Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit history

Commits on Feb 1, 2022

• Merge pull request #7687 from yoff/python/PathInjection-FlowState

  Show description for f7a0b17
  RasmusWL

  authored
  f7a0b17

  Copy full SHA for f7a0b17

Commits on Jan 31, 2022

• python: deprecation

  Show description for 0c3bce1
  yoff

  committed
  0c3bce1

  Copy full SHA for 0c3bce1

Commits on Jan 27, 2022

• python: Add reverse flow in some patterns

  Show description for b93c04b
  yoff

  committed
  b93c04b

  Copy full SHA for b93c04b

Commits on Jan 26, 2022

• Merge branch 'main' of github.com:github/codeql into python/support-match

  yoff

  committed
  47af3a6

  Copy full SHA for 47af3a6

Commits on Jan 24, 2022

• Merge pull request #7455 from haby0/py/add-shutil-module-path-injection-sinks

  Show description for 3013180
  RasmusWL

  authored
  3013180

  Copy full SHA for 3013180

Commits on Jan 21, 2022

• python: Add missing input

  Show description for 9aa4c4a
  yoff

  committed
  9aa4c4a

  Copy full SHA for 9aa4c4a

• use set literals instead of big disjunctions

  erik-krogh

  committed
  ddfc3bc

  Copy full SHA for ddfc3bc

• python: Rewrite path injection to use flow state

  Show description for a5bc537
  yoff

  committed
  a5bc537

  Copy full SHA for a5bc537

Commits on Jan 20, 2022

• Python: Apply suggestions from code review

  Show description for f53dce3
  

  RasmusWL

  and

  tausbn

  authored
  f53dce3

  Copy full SHA for f53dce3

Commits on Jan 19, 2022

• Python: Remove usernames as sensitive source for cleartext queries

  Show description for e82e648
  RasmusWL

  committed
  e82e648

  Copy full SHA for e82e648

• Python: Add FP tests for cleartext logging

  RasmusWL

  committed
  f3daff4

  Copy full SHA for f3daff4

• python: dataflow for match

  Show description for 36e18d5
  yoff

  committed
  36e18d5

  Copy full SHA for 36e18d5

Commits on Jan 18, 2022

• Python: Support SQLAlchemy `scoped_session`

  RasmusWL

  committed
  95e935e

  Copy full SHA for 95e935e

Commits on Jan 6, 2022

• Delete shutil_path_injection.py file

  haby0

  committed
  759ec31

  Copy full SHA for 759ec31

• Merge pull request #7518 from tausbn/python-extend-unreachable-statement-test

  Show description for 3e1dcc3
  RasmusWL

  authored
  3e1dcc3

  Copy full SHA for 3e1dcc3

• Add the test of shutil module in FileSystemAccess.py

  haby0

  committed
  05b0daa

  Copy full SHA for 05b0daa

Commits on Jan 5, 2022

• Python: Extend unreachable statement test

  Show description for 5d4db3a
  tausbn

  authored
  5d4db3a

  Copy full SHA for 5d4db3a

Commits on Dec 20, 2021

• Add shutil module path injection sinks

  haby0

  committed
  fed1d88

  Copy full SHA for fed1d88

Commits on Dec 17, 2021

• Python: Adjust .expected based on new comment

  Show description for 83f87f0
  RasmusWL

  committed
  83f87f0

  Copy full SHA for 83f87f0

• Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/full_partial_test.py

  yoff

  authored
  9866214

  Copy full SHA for 9866214

Commits on Dec 16, 2021

• Python: Allow `http[s]://` prefix for SSRF

  RasmusWL

  committed
  1d00730

  Copy full SHA for 1d00730

• Python: Add tricky .format SSRF tests

  RasmusWL

  committed
  8d9a797

  Copy full SHA for 8d9a797

• Python: Fix SSRF sanitizer tests

  Show description for 6f297f4
  RasmusWL

  committed
  6f297f4

  Copy full SHA for 6f297f4

• Python: Improve full/partial SSRF split

  Show description for 4b5599f
  RasmusWL

  committed
  4b5599f

  Copy full SHA for 4b5599f

• Python: Adjust SSRF location to request call

  Show description for cb934e1
  RasmusWL

  committed
  cb934e1

  Copy full SHA for cb934e1

• Python: Add interesting test-case

  RasmusWL

  committed
  b1bca85

  Copy full SHA for b1bca85

• Python: Apply suggestions from code review

  Show description for 6ce1524
  

  RasmusWL

  and

  yoff

  authored
  6ce1524

  Copy full SHA for 6ce1524

• Python: Add SSRF queries

  Show description for 1cc5e54
  RasmusWL

  committed
  1cc5e54

  Copy full SHA for 1cc5e54

Commits on Dec 15, 2021

• Python: client request: getUrl => getAUrlPart

  Show description for f8fc583
  RasmusWL

  committed
  f8fc583

  Copy full SHA for f8fc583

• Python: Add modeling of `http.client.HTTPResponse`

  RasmusWL

  committed
  6f81685

  Copy full SHA for 6f81685

• Python: Add tests of `http.client.HTTPResponse`

  RasmusWL

  committed
  a5bae30

  Copy full SHA for a5bae30

Commits on Dec 13, 2021

• Python: Model `requests` Responses

  RasmusWL

  committed
  cf2ee06

  Copy full SHA for cf2ee06

• Python: Consider taint of client http requests

  RasmusWL

  committed
  35cba17

  Copy full SHA for 35cba17

• Python: Add modeling of `requests`

  RasmusWL

  committed
  b68d280

  Copy full SHA for b68d280

• Python: Add tests of `requests`

  Show description for 1ff56d5
  RasmusWL

  committed
  1ff56d5

  Copy full SHA for 1ff56d5