Commits

Breadcrumbs

History for

one52dca0

User selector

All users

All time

Commit History

Commits on Feb 8, 2022

• python: move tests

  yoff

  committed
  e52dca0

  Copy full SHA for e52dca0

Commits on Feb 1, 2022

• Merge pull request #7687 from yoff/python/PathInjection-FlowState

  Show description for f7a0b17
  RasmusWL

  authored
  f7a0b17

  Copy full SHA for f7a0b17

Commits on Jan 31, 2022

• python: deprecation

  Show description for 0c3bce1
  yoff

  committed
  0c3bce1

  Copy full SHA for 0c3bce1

Commits on Jan 21, 2022

• python: Rewrite path injection to use flow state

  Show description for a5bc537
  yoff

  committed
  a5bc537

  Copy full SHA for a5bc537

Commits on Jan 20, 2022

• Python: Apply suggestions from code review

  Show description for f53dce3
  

  RasmusWL

  and

  tausbn

  authored
  f53dce3

  Copy full SHA for f53dce3

Commits on Jan 19, 2022

• Python: Remove usernames as sensitive source for cleartext queries

  Show description for e82e648
  RasmusWL

  committed
  e82e648

  Copy full SHA for e82e648

• Python: Add FP tests for cleartext logging

  RasmusWL

  committed
  f3daff4

  Copy full SHA for f3daff4

Commits on Dec 17, 2021

• Python: Adjust .expected based on new comment

  Show description for 83f87f0
  RasmusWL

  committed
  83f87f0

  Copy full SHA for 83f87f0

• Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/full_partial_test.py

  yoff

  authored
  9866214

  Copy full SHA for 9866214

Commits on Dec 16, 2021

• Python: Allow `http[s]://` prefix for SSRF

  RasmusWL

  committed
  1d00730

  Copy full SHA for 1d00730

• Python: Add tricky .format SSRF tests

  RasmusWL

  committed
  8d9a797

  Copy full SHA for 8d9a797

• Python: Fix SSRF sanitizer tests

  Show description for 6f297f4
  RasmusWL

  committed
  6f297f4

  Copy full SHA for 6f297f4

• Python: Improve full/partial SSRF split

  Show description for 4b5599f
  RasmusWL

  committed
  4b5599f

  Copy full SHA for 4b5599f

• Python: Adjust SSRF location to request call

  Show description for cb934e1
  RasmusWL

  committed
  cb934e1

  Copy full SHA for cb934e1

• Python: Add interesting test-case

  RasmusWL

  committed
  b1bca85

  Copy full SHA for b1bca85

• Python: Add SSRF queries

  Show description for 1cc5e54
  RasmusWL

  committed
  1cc5e54

  Copy full SHA for 1cc5e54

Commits on Dec 2, 2021

• Merge remote-tracking branch 'origin/main' into nickrolfe/regexp_g_anchor

  nickrolfe

  committed
  0541576

  Copy full SHA for 0541576

• Merge pull request #7217 from RasmusWL/more-path-injection-fps

  Show description for 4609b20
  yoff

  authored
  4609b20

  Copy full SHA for 4609b20

Commits on Nov 23, 2021

• Merge pull request #6972 from yoff/python/promote-redos

  Show description for 8cccee6
  tausbn

  authored
  8cccee6

  Copy full SHA for 8cccee6

• Python: Add an other path injection FP

  Show description for baafd9f
  RasmusWL

  committed
  baafd9f

  Copy full SHA for baafd9f

Commits on Nov 19, 2021

• Python: treat \A, \Z, \b, \B as special chars, not escapes

  nickrolfe

  committed
  df6ba43

  Copy full SHA for df6ba43

Commits on Nov 18, 2021

• Merge pull request #6561 from erik-krogh/htmlReg

  Show description for 1cca377
  erik-krogh

  authored
  1cca377

  Copy full SHA for 1cca377

Commits on Nov 15, 2021

• Merge pull request #7091 from RasmusWL/port-request-without-validation

  Show description for 7c3b68b
  RasmusWL

  authored
  7c3b68b

  Copy full SHA for 7c3b68b

Commits on Nov 9, 2021

• Python: Port `py/request-without-cert-validation` to use API graphs

  RasmusWL

  committed
  985cd1e

  Copy full SHA for 985cd1e

• Python: Add `py/request-without-cert-validation` tests

  RasmusWL

  committed
  5958169

  Copy full SHA for 5958169

• Python: Add interesting path-injection FP

  RasmusWL

  committed
  f70e4fe

  Copy full SHA for f70e4fe

Commits on Nov 4, 2021

• Merge branch 'main' into htmlReg

  erik-krogh

  committed
  02f500b

  Copy full SHA for 02f500b

Commits on Oct 28, 2021

• Python: remember to update refs...

  yoff

  committed
  8536f5f

  Copy full SHA for 8536f5f

• Python: Properly model `flask.send_from_directory`

  Show description for 8c3349f
  RasmusWL

  committed
  8c3349f

  Copy full SHA for 8c3349f

• Python: Add flask specific path-injection test

  RasmusWL

  committed
  6648a69

  Copy full SHA for 6648a69

Commits on Oct 26, 2021

• Merge branch 'main' of github.com:github/codeql into htmlReg

  erik-krogh

  committed
  44afa34

  Copy full SHA for 44afa34

Commits on Oct 14, 2021

• Merge pull request #6693 from yoff/python/promote-regex-injection

  Show description for 7cd5e68
  RasmusWL

  authored
  7cd5e68

  Copy full SHA for 7cd5e68

Commits on Oct 12, 2021

• Merge branch 'main' of github.com:github/codeql into python/promote-regex-injection

  yoff

  committed
  61008fd

  Copy full SHA for 61008fd

• Python: Update test expectation following rename

  yoff

  committed
  f34d1ee

  Copy full SHA for f34d1ee

Commits on Sep 21, 2021

• Python: Merge SQLAlchemy TextClause injection into `py/sql-injection`

  Show description for a83bb39
  RasmusWL

  committed
  a83bb39

  Copy full SHA for a83bb39