Mark Shannon
|
f7d7b8eef2
|
Merge pull request #785 from taus-semmle/python-unsafe-use-of-mktemp
Python: Add query for unsafe use of `tempfile.mktemp`.
|
2019-02-27 15:01:06 +00:00 |
|
Mark Shannon
|
9e268d77d0
|
Python: Add responses to Falcon framework support.
|
2019-02-27 09:56:18 +00:00 |
|
Mark Shannon
|
6a48420191
|
Python: Basic support for falcon framework; routing and requests.
|
2019-02-27 09:55:52 +00:00 |
|
Mark Shannon
|
742c1d0fa7
|
Python: Add test skeleton for falcon web framework.
|
2019-02-27 09:53:20 +00:00 |
|
Taus
|
dcaf0f8ba8
|
Merge pull request #978 from markshannon/python-turbogears
Python: Add support for turbogears; requests and responses.
|
2019-02-26 21:46:01 +01:00 |
|
Taus Brock-Nannestad
|
e47b391329
|
Fix interpolation.
|
2019-02-26 16:27:04 +01:00 |
|
Taus Brock-Nannestad
|
7daaf77183
|
Make query alert refer to AST nodes rather than CFG nodes.
|
2019-02-26 15:56:37 +01:00 |
|
Taus Brock-Nannestad
|
8d774cd354
|
Merge branch 'master' into python-unsafe-use-of-mktemp
|
2019-02-26 13:23:38 +01:00 |
|
Mark Shannon
|
7d0943f30d
|
Python: Add tests for turbogears.
|
2019-02-26 10:15:37 +00:00 |
|
Mark Shannon
|
26c5ebde54
|
Python: Basic support for TurboGears: requests and responses.
|
2019-02-26 10:15:36 +00:00 |
|
Mark Shannon
|
d46467f526
|
Python: Update tests to account for packages having locations.
|
2019-02-22 12:16:34 +00:00 |
|
Mark Shannon
|
c1b8f500c7
|
Python: Make sure packages have locations, so they can be displayed, even if those locations are meaningless.
|
2019-02-21 12:53:59 +00:00 |
|
Mark Shannon
|
76d1fba9f0
|
Python: Add a test for handling of corner-case strings.
|
2019-02-20 10:26:40 +00:00 |
|
Taus
|
1b25573cc0
|
Merge pull request #872 from markshannon/python-bottle
Python: Add support for bottle framework.
|
2019-02-18 12:34:44 +01:00 |
|
Mark Shannon
|
bcf4df840c
|
Convert ObjectOrCfg to IPA type for stronger type-checking.
|
2019-02-12 14:37:19 +00:00 |
|
Mark Shannon
|
b644891e53
|
Python: Fix up some typos for bottle and add a few more tests.
|
2019-02-12 14:26:06 +00:00 |
|
Mark Shannon
|
aab0a243dc
|
Python: Add redirects to bottle framework support.
|
2019-02-12 14:26:06 +00:00 |
|
Mark Shannon
|
d514fc543d
|
Python: Add responses to bottle framework support.
|
2019-02-12 14:26:06 +00:00 |
|
Mark Shannon
|
8d525e5295
|
Python: Add support for bottle framework routing and requests.
|
2019-02-12 14:26:06 +00:00 |
|
Taus
|
9caa9c10bc
|
Merge pull request #928 from markshannon/python-points-to-through-callsites
Python: Points-to should flow through call-sites if not assigned out of scope.
|
2019-02-12 14:41:12 +01:00 |
|
Taus
|
5b127eb676
|
Merge pull request #914 from markshannon/python-add-2-3-query-tests
Python: Add 2/3 specific query tests.
|
2019-02-12 12:54:29 +01:00 |
|
Taus
|
abc71cba4c
|
Merge pull request #913 from markshannon/python-add-3-library-tests
Python add 2/3 specific library tests
|
2019-02-12 12:54:15 +01:00 |
|
Mark Shannon
|
220b881096
|
Python: Points-to should flow through call-sites if not assigned outside of scope.
|
2019-02-12 09:57:45 +00:00 |
|
Mark Shannon
|
52ddd79cab
|
Python: Add 2/3 specific query tests.
|
2019-02-08 15:13:17 +00:00 |
|
Mark Shannon
|
adb4c42aa5
|
Python: Add 2-only library tests.
|
2019-02-08 14:49:04 +00:00 |
|
Mark Shannon
|
49307a72b4
|
Python: Add 3-only library tests.
