Ahmed Farid
10d5ab20f5
fix qhelp
2022-08-17 12:19:02 +01:00
Sid Shankar
1e1e2318b7
Merge pull request #10052 from github/task/fix-broken-links
...
Docs: Replace HTTP broken links to equivalent HTTPS resources
2022-08-16 08:45:08 -04:00
Ahmed Farid
abcfb1cd63
Update TimingAttack.qll
2022-08-16 12:33:19 +01:00
Alex Ford
d02ad51d74
Merge pull request #10032 from github/post-release-prep/codeql-cli-2.10.3
...
Post-release preparation for codeql-cli-2.10.3
2022-08-16 12:04:07 +01:00
Erik Krogh Kristensen
f106e064fa
Merge pull request #9422 from erik-krogh/refacReDoS
...
Refactorizations of the ReDoS libraries
2022-08-16 09:32:08 +02:00
Sid Shankar
68d1c2d3e8
Fix link to python requests documentation
...
docs.python-requests.org seems to be a suspended domain. The replacement link is to the same Python requests library on readthedocs.io, and points to the ssl-cert-verification section.
2022-08-15 14:43:28 -04:00
Ahmed Farid
169d27951a
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 15:19:13 +01:00
Ahmed Farid
dbd6076725
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:18:09 +01:00
Ahmed Farid
8ebf428078
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:15:24 +01:00
Ahmed Farid
054e0726b0
Update UnsafeComparisonOfHeaderValue.py
2022-08-15 15:13:17 +01:00
Ahmed Farid
c578a34892
Update SafeComparisonOfHeaderValue.py
2022-08-15 15:12:38 +01:00
Ahmed Farid
773bb5fffd
Update SafeComparisonOfHeaderValue.py
2022-08-15 14:43:32 +01:00
Ahmed Farid
a724bd1e32
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 14:42:17 +01:00
Erik Krogh Kristensen
0adb588fe8
Merge pull request #9712 from erik-krogh/badRange
...
JS/RB/PY/Java: add suspicious range query
2022-08-15 13:55:44 +02:00
Ahmed Farid
0e0c6e08b5
Update TimingAttack.qll
2022-08-15 11:18:31 +01:00
erik-krogh
b54f037424
Merge branch 'main' into refacReDoS
2022-08-12 20:28:30 +02:00
github-actions[bot]
21d0c78376
Post-release preparation for codeql-cli-2.10.3
2022-08-11 23:20:39 +00:00
github-actions[bot]
57c4f9145b
Release preparation for version 2.10.3
2022-08-11 11:12:15 +00:00
Erik Krogh Kristensen
887f6557ed
fix common misspellings throughout github/codeql
2022-08-10 23:21:41 +02:00
yoff
75ac24a847
Merge branch 'main' into python-dataflow/flow-summaries-from-scratch
2022-08-10 10:57:59 +02:00
Erik Krogh Kristensen
49276b1f38
Merge branch 'main' into refacReDoS
2022-08-09 16:18:46 +02:00
Erik Krogh Kristensen
0abbd50ca1
apply changes based on docs review
2022-08-09 13:51:40 +02:00
Ahmed Farid
21f9ee449a
Delete UnSafeComparison.py
2022-08-05 12:49:00 +01:00
Ahmed Farid
d9e85a9064
Delete SafeComparison.py
2022-08-05 12:48:51 +01:00
Ahmed Farid
c7828bf9b4
Create UnSafeComparisonOfSensitiveInfo.py
2022-08-05 12:47:58 +01:00
Ahmed Farid
dd61383469
Create SafeComparisonOfSensitiveInfo.py
2022-08-05 12:46:46 +01:00
Ahmed Farid
5eef14a0a9
Update SafeComparisonOfHeaderValue.py
2022-08-04 12:51:30 +01:00
Ahmed Farid
a6af455eae
Create UnsafeComparisonOfHeaderValue.py
2022-08-04 12:50:55 +01:00
Ahmed Farid
a98a77ad40
Create SafeComparisonOfHeaderValue.py
2022-08-04 12:48:19 +01:00
Ahmed Farid
e1435afea9
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.qhelp
2022-08-04 12:45:01 +01:00
Ahmed Farid
76c8e7d2e8
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.ql
2022-08-04 12:44:45 +01:00
Ahmed Farid
428132a58e
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:44:10 +01:00
Ahmed Farid
a34478d58f
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:43:53 +01:00
Ahmed Farid
59f05b4d62
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:43:35 +01:00
Ahmed Farid
fe51a917ec
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:43:21 +01:00
Ahmed Farid
a747bacbe5
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql
2022-08-04 12:42:08 +01:00
Ahmed Farid
cf36a30909
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.qhelp
2022-08-04 12:41:51 +01:00
Ahmed Farid
4b0c42951f
Rename python/ql/src/experimental/Security/CWE-208/UnSafeComparisonOfHash.py to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/UnSafeComparisonOfHash.py
2022-08-04 12:41:27 +01:00
Ahmed Farid
cf47104f62
Update TimingAttackAgainstHeaderValue.ql
2022-08-04 12:39:31 +01:00
Ahmed Farid
8490a54af5
Update TimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:38:31 +01:00
Ahmed Farid
31692f523f
Update PossibleTimingAttackAgainstHash.ql
2022-08-04 12:37:57 +01:00
Ahmed Farid
61b7d89813
Update TimingAttackAgainstHash.ql
2022-08-04 12:36:58 +01:00
Ahmed Farid
b5ff606b41
Update PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:36:36 +01:00
Ahmed Farid
ad53176546
Rename python/ql/src/experimental/Security/CWE-208/TimingAttack.qll to python/ql/src/experimental/semmle/python/security/TimingAttack.qll
2022-08-04 12:35:24 +01:00
Ahmed Farid
028ac19259
Rename python/ql/src/experimental/Security/CWE-208/SafeComparisonOfHash.py to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/SafeComparisonOfHash.py
2022-08-04 12:30:56 +01:00
Ahmed Farid
5afc0a7773
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstHash.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.ql
2022-08-04 12:30:38 +01:00
Ahmed Farid
035de1fffe
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstHash.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.qhelp
2022-08-04 12:30:12 +01:00
Ahmed Farid
e28cf7ebe2
Create UnSafeComparisonOfHash.py
2022-08-04 12:28:46 +01:00
Ahmed Farid
9c0a71d880
Update SafeComparisonOfHash.py
2022-08-04 12:27:35 +01:00
Ahmed Farid
1fed6074e9
Create SafeComparisonOfHash.py
2022-08-04 12:25:47 +01:00
