562 Commits

Author	SHA1	Message	Date
Joe Farebrother	cb7b1efe81	Update alert message	2025-09-25 09:52:27 +01:00
Joe Farebrother	9f5bfeb7f4	Update test output	2025-09-24 15:03:40 +01:00
Joe Farebrother	2cffb21604	Update and fix tests	2025-09-23 15:41:09 +01:00
Joe Farebrother	d28e8004fd	Add sensitive data heuristic	2025-09-23 10:08:08 +01:00
Joe Farebrother	2e95c2b3c2	Split test cases for insecure cookie queries	2025-09-19 14:41:02 +01:00
Napalys Klicius	e60d0c88f1	Python: Add global variable nested field jump steps	2025-09-16 18:08:53 +02:00
Napalys Klicius	6c779c7fa5	Python: Added extra test cases for path injection with FastAPI	2025-09-16 18:08:53 +02:00
Napalys Klicius	f209e3a0fe	Python: Updated PathInjection tests to use inline test expectations	2025-09-16 18:08:53 +02:00
Napalys Klicius	638f6498f0	Removed lxml.etree.XMLParser from xml bomb sinks	2025-07-15 13:43:00 +02:00
Michael Nebel	2321ca59f6	Python: Update all test util paths to point to the new location.	2024-12-12 13:54:30 +01:00
Joe Farebrother	462be46be9	Update test output	2024-12-09 19:57:52 +00:00
Joe Farebrother	1cb01a286d	Add tests for jinja	2024-12-09 19:55:36 +00:00
Jeroen Ketema	c3ea883b11	Python: Update expected test results	2024-12-03 19:18:57 +01:00
Tom Hvitved	e5f2bbb6ec	Python: Post-processing query for inline test expectations	2024-10-29 13:35:37 +01:00
Rasmus Lerchedahl Petersen	bb78c2a67e	Python: update test expectations	2024-10-11 15:36:44 +02:00
Rasmus Lerchedahl Petersen	a4c1a622b7	Merge branch 'main' of https://github.com/github/codeql into python/add-comprehension-capture-flow	2024-10-04 14:53:03 +02:00
Rasmus Lerchedahl Petersen	a22ea6c1c8	Python: use known sanitiser ... - also adjust test expectations in experimental	2024-09-30 14:22:17 +02:00
Rasmus Wriedt Larsen	431a1af628	Merge branch 'main' into threat-models	2024-09-26 11:44:24 +02:00
Taus	8c015b0784	Merge pull request #17305 from Kwstubbs/CORSMiddleware-Starlette ... Python: Add Support for CORS Middlewares	2024-09-24 15:51:49 +02:00
Rasmus Wriedt Larsen	4a21a85e73	Merge branch 'main' into threat-models	2024-09-23 11:19:58 +02:00
Kevin Stubbings	7657b3e115	Fix tests	2024-09-12 21:30:32 -07:00
Rasmus Wriedt Larsen	a0b24d6194	Python: Add e2e threat-model test	2024-09-10 14:32:38 +02:00
Joe Farebrother	a8591c79c5	Update test	2024-08-28 09:11:34 +01:00
Joe Farebrother	fc24ca304d	Update tests	2024-08-27 14:18:50 +01:00
Kevin Stubbings	8bf8893307	Add support for vulnerable CORS middlewares	2024-08-26 21:30:48 -07:00
Joe Farebrother	1127b08635	Merge branch 'main' into python-cookie-concept-promote	2024-07-29 10:26:03 +01:00
Joe Farebrother	93f70b3ad9	Add unit tests	2024-07-23 10:15:23 +01:00
Joe Farebrother	8d93c3a852	Move to cwe-20	2024-07-16 16:50:08 +01:00
Joe Farebrother	983bdb92a1	Add test cases + remove redundant import	2024-07-16 16:50:00 +01:00
Joe Farebrother	93f10fcf14	Add sanitizers for compiled regexes	2024-06-11 15:44:16 +01:00
Joe Farebrother	9331c2c33a	Add tests	2024-06-04 09:39:37 +01:00
Anders Schack-Mulligen	987d5712b8	Python: Accept qltest .expected file changes.	2024-05-22 15:43:49 +02:00
Joe Farebrother	01a6c5e82f	Merge pull request #16446 from joefarebrother/shared-sensitive-heuristics ... Ruby/Python/JS/Swift: Add category of Private information to shared sensitive data heuristics	2024-05-21 09:07:13 +01:00
Rasmus Lerchedahl Petersen	a568873a8e	Python: update test expectations	2024-05-17 10:59:49 +02:00
Rasmus Lerchedahl Petersen	4378924785	Python: Example use of provenance for additional taint steps	2024-05-16 14:04:35 +02:00
Joe Farebrother	f1ab3f40f3	Add unit tests	2024-05-09 09:47:44 +01:00
Joe Farebrother	ab23d0ad23	Merge branch 'main' into python-promote-header-injection	2024-05-08 13:49:00 +01:00
Joe Farebrother	efda63d37a	Update test output	2024-05-07 10:49:55 +01:00
Joe Farebrother	0f7325ec68	Rename test directory and add comment to clarity on the purpose of splitting them.	2024-05-07 09:40:55 +01:00
Joe Farebrother	53f69d9966	Reduce query tests with cases covered by concept tests	2024-04-24 14:05:42 +01:00
Joe Farebrother	49e5f8a1a5	Add tests for instances of the header write concept	2024-04-24 14:05:40 +01:00
Joe Farebrother	f3b27d611a	Add test case for validated wsgiref servers + fix typo	2024-04-24 14:05:40 +01:00
Joe Farebrother	d4a072818f	Add more tests	2024-04-24 14:05:40 +01:00
Joe Farebrother	fa28d94363	Added a sanitizer for replacing newlines.	2024-04-24 14:05:38 +01:00
Joe Farebrother	a88ad62c00	Implemented sinks for bulk header updates, and added corresponding tests.	2024-04-24 14:05:38 +01:00
Joe Farebrother	3e9341ff8a	Model class instantiation for werkzueg headers	2024-04-24 14:05:37 +01:00
Joe Farebrother	b9984beb16	Add test cases	2024-04-24 14:05:37 +01:00
Rasmus Wriedt Larsen	bb00d6919a	Python: Move dataflow TestUtil to importable location	2024-04-23 09:40:59 +02:00
Taus	58eaddf627	Python: Update all .expected files ... I'm beginning to realise why I didn't do the `toString` overriding way back when. Thankfully, now that all of our tests are in the same place, this is actually not a terrible ordeal.	2024-04-22 12:00:09 +00:00
Anders Schack-Mulligen	cbcdf1f8b5	Python: Update expected output (interesting).	2024-04-12 09:20:33 +02:00