hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Move change notes to correct location

Browse Source 
A few change notes slipped through the cracks of my previous change. These are now in the proper locations: `old-change-notes` for older notes, and `<lang>\ql\[src|lib]\change-notes` for current change notes.
This commit is contained in:
Dave Bartolomeo
2022-01-03 18:21:16 -05:00
parent ded3c52a34
commit 5f5af4a29e
6 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/change-notes/2021-12-17-add-SSRF-analysis.md Normal file
View File

@@ -0,0 +1,4 @@
---
catgegory: minorAnalysis
---
* To support the new SSRF queries, the PyPI package `requests` has been modeled, along with `http.client.HTTP[S]Connection` from the standard library.

4
python/ql/src/change-notes/2021-12-17-add-SSRF-queries.md Normal file
View File

@@ -0,0 +1,4 @@
---
catgegory: newQuery
---
* Two new queries have been added for detecting Server-side request forgery (SSRF). _Full server-side request forgery_ (`py/full-ssrf`) will only alert when the URL is fully user-controlled, and _Partial server-side request forgery_ (`py/partial-ssrf`) will alert when any part of the URL is user-controlled. Only `py/full-ssrf` will be run by default.