Commits

Breadcrumbs

History for

onf86570f

User selector

All users

All time

Commit History

Commits on Sep 2, 2024

• WIP: Python: CORS Bypass

  Show description for f86570f
  

  Porcupiney Hairs

  committed
  f86570f

  Copy full SHA for f86570f

Commits on Jul 29, 2024

• Merge branch 'main' into python-cookie-concept-promote

  joefarebrother

  committed
  1127b08

  Copy full SHA for 1127b08

Commits on Jul 23, 2024

• Remove experimental query versions

  joefarebrother

  committed
  a73d675

  Copy full SHA for a73d675

• Use a 3-valued newtype for hasSameSiteAttribute

  joefarebrother

  committed
  226e4eb

  Copy full SHA for 226e4eb

• Fix experimental query compilation

  joefarebrother

  committed
  6a7bdaf

  Copy full SHA for 6a7bdaf

• Implement cookie attributes for cases in which a raw header is set

  joefarebrother

  committed
  9ad6c8c

  Copy full SHA for 9ad6c8c

• Change flag predicates to boolean parameters rather than boolean results

  joefarebrother

  committed
  2df09f6

  Copy full SHA for 2df09f6

• Add cookie flags to cookie write concept, and alter experimental queries to use them

  joefarebrother

  committed
  6f7b2a2

  Copy full SHA for 6f7b2a2

Commits on Jul 16, 2024

• Remove experimental version

  joefarebrother

  committed
  070d678

  Copy full SHA for 070d678

Commits on Jul 4, 2024

• Python: Update query metadata

  RasmusWL

  committed
  0a32f9f

  Copy full SHA for 0a32f9f

• Python: Fixup qhelp

  RasmusWL

  committed
  8d1113c

  Copy full SHA for 8d1113c

Commits on Jul 3, 2024

• Python : Arbitrary codde execution due to Js2Py

  Show description for 808af28
  

  Porcupiney Hairs

  committed
  808af28

  Copy full SHA for 808af28

Commits on Jun 18, 2024

• Revert "update id of the query file"

  Show description for 1f99559
  am0o0

  committed
  1f99559

  Copy full SHA for 1f99559

• fix conflict

  am0o0

  committed
  8a7fdfa

  Copy full SHA for 8a7fdfa

Commits on May 29, 2024

• update id of the query file

  am0o0

  committed
  1f11246

  Copy full SHA for 1f11246

• rename secondary to remote :), complete the previous commit changes

  am0o0

  committed
  b9edcb7

  Copy full SHA for b9edcb7

• fix the qhelp of secondary server cmd injectino

  am0o0

  committed
  5299c4a

  Copy full SHA for 5299c4a

Commits on May 6, 2024

• continue to convert paramiko query to a more general query,

  Show description for 4df73f9
  

  am0o0

  authored and

  tausbn

  committed
  4df73f9

  Copy full SHA for 4df73f9

• convert paramiko query to SecondaryServerCmdInjection query, Add inline tests

  

  am0o0

  authored and

  tausbn

  committed
  5fea71e

  Copy full SHA for 5fea71e

Commits on Apr 24, 2024

• Add documentation

  joefarebrother

  committed
  daa31b5

  Copy full SHA for daa31b5

• Move headers injection query and concept from experimental to main

  joefarebrother

  committed
  6021d92

  Copy full SHA for 6021d92

Commits on Apr 22, 2024

• Python: Autoformat everything

  Show description for b484aee
  tausbn

  committed
  b484aee

  Copy full SHA for b484aee

• Python: Change all remaining occurrences of `StrConst`

  Show description for 1c68c98
  tausbn

  committed
  1c68c98

  Copy full SHA for 1c68c98

Commits on Mar 15, 2024

• use of a single var "op" of type Cmpop

  

  Sim4n6

  authored and

  yoff

  committed
  26a16b7

  Copy full SHA for 26a16b7

• Fix p tag in UnicodeDoS.qhelp

  

  Sim4n6

  authored and

  yoff

  committed
  a717bf1

  Copy full SHA for a717bf1

• Fix UnicodeDoS vulnerability in CWE-770 code

  

  Sim4n6

  authored and

  yoff

  committed
  af19a03

  Copy full SHA for af19a03

• Fix UnicodeDoS vulnerability in CWE-770

  

  Sim4n6

  authored and

  yoff

  committed
  085d803

  Copy full SHA for 085d803

• Update request parameter name in good_1() function

  

  Sim4n6

  authored and

  yoff

  committed
  31dc542

  Copy full SHA for 31dc542

• Refactor Unicode normalization code

  

  Sim4n6

  authored and

  yoff

  committed
  70ebc58

  Copy full SHA for 70ebc58

• Update python/ql/src/experimental/Security/CWE-770/UnicodeDoS.ql

  Show description for 658b88e
  

  Sim4n6

  and

  yoff

  committed
  658b88e

  Copy full SHA for 658b88e

• Add some comments and docs

  

  Sim4n6

  authored and

  yoff

  committed
  1f767b8

  Copy full SHA for 1f767b8

• Add UnicodeDoS sink for werkzeug secure_filename

  

  Sim4n6

  authored and

  yoff

  committed
  5cc9170

  Copy full SHA for 5cc9170

• Add Unicode DoS (CWE-770)

  

  Sim4n6

  authored and

  yoff

  committed
  3424650

  Copy full SHA for 3424650

Commits on Feb 14, 2024

• Fix QLDoc issues

  am0o0

  committed
  09d8a75

  Copy full SHA for 09d8a75

• Python: Change name/id to `Decompression Bomb`

  Show description for e5bd633
  RasmusWL

  committed
  e5bd633

  Copy full SHA for e5bd633