Commits

Breadcrumbs

History for

on8f8c064

User selector

All users

All time

Commit History

Commits on Feb 22, 2023

• Python: Attempt to fix import flow

  Show description for 97fefd2
  RasmusWL

  committed
  97fefd2

  Copy full SHA for 97fefd2

Commits on Feb 21, 2023

• Python: Allow import of refined variable

  Show description for 00eec69
  RasmusWL

  committed
  00eec69

  Copy full SHA for 00eec69

• Python: Add import test of `py/insecure-protocol`

  RasmusWL

  committed
  fb425b7

  Copy full SHA for fb425b7

Commits on Feb 16, 2023

• Python: Accept change to `WeakFilePermissions.expected`

  Show description for 9ed021a
  RasmusWL

  committed
  9ed021a

  Copy full SHA for 9ed021a

Commits on Feb 15, 2023

• fix various nits based on feedback

  erik-krogh

  committed
  7598549

  Copy full SHA for 7598549

Commits on Feb 8, 2023

• Merge branch 'main' into call-graph-code

  RasmusWL

  committed
  23144f5

  Copy full SHA for 23144f5

Commits on Feb 3, 2023

• adjust which folders are seen as exported to remove an FP

  erik-krogh

  committed
  cf094c2

  Copy full SHA for cf094c2

• remove FPs related to parameters that are meant to be commands

  erik-krogh

  committed
  ef44cb8

  Copy full SHA for ef44cb8

• assume shell=False for subprocess calls, fixes FPs in e.g. youtube-dl

  erik-krogh

  committed
  e9ebba3

  Copy full SHA for e9ebba3

• use more API-nodes to model subprocess.run (and friends)

  erik-krogh

  committed
  d228cf0

  Copy full SHA for d228cf0

• add failing test for indirectly setting the shell=true flag for subprocess.run

  erik-krogh

  committed
  bce83bf

  Copy full SHA for bce83bf

• add Fabric test, and add tracking of the shell flag in Fabric

  erik-krogh

  committed
  0a2c7d0

  Copy full SHA for 0a2c7d0

• add more tests

  erik-krogh

  committed
  6bbc4f4

  Copy full SHA for 6bbc4f4

• add minimal test for Array join as a sink, and learn that the order is flipped compared to JS. Thanks Copilot!

  erik-krogh

  committed
  33c506d

  Copy full SHA for 33c506d

• add test for f-strings as sink

  erik-krogh

  committed
  5bddfc0

  Copy full SHA for 5bddfc0

• add library inputs as a source, and get minimal test to work

  erik-krogh

  committed
  47a06d2

  Copy full SHA for 47a06d2

Commits on Feb 2, 2023

• add tracking of strings to compile-sites for poly-redos, in the style of Ruby

  erik-krogh

  committed
  6e712b2

  Copy full SHA for 6e712b2

• add failing test for not tracking strings to re.compile

  erik-krogh

  committed
  52959d7

  Copy full SHA for 52959d7

• Merge branch 'main' into call-graph-code

  RasmusWL

  committed
  db114bb

  Copy full SHA for db114bb

Commits on Feb 1, 2023

• Merge pull request #11833 from erik-krogh/trackPyReg

  Show description for 01f6862
  erik-krogh

  authored
  01f6862

  Copy full SHA for 01f6862

Commits on Jan 23, 2023

• Python: Fixup annotation for `CWE-022-PathInjection/pathlib_use.py`

  RasmusWL

  committed
  8032473

  Copy full SHA for 8032473

Commits on Jan 16, 2023

• Merge branch 'main' into call-graph-code

  RasmusWL

  committed
  61151d4

  Copy full SHA for 61151d4

Commits on Jan 12, 2023

• Merge pull request #11088 from yoff/python/inline-query-tests

  Show description for 006eaf3
  yoff

  authored
  006eaf3

  Copy full SHA for 006eaf3

Commits on Jan 6, 2023

• update expected output for DuplicateCharacterInSet

  erik-krogh

  committed
  538adb4

  Copy full SHA for 538adb4

• python: Allow optional `result=OK`

  Show description for 03bd6cb
  yoff

  committed
  03bd6cb

  Copy full SHA for 03bd6cb

• track string-constants to regular expression uses

  erik-krogh

  committed
  10308f5

  Copy full SHA for 10308f5

Commits on Jan 5, 2023

• python: align annotations with Ruby

  Show description for d42bb11
  yoff

  committed
  d42bb11

  Copy full SHA for d42bb11

Commits on Jan 3, 2023

• Merge branch 'main' into calumgrant/remove-lgtm

  calumgrant

  authored
  ad55706

  Copy full SHA for ad55706

Commits on Dec 21, 2022

• AlertSuppression: fix python test cases

  aibaars

  committed
  2f16d8d

  Copy full SHA for 2f16d8d

Commits on Dec 19, 2022

• AlertSuppression: add more tests

  aibaars

  committed
  0f31323

  Copy full SHA for 0f31323

• Python: Remove references to LGTM

  calumgrant

  committed
  a1d229e

  Copy full SHA for a1d229e

• AlertSuppression: add support for //codeql comments

  aibaars

  committed
  c9739b2

  Copy full SHA for c9739b2

• AlertSuppression: allow //lgtm comments to scope over the next line

  aibaars

  committed
  c176606

  Copy full SHA for c176606

• Python: move AlertSuppression.ql

  aibaars

  committed
  f68e18c

  Copy full SHA for f68e18c

• Python: use shared AlertSuppression.qll

  aibaars

  committed
  acb5d6e

  Copy full SHA for acb5d6e