Commits

Breadcrumbs

History for

on9e4910f

User selector

All users

All time

Commit History

Commits on Nov 26, 2020

• Python: Untrusted data used in external APIs

  Show description for 9e4910f
  RasmusWL

  committed
  9e4910f

  Copy full SHA for 9e4910f

Commits on Nov 10, 2020

• Python: update test expectations

  Show description for 0710963
  yoff

  committed
  0710963

  Copy full SHA for 0710963

Commits on Nov 2, 2020

• Python: Fixup CWE-022 tests

  Show description for b620b9b
  tausbn

  committed
  b620b9b

  Copy full SHA for b620b9b

• Python: Fixup CWE-079 tests

  tausbn

  committed
  af7626a

  Copy full SHA for af7626a

• Python: Fixup CWE-094 tests

  tausbn

  committed
  57b5109

  Copy full SHA for 57b5109

• Python: Fixup CWE-089 tests

  tausbn

  committed
  ebb5934

  Copy full SHA for ebb5934

• Python: Fixup CWE-078 tests.

  tausbn

  committed
  7a395bf

  Copy full SHA for 7a395bf

• Python: Fixup CWE-502 tests.

  tausbn

  committed
  52dc905

  Copy full SHA for 52dc905

Commits on Sep 30, 2020

• Python: Fix command injection example code

  Show description for 4adc26e
  RasmusWL

  committed
  4adc26e

  Copy full SHA for 4adc26e

Commits on Jul 21, 2020

• Python : Add query to detect Server Side Template Injection

  

  Porcupiney Hairs

  committed
  49df416

  Copy full SHA for 49df416

Commits on Jul 2, 2020

• Merge branch 'master' into python-fix-django-taint-sinks

  RasmusWL

  committed
  67be45f

  Copy full SHA for 67be45f

Commits on Jun 25, 2020

• Python: Move lxml.etree library stub to reduce clutter

  RasmusWL

  committed
  1e5eeb8

  Copy full SHA for 1e5eeb8

• Merge pull request #3522 from porcupineyhairs/pythonXpath

  Show description for 0b36cd4
  RasmusWL

  authored
  0b36cd4

  Copy full SHA for 0b36cd4

Commits on Jun 21, 2020

• add support for libxml2

  

  Porcupiney Hairs

  committed
  a519132

  Copy full SHA for a519132

Commits on Jun 19, 2020

• Python: Get rid of deprecated terms in code and `.qhelp`.

  tausbn

  committed
  01fb1e3

  Copy full SHA for 01fb1e3

Commits on Jun 15, 2020

• Python: Don't treat re.escape(...) as a regex

  Show description for c0043eb
  RasmusWL

  committed
  c0043eb

  Copy full SHA for c0043eb

• Python: Add tests for re.escape FP

  RasmusWL

  committed
  7601bd4

  Copy full SHA for 7601bd4

Commits on May 27, 2020

• Python : Add Xpath injection query

  Show description for 8c5a971
  

  Porcupiney Hairs

  committed
  8c5a971

  Copy full SHA for 8c5a971

Commits on May 26, 2020

• Python: Add test for fabric.api.execute

  RasmusWL

  committed
  e04d1ff

  Copy full SHA for e04d1ff

Commits on May 25, 2020

• Python: Use proper import for semmle.python.dataflow.TaintTracking

  Show description for f602f3e
  RasmusWL

  committed
  f602f3e

  Copy full SHA for f602f3e

Commits on May 18, 2020

• Python: Reduce FPs in Django due to bad XSS taint-sinks

  Show description for 3774310
  RasmusWL

  committed
  3774310

  Copy full SHA for 3774310

• Python: Add more tests of django responses

  Show description for 72ea4ff
  RasmusWL

  committed
  72ea4ff

  Copy full SHA for 72ea4ff

Commits on Mar 30, 2020

• Python: Autoformat all `.ql` files.

  tausbn

  committed
  87a9f51

  Copy full SHA for 87a9f51

Commits on Mar 25, 2020

• Merge pull request #3111 from RasmusWL/python-fabric-command-injection

  Show description for ac7c74d
  semmle-qlci

  authored
  ac7c74d

  Copy full SHA for ac7c74d

Commits on Mar 24, 2020

• Merge pull request #2888 from RasmusWL/python-tarslip-sanitizer

  Show description for fe00d1c
  tausbn

  authored
  fe00d1c

  Copy full SHA for fe00d1c

Commits on Mar 23, 2020

• Python: Model fabric v1.x command injection sinks

  RasmusWL

  committed
  b567205

  Copy full SHA for b567205

• Python: Model fabric/invoke command injection sinks

  RasmusWL

  committed
  a57eada

  Copy full SHA for a57eada

• Python: TarSlip sanitizer: explain tests with `not`

  Show description for dcfc9a8
  RasmusWL

  committed
  dcfc9a8

  Copy full SHA for dcfc9a8

Commits on Mar 11, 2020

• Merge branch 'master' into python-support-django2

  RasmusWL

  committed
  2da1503

  Copy full SHA for 2da1503

Commits on Feb 25, 2020

• Python: Remove `--optimize: true` from options files

  Show description for f10a86d
  RasmusWL

  committed
  f10a86d

  Copy full SHA for f10a86d

Commits on Feb 20, 2020

• Python: TarSlip sanitizer: handle not

  RasmusWL

  committed
  1029f04

  Copy full SHA for 1029f04

• Python: TarSlip sanitizer: only clear taint on false edge

  Show description for 3c317ed
  RasmusWL

  committed
  3c317ed

  Copy full SHA for 3c317ed

• Python: Add more tarslip examples

  RasmusWL

  committed
  2d637e1

  Copy full SHA for 2d637e1

Commits on Feb 18, 2020

• Python: Add support for Django 2.x and 3.x

  Show description for 5a0babe
  RasmusWL

  committed
  5a0babe

  Copy full SHA for 5a0babe

Commits on Feb 17, 2020

• Python: Add HttpRedirectSinks test for django

  RasmusWL

  committed
  362e7ae

  Copy full SHA for 362e7ae