hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-23 20:26:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #13359 from jorgectf/jorgectf/unsafe-deserialization-name-convention

Browse Source 
Python: Make `py/unsafe-deserialization` `@name` consistent with other languages
This commit is contained in:
Rasmus Wriedt Larsen
2023-06-06 11:28:41 +02:00
committed by GitHub
parent 6c5c338e6b 3e8c7f72b6
commit a1f20f84d4
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/Security/CWE-502/UnsafeDeserialization.ql
View File

@@ -1,5 +1,5 @@
/**
* @name Deserializing untrusted input
* @name Deserialization of user-controlled data
* @description Deserializing user-controlled data may allow attackers to execute arbitrary code.
* @kind path-problem
* @id py/unsafe-deserialization

4
python/ql/src/change-notes/2023-06-02-unsafe-deserialization-name-update.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: fix
---
* The display name (`@name`) of the `py/unsafe-deserialization` query has been updated in favor of consistency with other languages.