hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-09 04:30:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

Release preparation for version 2.15.0

Browse Source
This commit is contained in:
github-actions[bot]
2023-10-04 14:15:27 +00:00
parent 99646ba2a3
commit 9fe993bec3
156 changed files with 441 additions and 235 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/change-notes/2023-09-05-asyncio-cmdi-sinks.md
View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Extended the `py/command-line-injection` query with sinks from Python's `asyncio` module.

4
python/ql/src/change-notes/2023-09-13-django-url-allowed-host.md
View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Improved _URL redirection from remote source_ (`py/url-redirection`) query to not alert when URL has been checked with `django.utils.http. url_has_allowed_host_and_scheme`.

4
python/ql/src/change-notes/2023-09-18-promoted-nosql-injection-query.md
View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* The query `py/nosql-injection` for finding NoSQL injection vulnerabilities is now available in the default security suite.

10
python/ql/src/change-notes/released/0.9.0.md Normal file
View File

@@ -0,0 +1,10 @@
## 0.9.0
### New Queries
* The query `py/nosql-injection` for finding NoSQL injection vulnerabilities is now available in the default security suite.
### Minor Analysis Improvements
* Improved _URL redirection from remote source_ (`py/url-redirection`) query to not alert when URL has been checked with `django.utils.http. url_has_allowed_host_and_scheme`.
* Extended the `py/command-line-injection` query with sinks from Python's `asyncio` module.