2826 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	386ff53614	Python: Model lxml.iterparse	2022-03-31 11:32:22 +02:00
Rasmus Wriedt Larsen	12cbdcde28	Python: Model lxml.etree.XMLID	2022-03-31 11:21:24 +02:00
Rasmus Wriedt Larsen	6774085e7a	Python: Add note about parseid/XMLID	2022-03-31 11:19:25 +02:00
Rasmus Wriedt Larsen	a315aa84b2	Python: Add some links in QLDocs	2022-03-31 11:16:50 +02:00
Rasmus Wriedt Larsen	64aa503cc3	Python: Promote xml.etree modeling	2022-03-31 11:12:02 +02:00
Rasmus Wriedt Larsen	7f5f7679f8	Python: Promote xmltodict modeling	2022-03-31 10:28:34 +02:00
Rasmus Wriedt Larsen	80b5cde3a2	Python: Promote lxml parsing modeling	2022-03-31 10:19:08 +02:00
Rasmus Wriedt Larsen	3040adfd9b	Python: Handle XMLParser().close() for XPath	2022-03-31 10:08:26 +02:00
Rasmus Wriedt Larsen	1ea4bcc59f	Python: Make XMLParsing a Decoding subclass	2022-03-31 09:52:55 +02:00
Rasmus Wriedt Larsen	e45288e812	Python: => XMLParsingVulnerabilityKind ... Since there are other XML vulnerabilities that are not about parsing, this is more correct.	2022-03-31 09:52:55 +02:00
Rasmus Wriedt Larsen	e005a5c0ab	Python: Promote XMLParsing concept	2022-03-31 09:52:55 +02:00
Rasmus Wriedt Larsen	769f5691d0	Python: Add taint for StringIO and BytesIO	2022-03-31 09:52:54 +02:00
Erik Krogh Kristensen	1218c4f4ed	fix ql/name-casing, and drive-by QL-for-QL typo fix	2022-03-30 22:59:14 +02:00
Erik Krogh Kristensen	1847a5713b	remove TODO	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	7ca6426ea5	revert the Taint stage, as it caused an alert for ql/abstract-class-import	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	7e4ab4c60b	Revert "import all the frameworks that extend RegexString" ... This reverts commit 84bc9042de4e876685f8f5ffdd88893383d1cfdc. It caused ql/abstract-class-import alerts	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	3b9335c051	nomagic on containsInScope	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	5caff81ff9	import all the frameworks that extend RegexString	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	b959705531	revert changes in MRO.qll	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	b74852ffd6	cache a bit more (again)	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	d9ced55e2c	make private predicates private	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	040196f40d	cache more basicblock predicates	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	79713e0ef8	a bit more caching	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	7643aac207	revert bad nomagic	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	35c7fa58a7	joiner order fixes	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	88e896992e	cache the remainder of the pointsto layer	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	79da0970cc	various join order fixes	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	3e9ee887d4	fix bad mistake	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	758a5d7a85	few join order fixes	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	6eca4ba2d3	get around identical files by adding the ref() call somewhere else	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	4089788629	revert caching of some large predicates that caused the DB size to increase too much	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	0da80f90d3	rename the SSA stages to AST	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	c9e3a62953	cached stages iteration 5	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	a8f9a91e38	cached stages iteration 4	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	f68357a063	cached stages iteration 3.5	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	37a9b41e26	cached stages iteration 3	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	60b5af215f	cached stages iteration 2	2022-03-30 22:53:59 +02:00
Erik Krogh Kristensen	71eacea90b	add the cached stages pattern to Python	2022-03-30 22:53:59 +02:00
Sebastian Bauersfeld	a3c3a7fe0d	Python: Identify alternative body argument in invocations of Response constructor.	2022-03-30 19:34:54 +07:00
Arthur Baars	b103679d8a	JS/Ruby/Python: rename RegExpTreeView.qll to ReDoSUtilSpecific.qll	2022-03-28 12:17:26 +02:00
Arthur Baars	af1d949d06	Merge pull request #8489 from aibaars/regex-refactor ... Ruby: refactor regex libraries	2022-03-28 12:17:00 +02:00
yoff	5efc19c39d	Merge pull request #7806 from erik-krogh/pyDef ... Python: Add def nodes to API graphs	2022-03-28 08:09:14 +02:00
Rasmus Lerchedahl Petersen	774c811e97	python: move CSRF concepts inside HTTP::Server	2022-03-28 07:35:13 +02:00
Rasmus Lerchedahl Petersen	1e9840d779	python: broaden local protection concept	2022-03-25 12:28:33 +01:00
Rasmus Lerchedahl Petersen	179f77b123	python: clearer comment	2022-03-25 11:51:24 +01:00
yoff	85f1d92a0d	Apply suggestions from code review ... Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>	2022-03-25 11:42:32 +01:00
Rasmus Wriedt Larsen	d51aaf2f91	Python: Import framework-modeling in regex.qll	2022-03-24 14:28:44 +01:00
Arthur Baars	1a9aaf4543	Apply suggestions from code review ... Co-authored-by: yoff <lerchedahl@gmail.com>	2022-03-24 11:37:03 +01:00
Arthur Baars	74aea81fe3	Ruby: refactor regex libraries	2022-03-24 11:37:02 +01:00
Rasmus Lerchedahl Petersen	93336bcb16	python: allow alternative middleware ... (observed [on LGTM](9d6a7ee180/files/mozillians/settings.py (L96)))	2022-03-23 12:27:51 +01:00