, 2021

• Python: Fix `.expected`

  Show description for 9f590db
  RasmusWL

  committed
  9f590db

  Copy full SHA for 9f590db

• Python: Add tests for `Flask-SQLAlchemy`

  RasmusWL

  committed
  f174489

  Copy full SHA for f174489

• Python: Add query to handle SQLAlchemy TextClause Injection

  Show description for c34d6d1
  RasmusWL

  committed
  c34d6d1

  Copy full SHA for c34d6d1

Commits on Aug 24, 2021

• Merge pull request #6323 from RasmusWL/sec-test-layout

  Show description for 2f5ed03
  yoff

  authored
  2f5ed03

  Copy full SHA for 2f5ed03

Commits on Aug 16, 2021

• Merge pull request #6288 from erik-krogh/emptyRedos

  Show description for 4695923
  erik-krogh

  authored
  4695923

  Copy full SHA for 4695923

Commits on Jul 22, 2021

• Python: Hotfix: Disable ReDoS queries

  tausbn

  authored
  e9a4114

  Copy full SHA for e9a4114

Commits on Jul 19, 2021

• Python: Fix test folder for InsecureProtocol

  RasmusWL

  committed
  5249591

  Copy full SHA for 5249591

• Python: Fix test folder for InsecureDefaultProtocol

  Show description for 5939128
  RasmusWL

  committed
  5939128

  Copy full SHA for 5939128

• Python: Restructure security tests to contain query name

  Show description for 77021ae
  RasmusWL

  committed
  77021ae

  Copy full SHA for 77021ae

• Python: Move `py/incomplete-hostname-regexp` tests to own folder

  RasmusWL

  committed
  da021fe

  Copy full SHA for da021fe

• Python: Move Jinja2WithoutEscaping tests to own folder

  RasmusWL

  committed
  7939a13

  Copy full SHA for 7939a13

Commits on Jul 15, 2021

• Merge branch 'main' into emptyRedos

  RasmusWL

  committed
  a07de3f

  Copy full SHA for a07de3f

• Python: Fix `py/polynomial-redos`

  RasmusWL

  committed
  a5834c4

  Copy full SHA for a5834c4

• Python: Add tests for `py/polynomial-redos`

  RasmusWL

  committed
  76caf43

  Copy full SHA for 76caf43

• Python: Move test for ReDoS

  RasmusWL

  committed
  1be0dc0

  Copy full SHA for 1be0dc0

• implement RegExpSubPattern.getOperand in the Python regexp implementation

  erik-krogh

  committed
  383b5f2

  Copy full SHA for 383b5f2

Commits on Jul 11, 2021

• enable unicode support in the Python ReDoS query

  erik-krogh

  committed
  440e4b9

  Copy full SHA for 440e4b9

Commits on Jun 30, 2021

• Merge pull request #6175 from yoff/python-port-ReDoS

  Show description for e4af146
  tausbn

  authored
  e4af146

  Copy full SHA for e4af146

• Python: Avoid multiple results for `toString`

  yoff

  committed
  651f8ab

  Copy full SHA for 651f8ab

• Python: update test expectations

  yoff

  committed
  09e71cf

  Copy full SHA for 09e71cf

Commits on Jun 28, 2021

• Python: Add some tests for exponential ReDoS

  Show description for 40ac91e
  yoff

  committed
  40ac91e

  Copy full SHA for 40ac91e

Commits on Jun 25, 2021

• Python: Port `py/clear-text-logging-sensitive-data`

  RasmusWL

  committed
  9573048

  Copy full SHA for 9573048

Commits on Jun 24, 2021

• Python: Port `py/clear-text-storage-sensitive-data`

  RasmusWL

  committed
  a9469b7

  Copy full SHA for a9469b7

Commits on Jun 23, 2021

• Python: Expand cleartext query tests

  RasmusWL

  committed
  e2facd0

  Copy full SHA for e2facd0