Josh Brown
b683a3caf8
Merge branch 'main' into jb1/16-cryptography-models-libraries-and-queries-migration
2023-10-04 07:24:29 +11:00
Henry Mercer
da92da2204
Bump minor versions of packs we regularly release
2023-10-03 16:31:23 +01:00
Henry Mercer
f3847b3f51
Merge branch 'main' into henrymercer/rc-3.11-mergeback
2023-10-03 16:30:23 +01:00
yoff
dbecb1bd0f
Merge pull request #14070 from yoff/python/promote-nosql-query
...
Python: promote nosql query
2023-09-29 14:21:22 +02:00
Rasmus Wriedt Larsen
d7ad5a0f23
Python: List NoSQL injection sinks
2023-09-29 13:54:21 +02:00
Rasmus Wriedt Larsen
16e1a00e88
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00
Rasmus Lerchedahl Petersen
74d6f37467
Python: update meta query TaintSinks
2023-09-29 12:02:16 +02:00
Rasmus Lerchedahl Petersen
d90630aa66
Python: fix query file
2023-09-28 12:34:10 +02:00
Benjamin Rodes
25203db4e7
Removing 'security' tags from all queries.
2023-09-27 12:43:51 -04:00
Josh Brown
7ad2932b3f
Update SymmetricEncryptionAlgorithms.ql
...
Changing metadata to under python namespace
2023-09-21 12:12:16 -07:00
Benjamin Rodes
5fed923af0
Changed python inventory subdirectory structure to add old and new inventory models. Added some example old models.
2023-09-21 12:12:15 -07:00
Benjamin Rodes
50db4fd63e
Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.
2023-09-21 12:12:15 -07:00
github-actions[bot]
3acf5244b0
Post-release preparation for codeql-cli-2.14.6
2023-09-20 10:25:10 +00:00
github-actions[bot]
0a3670727f
Release preparation for version 2.14.6
2023-09-19 11:40:30 +00:00
Rasmus Wriedt Larsen
fd8d186b34
Python: Add debug queries
...
For manually debugging things, it's nice to be able to share debug
queries.
I had the DebugStats.ql lying around from way back, and thought it was
kinda cute. I've extended it with a bunch of things, not too sure if
they're all important, but I think it's kinda fun to see the
distribution of things 😊
2023-09-18 20:46:52 +02:00
Rasmus Lerchedahl Petersen
4614b1ae9c
Python: add change note
2023-09-18 14:34:03 +02:00
Erik Krogh Kristensen
cd5973764b
Merge pull request #14112 from erik-krogh/pyAllowedHosts
...
Py: add sanitizer guard for `url_has_allowed_host_and_scheme`
2023-09-13 12:59:38 +02:00
Rasmus Wriedt Larsen
7292730391
Python: Add change-note
2023-09-13 11:55:48 +02:00
github-actions[bot]
d699880c86
Post-release preparation for codeql-cli-2.14.4
2023-09-08 21:17:52 +00:00
erik-krogh
bf3fe3cd66
add new qhelp for clear-text-logging
2023-09-07 12:39:13 +02:00
Rasmus Wriedt Larsen
ec0529d68c
Merge pull request #14145 from p-/p--asyncio-cmdi-exec
...
Python: Support for command injection sinks found in the `asyncio` module
2023-09-07 11:27:50 +02:00
amammad
6ee5865789
add sources to detect CVE completely
2023-09-07 18:27:40 +10:00
Rasmus Wriedt Larsen
c85ea9a0c0
Python: Fix typo in SSRF example
2023-09-07 09:45:02 +02:00
Rasmus Lerchedahl Petersen
087961d179
Python: Refactor to allow customizations
...
Also use new DataFlow API
2023-09-07 09:28:30 +02:00
Rasmus Lerchedahl Petersen
db0459739f
Python: rename file
2023-09-07 09:28:30 +02:00
Rasmus Lerchedahl Petersen
55707d395e
Python: Make things compile in their new location
...
- Move NoSQL concepts to the non-experimental concepts file
- fix references
2023-09-07 09:28:30 +02:00
Rasmus Lerchedahl Petersen
60dc1afbc0
Python: prepare to promote NoSqlInjection
...
Mostly move files, preserving authourship.
This will not compile.
2023-09-07 09:28:29 +02:00
amammad
bcfc28aae0
add sources to detect CVE completely
2023-09-07 02:02:32 +10:00
github-actions[bot]
abf2b12b1c
Release preparation for version 2.14.4
2023-09-05 16:56:14 +00:00
Peter Stöckli
9027eac312
Python: add change notes for asyncio CMDi sinks
2023-09-05 16:14:56 +02:00
Rasmus Wriedt Larsen
49f5d38956
Merge pull request #14068 from RasmusWL/dataflow-config-refactor
...
Python: Use new dataflow API
2023-09-04 21:04:10 +02:00
Rasmus Wriedt Larsen
49d510018d
Python: Add change-note
2023-08-29 11:11:32 +02:00
Dave Bartolomeo
3343b78015
Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3
...
Post-release preparation for codeql-cli-2.14.3
2023-08-28 13:34:10 -04:00
github-actions[bot]
3eba77421a
Post-release preparation for codeql-cli-2.14.3
2023-08-28 15:53:49 +00:00
Rasmus Wriedt Larsen
ce6335866b
Python: Move ModificationOfParameterWithDefault to new dataflow API
2023-08-28 16:19:47 +02:00
Rasmus Wriedt Larsen
e8e8d975e3
Python: Remove all usage of DataFlow2+TaintTracking2
...
(and any higher number as well)
2023-08-28 15:34:19 +02:00
Rasmus Wriedt Larsen
c665c21d83
Python: More style-guide renaming
...
Split it into multiple commits to make it easier to review.
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
996364d6ee
Python: Fix naming style guide violations
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
98538d237e
Python: Autoformat
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
5ba8e102eb
Python: Adopt tests to new DataflowQueryTest
...
Since we want to know the _sinks_ and not just the flow, we need to
expose the config as well :|
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
6961ca5234
Python: Rename to EmailXss
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
6d4491e0a9
Python: Modernize WebAppConstantSecretKey
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
852b01c65d
Python: Move SmtpMessageConfig to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
d5e2a30e5b
Python: Modernize py/azure-storage/unsafe-client-side-encryption-in-use a bit
...
To use consistent naming
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
bfcc194b85
Python: Move experimental paramiko to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
acd0f2a8fb
Python: Move experimental LDAPInsecureAuth to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
c6911c2ae0
Python: Move experimental UnicodeBypassValidation to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
2c06394bf3
Python: Move experimental CookieInjection to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
2c412707ab
Python: Move experimental CsvInjection to new dataflow API
2023-08-28 15:31:08 +02:00
Rasmus Wriedt Larsen
ace1e23c21
Python: Move experimental ClientSuppliedIpUsedInSecurityCheck to new dataflow API
2023-08-28 15:31:08 +02:00
