871 Commits

Author	SHA1	Message	Date
Mark Shannon	1080525d7d	Python: Add missing test stub.	2018-11-28 10:45:48 +00:00
Mark Shannon	243280dc00	Python: New query to check for use of jinja2 templates without auto-escaping.	2018-11-28 10:45:19 +00:00
Mark Shannon	31ac33e723	Merge pull request #528 from taus-semmle/python-flask-debug ... Python: Implement check for flask debug mode.	2018-11-27 19:42:26 +00:00
Taus	2b340b4804	Merge pull request #530 from markshannon/python-no-cert-validation ... New query to check for making a request without cert verification.	2018-11-27 19:01:10 +01:00
Taus Brock-Nannestad	6ebf504d97	Update test results after stub change.	2018-11-27 16:59:19 +01:00
Taus Brock-Nannestad	8d341ab467	Fix stub file.	2018-11-27 16:56:09 +01:00
Taus Brock-Nannestad	a4da245809	Python: Implement check for flask debug mode.	2018-11-27 15:14:38 +01:00
Taus	f0fbed76e7	Merge pull request #539 from markshannon/python-path-fix-siblings ... Python: Fix parents relation for path queries.	2018-11-23 17:59:04 +01:00
Mark Shannon	3190b12544	Python: Fix parent relation for path-queries.	2018-11-23 15:04:01 +00:00
Mark Shannon	6588606739	Python: Account for other 'falsey' values in query.	2018-11-23 14:42:45 +00:00
Mark Shannon	45e864a395	Python: New query to test for requests without validation.	2018-11-23 14:42:45 +00:00
Mark Shannon	f0206a2ff4	Python: Tests for new query: requests called with verify=False.	2018-11-23 14:42:45 +00:00
Mark Shannon	b94493aec3	Python: Add extra sinks for command-injection query.	2018-11-23 14:29:02 +00:00
Mark Shannon	61bd8682df	Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.	2018-11-23 12:32:14 +00:00
Mark Shannon	c01db23f58	Python: Fix up expected results of SqlInjection.ql	2018-11-22 11:05:09 +00:00
Mark Shannon	f3fedcdf38	Python tests: Move security test stubs to correct location.	2018-11-22 11:05:09 +00:00
Mark Shannon	04e5b8927a	Python tests: use a more accurate form os os.path.join() in test lib.	2018-11-22 11:05:09 +00:00
Mark Shannon	88d82017b3	Python: Convert stack-trace-exposure query to path-problem.	2018-11-22 11:05:08 +00:00
Mark Shannon	2a24723cc3	Python: Update test results for path queries.	2018-11-22 11:05:08 +00:00
Mark Shannon	976fed76b9	Python tests: Remove some obsolete tests.	2018-11-21 14:18:46 +00:00
Mark Shannon	05b69a1c0f	QL tests for Python queries and libraries.	2018-11-19 15:15:54 +00:00