|
2019-02-08 14:39:27 +00:00 |
|
Taus
|
90eccbdf76
|
Merge pull request #836 from markshannon/python-mutating-descriptor
Python: Fix up mutating-descriptor query
|
2019-02-08 15:10:30 +01:00 |
|
Taus Brock-Nannestad
|
895b237e3c
|
Python: Make "Modification of parameter with default" flow-sensitive.
|
2019-02-04 19:05:04 +01:00 |
|
Mark Shannon
|
24d678b869
|
Python: Points-to; let values with no boolean constant value flow through pi-nodes.
|
2019-01-31 15:15:49 +00:00 |
|
Mark Shannon
|
f190f83406
|
Python: Give most non-self instance attributes the 'unknown' value; improves reachability analysis.
|
2019-01-31 15:05:13 +00:00 |
|
Taus
|
83e2689645
|
Merge pull request #844 from markshannon/python-hide-magic-variables-in-test
Python tests: Further hiding of special ESSA variables in tests
|
2019-01-29 18:51:06 +01:00 |
|
Taus Brock-Nannestad
|
edd4468d08
|
Fix tests by stubbing relevant os functions.
|
2019-01-29 17:27:14 +01:00 |
|
Taus
|
6f7c96db54
|
Merge branch 'master' into python-unsafe-use-of-mktemp
|
2019-01-29 16:12:53 +01:00 |
|
Taus Brock-Nannestad
|
9a9d902cfb
|
Add support for os.tempnam and os.tmpnam.
|
2019-01-29 16:08:32 +01:00 |
|
Mark Shannon
|
9820249c71
|
Python tests: Further hiding of special ESSA variables in tests, to ease transition from '*' to '$' variable.
|
2019-01-29 15:06:47 +00:00 |
|
Mark Shannon
|
7fe3c3d516
|
Merge branch 'master' into python-mutating-descriptor
|
2019-01-29 14:46:33 +00:00 |
|
Taus
|
9adb19f3a9
|
Merge branch 'master' into python-incomplete-url-sanitize
|
2019-01-29 14:17:37 +01:00 |
|
Taus
|
1d28c63703
|
Merge pull request #810 from markshannon/python-hide-magic-variables
Python hide magic variables
|
2019-01-28 23:21:31 +01:00 |
|
Taus
|
0f5b21e392
|
Merge pull request #807 from markshannon/python-insecure-file-permission
Python: Weak file permissions query.
|
2019-01-28 23:21:10 +01:00 |
|
Taus
|
f61e7b66cc
|
Merge pull request #835 from markshannon/python-compare-is-enum
Python: Fix 'comparison using is' query to account for enum members.
|
2019-01-28 16:22:57 +01:00 |
|
Mark Shannon
|
6d553ae2be
|
Python: Check os.open as well as os.chmod for weak file permissions.
|
2019-01-28 14:26:16 +00:00 |
|
Mark Shannon
|
3992346add
|
Python: Fix up mutating-descriptor query to only flag mutation when they occur during descriptor protocol.
|
2019-01-28 12:57:18 +00:00 |
|
Mark Shannon
|
5da209f876
|
Python: add failing test for comparison using 'is' and enum members.
|
2019-01-28 12:19:54 +00:00 |
|
Mark Shannon
|
1bec219048
|
Python: Remove AST test (it will be added to the extractor tests).
|
2019-01-28 11:41:12 +00:00 |
|
Taus
|
fc00e0a64a
|
Merge pull request #796 from markshannon/python-import-used-in-doctest
Python: Fix 'unused import' for doctests and typehints.
|
2019-01-25 16:14:08 +01:00 |
|
Mark Shannon
|
88d8cb514c
|
Python: Two new queries for URL and hostname sanitization (CWE-020).
|
2019-01-24 12:57:14 +00:00 |
|
Taus
|
ffa8b12d48
|
Merge pull request #782 from markshannon/python-add-more-tests
Python: Add more tests
|
2019-01-23 14:04:23 +01:00 |
|
Mark Shannon
|
0ea2d56945
|
Python tests: Move helper predicate into TestUtils.qll
|
2019-01-23 11:20:04 +00:00 |
|
Mark Shannon
|
547b3eb973
|
Python: Fix 'unused import' to no longer give alerts for imported modules used in typehints.
|
2019-01-22 17:38:09 +00:00 |
|
Mark Shannon
|
19c43510a3
|
Python: Make test 2/3 compatible.
|
2019-01-22 14:01:44 +00:00 |
|