Commits

Breadcrumbs

History for

onba7cdec

User selector

All users

All time

Commit History

Commits on Dec 7, 2020

• Python: Add command injection regex restricted FP

  RasmusWL

  committed
  5aa2c2f

  Copy full SHA for 5aa2c2f

• Python: Add example of bad command injection sanitizer

  RasmusWL

  committed
  32b547b

  Copy full SHA for 32b547b

• Python: Adjust whitespace in command injection test

  RasmusWL

  committed
  8444654

  Copy full SHA for 8444654

Commits on Dec 3, 2020

• Python: Add examples of Path Injection FPs seen

  Show description for a9ce067
  RasmusWL

  committed
  a9ce067

  Copy full SHA for a9ce067

• Python: Model abspath and realpath (for Path Injection)

  RasmusWL

  committed
  e8f6331

  Copy full SHA for e8f6331

• Python: Add Path Injection tests for realpath and abspath

  Show description for bd5cf80
  RasmusWL

  committed
  bd5cf80

  Copy full SHA for bd5cf80

• Python: Rewrite path injection tests

  Show description for 4d9f24a
  RasmusWL

  committed
  4d9f24a

  Copy full SHA for 4d9f24a

Commits on Nov 30, 2020

• Python: Fix untrusted data to external API example

  Show description for 4ab3fff
  RasmusWL

  committed
  4ab3fff

  Copy full SHA for 4ab3fff

Commits on Nov 26, 2020

• Python: Untrusted data used in external APIs

  Show description for 9e4910f
  RasmusWL

  committed
  9e4910f

  Copy full SHA for 9e4910f

Commits on Nov 19, 2020

• Python: Add example of Code Injection FP

  RasmusWL

  committed
  4c7c940

  Copy full SHA for 4c7c940

Commits on Nov 10, 2020

• Python: update test expectations

  Show description for 0710963
  yoff

  committed
  0710963

  Copy full SHA for 0710963

Commits on Nov 2, 2020

• Python: Fixup CWE-022 tests

  Show description for b620b9b
  tausbn

  committed
  b620b9b

  Copy full SHA for b620b9b

• Python: Fixup CWE-079 tests

  tausbn

  committed
  af7626a

  Copy full SHA for af7626a

• Python: Fixup CWE-094 tests

  tausbn

  committed
  57b5109

  Copy full SHA for 57b5109

• Python: Fixup CWE-089 tests

  tausbn

  committed
  ebb5934

  Copy full SHA for ebb5934

• Python: Fixup CWE-078 tests.

  tausbn

  committed
  7a395bf

  Copy full SHA for 7a395bf

• Python: Fixup CWE-502 tests.

  tausbn

  committed
  52dc905

  Copy full SHA for 52dc905

Commits on Sep 30, 2020

• Python: Fix command injection example code

  Show description for 4adc26e
  RasmusWL

  committed
  4adc26e

  Copy full SHA for 4adc26e

Commits on Jul 21, 2020

• Python : Add query to detect Server Side Template Injection

  

  Porcupiney Hairs

  committed
  49df416

  Copy full SHA for 49df416

Commits on Jul 2, 2020

• Merge branch 'master' into python-fix-django-taint-sinks

  RasmusWL

  committed
  67be45f

  Copy full SHA for 67be45f

Commits on Jun 25, 2020

• Python: Move lxml.etree library stub to reduce clutter

  RasmusWL

  committed
  1e5eeb8

  Copy full SHA for 1e5eeb8

• Merge pull request #3522 from porcupineyhairs/pythonXpath

  Show description for 0b36cd4
  RasmusWL

  authored
  0b36cd4

  Copy full SHA for 0b36cd4

Commits on Jun 21, 2020

• add support for libxml2

  

  Porcupiney Hairs

  committed
  a519132

  Copy full SHA for a519132

Commits on Jun 19, 2020

• Python: Get rid of deprecated terms in code and `.qhelp`.

  tausbn

  committed
  01fb1e3

  Copy full SHA for 01fb1e3

Commits on Jun 15, 2020

• Python: Don't treat re.escape(...) as a regex

  Show description for c0043eb
  RasmusWL

  committed
  c0043eb

  Copy full SHA for c0043eb

• Python: Add tests for re.escape FP

  RasmusWL

  committed
  7601bd4

  Copy full SHA for 7601bd4

Commits on May 27, 2020

• Python : Add Xpath injection query

  Show description for 8c5a971
  

  Porcupiney Hairs

  committed
  8c5a971

  Copy full SHA for 8c5a971

Commits on May 26, 2020

• Python: Add test for fabric.api.execute

  RasmusWL

  committed
  e04d1ff

  Copy full SHA for e04d1ff

Commits on May 25, 2020

• Python: Use proper import for semmle.python.dataflow.TaintTracking

  Show description for f602f3e
  RasmusWL

  committed
  f602f3e

  Copy full SHA for f602f3e

Commits on May 18, 2020

• Python: Reduce FPs in Django due to bad XSS taint-sinks

  Show description for 3774310
  RasmusWL

  committed
  3774310

  Copy full SHA for 3774310

• Python: Add more tests of django responses

  Show description for 72ea4ff
  RasmusWL

  committed
  72ea4ff

  Copy full SHA for 72ea4ff

Commits on Mar 30, 2020

• Python: Autoformat all `.ql` files.

  tausbn

  committed
  87a9f51

  Copy full SHA for 87a9f51

Commits on Mar 25, 2020

• Merge pull request #3111 from RasmusWL/python-fabric-command-injection

  Show description for ac7c74d
  semmle-qlci

  authored
  ac7c74d

  Copy full SHA for ac7c74d

Commits on Mar 24, 2020

• Merge pull request #2888 from RasmusWL/python-tarslip-sanitizer

  Show description for fe00d1c
  tausbn

  authored
  fe00d1c

  Copy full SHA for fe00d1c

Commits on Mar 23, 2020

• Python: Model fabric v1.x command injection sinks

  RasmusWL

  committed
  b567205

  Copy full SHA for b567205