Commits

Breadcrumbs

History for

on90bbfd3

User selector

All users

All time

Commit History

Commits on Apr 26, 2019

• Python: Add library tests for django.

  markshannon

  committed
  90bbfd3

  Copy full SHA for 90bbfd3

• Update test to reflect new true positive.

  markshannon

  committed
  4a03fd0

  Copy full SHA for 4a03fd0

Commits on Apr 25, 2019

• Python: Fix false positive in 'Incomplete URL substring sanitization' query.

  markshannon

  committed
  2879944

  Copy full SHA for 2879944

Commits on Apr 4, 2019

• Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation

  Show description for 2ba1223
  markshannon

  authored
  2ba1223

  Copy full SHA for 2ba1223

Commits on Mar 21, 2019

• Fix false positive and add test.

  taus-semmle

  committed
  5eb63ae

  Copy full SHA for 5eb63ae

• Use correct named argument for `ssl.SSLContext`.

  taus-semmle

  committed
  9cb35a8

  Copy full SHA for 9cb35a8

Commits on Mar 19, 2019

• Address review comments.

  taus-semmle

  committed
  c7c6c83

  Copy full SHA for c7c6c83

Commits on Mar 18, 2019

• Python: Add query for insecure SSH host key policies in Paramiko.

  taus-semmle

  committed
  52278b2

  Copy full SHA for 52278b2

Commits on Mar 5, 2019

• Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

  markshannon

  committed
  38a5fb7

  Copy full SHA for 38a5fb7

Commits on Feb 28, 2019

• Python: CherryPy web framework support -- requests.

  markshannon

  committed
  6c82be8

  Copy full SHA for 6c82be8

• Merge pull request #979 from markshannon/python-falcon

  Show description for b8b4216
  taus-semmle

  authored
  b8b4216

  Copy full SHA for b8b4216

Commits on Feb 27, 2019

• Merge pull request #785 from taus-semmle/python-unsafe-use-of-mktemp

  Show description for f7d7b8e
  markshannon

  authored
  f7d7b8e

  Copy full SHA for f7d7b8e

• Python: Add test skeleton for falcon web framework.

  markshannon

  committed
  742c1d0

  Copy full SHA for 742c1d0

Commits on Feb 26, 2019

• Fix interpolation.

  taus-semmle

  committed
  e47b391

  Copy full SHA for e47b391

• Make query alert refer to AST nodes rather than CFG nodes.

  taus-semmle

  committed
  7daaf77

  Copy full SHA for 7daaf77

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  committed
  8d774cd

  Copy full SHA for 8d774cd

• Python: Basic support for TurboGears: requests and responses.

  markshannon

  committed
  26c5ebd

  Copy full SHA for 26c5ebd

Commits on Feb 12, 2019

• Python: Add redirects to bottle framework support.

  markshannon

  committed
  aab0a24

  Copy full SHA for aab0a24

• Python: Add support for bottle framework routing and requests.

  markshannon

  committed
  8d525e5

  Copy full SHA for 8d525e5

Commits on Jan 29, 2019

• Fix tests by stubbing relevant `os` functions.

  taus-semmle

  committed
  edd4468

  Copy full SHA for edd4468

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  authored
  6f7c96d

  Copy full SHA for 6f7c96d

• Add support for `os.tempnam` and `os.tmpnam`.

  taus-semmle

  committed
  9a9d902

  Copy full SHA for 9a9d902

• Merge branch 'master' into python-incomplete-url-sanitize

  taus-semmle

  authored
  9adb19f

  Copy full SHA for 9adb19f

Commits on Jan 28, 2019

• Python: Check os.open as well as os.chmod for weak file permissions.

  markshannon

  committed
  6d553ae

  Copy full SHA for 6d553ae

Commits on Jan 24, 2019

• Python: Two new queries for URL and hostname sanitization (CWE-020).

  markshannon

  committed
  88d8cb5

  Copy full SHA for 88d8cb5

Commits on Jan 22, 2019

• Python: Weak file permissions query.

  markshannon

  committed
  a3b5769

  Copy full SHA for a3b5769

Commits on Jan 17, 2019

• Add tests.

  taus-semmle

  committed
  ad429f5

  Copy full SHA for ad429f5

Commits on Jan 16, 2019

• Python: Support the `dill` pickling library.

  taus-semmle

  committed
  e8c092a

  Copy full SHA for e8c092a

Commits on Jan 7, 2019

• Support `from ssl import PROTOCOL_...`.

  taus-semmle

  committed
  46973f4

  Copy full SHA for 46973f4

• Pass pyOpenSSL method as parameter instead of keyword argument.

  taus-semmle

  committed
  dfe3fc6

  Copy full SHA for dfe3fc6

• Add support for `ssl.SSLContext`.

  taus-semmle

  committed
  a893dca

  Copy full SHA for a893dca

• Python: Check for insecure versions of SSL and TLS.

  taus-semmle

  committed
  0a839f8

  Copy full SHA for 0a839f8

Commits on Nov 28, 2018

• Python: Use consistent abbreviations in weak-crypto query message.

  markshannon

  committed
  b3eaa46

  Copy full SHA for b3eaa46

• Python: Weak crypto query.

  markshannon

  committed
  1065ad0

  Copy full SHA for 1065ad0

• Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.

  markshannon

  committed
  eefb45c

  Copy full SHA for eefb45c