Commits

Breadcrumbs

History for

onc34fa84

User selector

All users

All time

Commit History

Commits on Jan 29, 2019

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  authored
  6f7c96d

  Copy full SHA for 6f7c96d

• Add support for `os.tempnam` and `os.tmpnam`.

  taus-semmle

  committed
  9a9d902

  Copy full SHA for 9a9d902

• Merge branch 'master' into python-incomplete-url-sanitize

  taus-semmle

  authored
  9adb19f

  Copy full SHA for 9adb19f

Commits on Jan 28, 2019

• Python: Check os.open as well as os.chmod for weak file permissions.

  markshannon

  committed
  6d553ae

  Copy full SHA for 6d553ae

Commits on Jan 25, 2019

• Make qhelp for 'Incomplete URL substring sanitization' consistent across languages.

  markshannon

  committed
  3850f87

  Copy full SHA for 3850f87

• Python: Minor tweaks to qldoc and release note.

  markshannon

  committed
  6ddbed7

  Copy full SHA for 6ddbed7

Commits on Jan 24, 2019

• Python: Two new queries for URL and hostname sanitization (CWE-020).

  markshannon

  committed
  88d8cb5

  Copy full SHA for 88d8cb5

Commits on Jan 22, 2019

• Python: Weak file permissions query.

  markshannon

  committed
  a3b5769

  Copy full SHA for a3b5769

Commits on Jan 17, 2019

• Add query and qhelp.

  taus-semmle

  committed
  7c3dc92

  Copy full SHA for 7c3dc92

Commits on Jan 7, 2019

• Add a few more insecure versions

  taus-semmle

  committed
  9ac5018

  Copy full SHA for 9ac5018

• Address documentation comments.

  taus-semmle

  committed
  1af503a

  Copy full SHA for 1af503a

• Support `from ssl import PROTOCOL_...`.

  taus-semmle

  committed
  46973f4

  Copy full SHA for 46973f4

• Add documentation.

  taus-semmle

  committed
  e8a41f7

  Copy full SHA for e8a41f7

• Pass pyOpenSSL method as parameter instead of keyword argument.

  taus-semmle

  committed
  dfe3fc6

  Copy full SHA for dfe3fc6

• Fix `insecure_version_name` comments.

  taus-semmle

  committed
  d604f5c

  Copy full SHA for d604f5c

• Add support for `ssl.SSLContext`.

  taus-semmle

  committed
  a893dca

  Copy full SHA for a893dca

• Python: Check for insecure versions of SSL and TLS.

  taus-semmle

  committed
  0a839f8

  Copy full SHA for 0a839f8

Commits on Nov 28, 2018

• Python fix up tags in qhelp.

  markshannon

  committed
  a345727

  Copy full SHA for a345727

• Python: Use consistent abbreviations in weak-crypto query message.

  markshannon

  committed
  b3eaa46

  Copy full SHA for b3eaa46

• Python: Tweak name of new query and add change note.

  markshannon

  committed
  4f0a666

  Copy full SHA for 4f0a666

• Python: Add qhelp for new query.

  markshannon

  committed
  3c4c8cf

  Copy full SHA for 3c4c8cf

• Python: Weak crypto query.

  markshannon

  committed
  1065ad0

  Copy full SHA for 1065ad0

• Python: clean up change notes and query help.

  markshannon

  committed
  21246dc

  Copy full SHA for 21246dc

• Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.

  markshannon

  committed
  eefb45c

  Copy full SHA for eefb45c

• Python: New query to check for use of jinja2 templates without auto-escaping.

  

  Mark Shannon

  authored and

  markshannon

  committed
  243280d

  Copy full SHA for 243280d

Commits on Nov 27, 2018

• Merge pull request #528 from taus-semmle/python-flask-debug

  Show description for 31ac33e
  markshannon

  authored
  31ac33e

  Copy full SHA for 31ac33e

• Change precision to `high`.

  taus-semmle

  committed
  7f94c25

  Copy full SHA for 7f94c25

• Python: Implement check for flask debug mode.

  taus-semmle

  committed
  a4da245

  Copy full SHA for a4da245

• Python: Correct case of query name and improve help.

  markshannon

  committed
  698957e

  Copy full SHA for 698957e

Commits on Nov 23, 2018

• Python: Account for other 'falsey' values in query.

  markshannon

  committed
  6588606

  Copy full SHA for 6588606

• Python: Add qhelp for new query.

  markshannon

  committed
  06e5bc8

  Copy full SHA for 06e5bc8

• Python: New query to test for requests without validation.

  markshannon

  committed
  45e864a

  Copy full SHA for 45e864a

• Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

  markshannon

  committed
  61bd868

  Copy full SHA for 61bd868

Commits on Nov 22, 2018

• Upgrade taint-tracking security queries to path-problem queries.

  

  Mark Shannon

  authored and

  markshannon

  committed
  722d89f

  Copy full SHA for 722d89f

Commits on Nov 19, 2018

• Python security queries. Choose a precision reflecting actual precision for Security queries.

  markshannon

  committed
  e930b43

  Copy full SHA for e930b43