Commits

Breadcrumbs

History for

onb2b0296

User selector

All users

All time

Commit History

Commits on Oct 23, 2019

• Python: Move pyramid tests from internal repo

  Show description for 2874c54
  RasmusWL

  committed
  2874c54

  Copy full SHA for 2874c54

Commits on Oct 3, 2019

• Add bind-socket-all-network-interfaces Python query (#2048)

  Show description for 3e6f8fb
  AlexTereshenkov

  authored
  3e6f8fb

  Copy full SHA for 3e6f8fb

Commits on Sep 26, 2019

• Python: Modernise bottle library

  RasmusWL

  committed
  12c4903

  Copy full SHA for 12c4903

Commits on Aug 30, 2019

• Python: Update CWE-312 queries to use new taint-tracking configuration.

  markshannon

  committed
  3f740d6

  Copy full SHA for 3f740d6

• Merge branch 'master' into python-cwe-312

  markshannon

  committed
  811815a

  Copy full SHA for 811815a

Commits on Aug 29, 2019

• Python taint-tracking: Remove warnings from test output.

  markshannon

  committed
  e590092

  Copy full SHA for e590092

• Python taint-tracking: Avoid ambiguous flows through calls. Fix up tests.

  markshannon

  committed
  d31e55f

  Copy full SHA for d31e55f

• Python taint-tracking: Fix up SQL injection query.

  markshannon

  committed
  78ce196

  Copy full SHA for 78ce196

• Python taint-tracking: Fix up handling of legacy (config-less) taint-tracking

  markshannon

  committed
  7c4a18e

  Copy full SHA for 7c4a18e

• Python: Fix up pi-node handling in taint-tracking.

  markshannon

  committed
  2d9d292

  Copy full SHA for 2d9d292

Commits on Aug 23, 2019

• Python: Fix tags and message for CWE-312 queries.

  markshannon

  committed
  8909c3d

  Copy full SHA for 8909c3d

Commits on Aug 22, 2019

• Python tests: Fix up tests for CWE-312 to not use external locations.

  markshannon

  committed
  4759044

  Copy full SHA for 4759044

• Python tests: Fix up CWE-327 tests to use new sensitive-data library.

  markshannon

  committed
  9df205b

  Copy full SHA for 9df205b

• Python: Add tests for clear-text storage and logging.

  markshannon

  committed
  8169383

  Copy full SHA for 8169383

Commits on Aug 16, 2019

• Python points-to: Add .getAstNode() method to TaintedNode for forward compatibility with upcoming taint-tracking enhancements.

  markshannon

  committed
  453ae19

  Copy full SHA for 453ae19

Commits on Aug 8, 2019

• Python taint-tracking: Remove 'parents' query from path-queries, as it unused by the tooling.

  markshannon

  committed
  6bd5158

  Copy full SHA for 6bd5158

Commits on Aug 1, 2019

• Python: Add missing function to flask test stub.

  markshannon

  committed
  fab2cb5

  Copy full SHA for fab2cb5

Commits on Jul 15, 2019

• Fix semantic merge conflict between #1470 and #1487.

  markshannon

  committed
  2c5b1c0

  Copy full SHA for 2c5b1c0

Commits on Jun 19, 2019

• Python: Tarslip query: Fix up sanitizers.

  markshannon

  committed
  39b7a69

  Copy full SHA for 39b7a69

• Python: Tarslip query; Add sink for members and sanitizers for tarinfo objects.

  markshannon

  committed
  6f15c84

  Copy full SHA for 6f15c84

• Python: Tarslip query; track info objects and handle sanitization.

  markshannon

  committed
  e14f7ef

  Copy full SHA for e14f7ef

• Python: Initial version and help of tar-slip (CWE-022) query.

  markshannon

  committed
  ea4e263

  Copy full SHA for ea4e263

Commits on Jun 18, 2019

• Python: Don't record taint past sinks.

  markshannon

  committed
  918bdec

  Copy full SHA for 918bdec

Commits on Apr 29, 2019

• Adjust a couple of query tests to work with latest points-to.

  markshannon

  committed
  65a30ab

  Copy full SHA for 65a30ab

Commits on Apr 26, 2019

• Python: Add library tests for django.

  markshannon

  committed
  90bbfd3

  Copy full SHA for 90bbfd3

• Update test to reflect new true positive.

  markshannon

  committed
  4a03fd0

  Copy full SHA for 4a03fd0

Commits on Apr 25, 2019

• Python: Fix false positive in 'Incomplete URL substring sanitization' query.

  markshannon

  committed
  2879944

  Copy full SHA for 2879944

Commits on Apr 4, 2019

• Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation

  Show description for 2ba1223
  markshannon

  authored
  2ba1223

  Copy full SHA for 2ba1223

Commits on Mar 21, 2019

• Fix false positive and add test.

  taus-semmle

  committed
  5eb63ae

  Copy full SHA for 5eb63ae

• Use correct named argument for `ssl.SSLContext`.

  taus-semmle

  committed
  9cb35a8

  Copy full SHA for 9cb35a8

Commits on Mar 19, 2019

• Address review comments.

  taus-semmle

  committed
  c7c6c83

  Copy full SHA for c7c6c83

Commits on Mar 18, 2019

• Python: Add query for insecure SSH host key policies in Paramiko.

  taus-semmle

  committed
  52278b2

  Copy full SHA for 52278b2

Commits on Mar 5, 2019

• Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

  markshannon

  committed
  38a5fb7

  Copy full SHA for 38a5fb7

Commits on Feb 28, 2019

• Python: CherryPy web framework support -- requests.

  markshannon

  committed
  6c82be8

  Copy full SHA for 6c82be8

• Merge pull request #979 from markshannon/python-falcon

  Show description for b8b4216
  taus-semmle

  authored
  b8b4216

  Copy full SHA for b8b4216