Ahmed Farid
f956fe12d5
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue.qlref to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.qlref
2022-08-16 16:28:17 +01:00
Ahmed Farid
6536b602df
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue.expected to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.expected
2022-08-16 16:28:00 +01:00
Ahmed Farid
b8fe0e2eee
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeader.py to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeader.py
2022-08-16 16:27:45 +01:00
Ahmed Farid
87b67ed64f
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash.py to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.py
2022-08-16 16:27:19 +01:00
Ahmed Farid
fa3940f69a
Rename python/ql/test/experimental/query-tests/Security/CWE-208/PossibleTimingAttackAgainstHash.qlref to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.qlref
2022-08-16 16:27:02 +01:00
Ahmed Farid
6a94d45643
Rename python/ql/test/experimental/query-tests/Security/CWE-208/PossibleTimingAttackAgainstHash.expected to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.expected
2022-08-16 16:26:45 +01:00
Ahmed Farid
31ecb0727f
Rename TimingAttackAgainstHeader.expected to TimingAttackAgainstHeaderValue.expected
2022-08-16 14:50:54 +01:00
Ahmed Farid
d8719f3b1f
Rename TimingAttackAgainstSensitiveInfo.expected to PossibleTimingAttackAgainstSensitiveInfo.expected
2022-08-16 14:50:21 +01:00
Sid Shankar
1e1e2318b7
Merge pull request #10052 from github/task/fix-broken-links
...
Docs: Replace HTTP broken links to equivalent HTTPS resources
2022-08-16 08:45:08 -04:00
yoff
e7c6c04076
Merge pull request #9858 from tausbn/python-fix-bad-getOuterVariable-join
...
Python: Fix bad join in `getOuterVariable`
2022-08-16 14:40:42 +02:00
yoff
3006fa60c6
Merge pull request #9856 from tausbn/python-fix-bad-ScopeEntryDefinition-charpred-join
...
Python: Fix bad join in `ScopeEntryDefinition`
2022-08-16 14:37:53 +02:00
Ahmed Farid
67476d0a36
Rename TimingAttackAgainstSensitiveInfo.qlref to PossibleTimingAttackAgainstSensitiveInfo.qlref
2022-08-16 13:36:59 +01:00
Ahmed Farid
e8376a522c
Update TimingAttackAgainstHeaderValue.qlref
2022-08-16 13:35:20 +01:00
Ahmed Farid
ecbe663c2f
Update TimingAttackAgainstSensitiveInfo.qlref
2022-08-16 13:34:24 +01:00
Ahmed Farid
1dd4400c67
Update PossibleTimingAttackAgainstHash.qlref
2022-08-16 13:33:17 +01:00
Taus
1f5176d623
Python: Simplify class_var_scope
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2022-08-16 14:02:47 +02:00
Taus
b17e74dfe8
Python: Simplify binding fix
...
Co-authored-by: yoff <yoff@github.com >
2022-08-16 11:41:43 +00:00
Ahmed Farid
abcfb1cd63
Update TimingAttack.qll
2022-08-16 12:33:19 +01:00
Ahmed Farid
44f054bede
Update PossibleTimingAttackAgainstHash.expected
2022-08-16 12:31:33 +01:00
Erik Krogh Kristensen
fd5b8896df
Merge pull request #10063 from erik-krogh/fixRbDep
...
re-deprecate ReDoSUtil in ruby
2022-08-16 13:27:52 +02:00
Ahmed Farid
abc49bd62b
Update TimingAttackAgainstHeader.py
2022-08-16 12:06:34 +01:00
Alex Ford
d02ad51d74
Merge pull request #10032 from github/post-release-prep/codeql-cli-2.10.3
...
Post-release preparation for codeql-cli-2.10.3
2022-08-16 12:04:07 +01:00
Ahmed Farid
68cf084b8f
Update TimingAttackAgainstSensitiveInfo.expected
2022-08-16 12:03:14 +01:00
Ahmed Farid
c85ad1b2c0
Update TimingAttackAgainstHash.py
2022-08-16 11:50:37 +01:00
erik-krogh
8e6a36256c
import the non-deprecated NfaUtils in the overly-large-range query
2022-08-16 11:21:43 +02:00
Erik Krogh Kristensen
f106e064fa
Merge pull request #9422 from erik-krogh/refacReDoS
...
Refactorizations of the ReDoS libraries
2022-08-16 09:32:08 +02:00
Sid Shankar
68d1c2d3e8
Fix link to python requests documentation
...
docs.python-requests.org seems to be a suspended domain. The replacement link is to the same Python requests library on readthedocs.io, and points to the ssl-cert-verification section.
2022-08-15 14:43:28 -04:00
Ahmed Farid
5ecadd06ae
Update TimingAttackAgainstHash.py
2022-08-15 15:21:10 +01:00
Ahmed Farid
169d27951a
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 15:19:13 +01:00
Ahmed Farid
dbd6076725
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:18:09 +01:00
Ahmed Farid
f2bf58bdb6
Update TimingAttackAgainstSensitiveInfo.py
2022-08-15 15:16:30 +01:00
Ahmed Farid
8ebf428078
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:15:24 +01:00
Ahmed Farid
054e0726b0
Update UnsafeComparisonOfHeaderValue.py
2022-08-15 15:13:17 +01:00
Ahmed Farid
c578a34892
Update SafeComparisonOfHeaderValue.py
2022-08-15 15:12:38 +01:00
Ahmed Farid
773bb5fffd
Update SafeComparisonOfHeaderValue.py
2022-08-15 14:43:32 +01:00
Ahmed Farid
a724bd1e32
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 14:42:17 +01:00
Erik Krogh Kristensen
0adb588fe8
Merge pull request #9712 from erik-krogh/badRange
...
JS/RB/PY/Java: add suspicious range query
2022-08-15 13:55:44 +02:00
Ahmed Farid
18b103dbd5
Update TimingAttackAgainstHash.py
2022-08-15 11:29:29 +01:00
Ahmed Farid
7d23b80582
Update TimingAttackAgainstHash.py
2022-08-15 11:29:09 +01:00
Ahmed Farid
521dbd0e82
Update TimingAttackAgainstSensitiveInfo.py
2022-08-15 11:28:51 +01:00
Ahmed Farid
5de103303d
Update TimingAttackAgainstHeader.py
2022-08-15 11:26:34 +01:00
Ahmed Farid
7cb1683f5b
Update TimingAttackAgainstSensitiveInfo.py
2022-08-15 11:21:40 +01:00
Ahmed Farid
0e0c6e08b5
Update TimingAttack.qll
2022-08-15 11:18:31 +01:00
Anders Schack-Mulligen
a3fb54c9de
Merge pull request #10007 from aschackmull/dataflow/source-node-identity
...
Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow
2022-08-15 10:39:17 +02:00
erik-krogh
3a4a3437b5
fix some QL-for-QL warnings
2022-08-12 20:38:50 +02:00
erik-krogh
b54f037424
Merge branch 'main' into refacReDoS
2022-08-12 20:28:30 +02:00
erik-krogh
b9e96fb078
sync changes to other languages
2022-08-12 20:28:12 +02:00
Ahmed Farid
01490414e8
Update TimingAttackAgainstHeader.py
2022-08-12 12:25:31 +01:00
github-actions[bot]
21d0c78376
Post-release preparation for codeql-cli-2.10.3
2022-08-11 23:20:39 +00:00
github-actions[bot]
57c4f9145b
Release preparation for version 2.10.3
2022-08-11 11:12:15 +00:00