Mark Shannon
|
3c4c8cf7d3
|
Python: Add qhelp for new query.
|
2018-11-28 16:57:34 +00:00 |
|
Mark Shannon
|
1065ad0ce7
|
Python: Weak crypto query.
|
2018-11-28 16:57:34 +00:00 |
|
Mark Shannon
|
2bf98b805d
|
Python: Delete some misleading qhelp and rename a couple of queries.
|
2018-11-28 16:53:38 +00:00 |
|
Mark Shannon
|
21246dcbf2
|
Python: clean up change notes and query help.
|
2018-11-28 15:02:47 +00:00 |
|
Mark Shannon
|
eefb45c94b
|
Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.
|
2018-11-28 10:46:44 +00:00 |
|
Mark Shannon
|
1080525d7d
|
Python: Add missing test stub.
|
2018-11-28 10:45:48 +00:00 |
|
Mark Shannon
|
243280dc00
|
Python: New query to check for use of jinja2 templates without auto-escaping.
|
2018-11-28 10:45:19 +00:00 |
|
Mark Shannon
|
31ac33e723
|
Merge pull request #528 from taus-semmle/python-flask-debug
Python: Implement check for flask debug mode.
|
2018-11-27 19:42:26 +00:00 |
|
Taus Brock-Nannestad
|
7f94c257a7
|
Change precision to high.
|
2018-11-27 19:02:44 +01:00 |
|
Taus
|
2b340b4804
|
Merge pull request #530 from markshannon/python-no-cert-validation
New query to check for making a request without cert verification.
|
2018-11-27 19:01:10 +01:00 |
|
Mark Shannon
|
435b309852
|
Python: Add utility predicate for finding ModuleObject by name.
|
2018-11-27 17:06:40 +00:00 |
|
Taus Brock-Nannestad
|
6ebf504d97
|
Update test results after stub change.
|
2018-11-27 16:59:19 +01:00 |
|
Taus Brock-Nannestad
|
8d341ab467
|
Fix stub file.
|
2018-11-27 16:56:09 +01:00 |
|
Taus Brock-Nannestad
|
a4da245809
|
Python: Implement check for flask debug mode.
|
2018-11-27 15:14:38 +01:00 |
|
Mark Shannon
|
698957e2cf
|
Python: Correct case of query name and improve help.
|
2018-11-27 11:32:40 +00:00 |
|
Aditya Sharad
|
38095e2f96
|
Python: Add QL for VS workspace settings file.
|
2018-11-26 15:10:12 +00:00 |
|
Max Schaefer
|
a1772a9ae4
|
Merge pull request #543 from markshannon/python-backward-compat-default
Python: Add default.qll for backwards compatibility with older queries and libraries.
|
2018-11-26 11:27:17 +00:00 |
|
Mark Shannon
|
4d8f5e1020
|
Python: Add default.qll for backwards compatibility with older queries and libraries.
|
2018-11-26 11:25:28 +00:00 |
|
Taus
|
f0fbed76e7
|
Merge pull request #539 from markshannon/python-path-fix-siblings
Python: Fix parents relation for path queries.
|
2018-11-23 17:59:04 +01:00 |
|
Mark Shannon
|
3190b12544
|
Python: Fix parent relation for path-queries.
|
2018-11-23 15:04:01 +00:00 |
|
Mark Shannon
|
6588606739
|
Python: Account for other 'falsey' values in query.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
06e5bc8359
|
Python: Add qhelp for new query.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
45e864a395
|
Python: New query to test for requests without validation.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
f0206a2ff4
|
Python: Tests for new query: requests called with verify=False.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
b94493aec3
|
Python: Add extra sinks for command-injection query.
|
2018-11-23 14:29:02 +00:00 |
|
Mark Shannon
|
61bd8682df
|
Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.
|
2018-11-23 12:32:14 +00:00 |
|
Mark Shannon
|
c01db23f58
|
Python: Fix up expected results of SqlInjection.ql
|
2018-11-22 11:05:09 +00:00 |
|
Mark Shannon
|
bfb7e17ebf
|
Python: Move library to correct location.
|
2018-11-22 11:05:09 +00:00 |
|
Mark Shannon
|
f3fedcdf38
|
Python tests: Move security test stubs to correct location.
|
2018-11-22 11:05:09 +00:00 |
|
Mark Shannon
|
04e5b8927a
|
Python tests: use a more accurate form os os.path.join() in test lib.
|
2018-11-22 11:05:09 +00:00 |
|
Mark Shannon
|
88d82017b3
|
Python: Convert stack-trace-exposure query to path-problem.
|
2018-11-22 11:05:08 +00:00 |
|
Mark Shannon
|
2a24723cc3
|
Python: Update test results for path queries.
|
2018-11-22 11:05:08 +00:00 |
|
Mark Shannon
|
722d89fc75
|
Upgrade taint-tracking security queries to path-problem queries.
|
2018-11-22 11:05:01 +00:00 |
|
Taus
|
24bf2922e0
|
Merge pull request #515 from markshannon/python-add-metadata
Python tests: Add missing metadata files.
|
2018-11-21 15:45:32 +01:00 |
|
Taus
|
13d130dad0
|
Merge pull request #514 from markshannon/python-remove-architect-tests
Python tests: Remove some obsolete tests.
|
2018-11-21 15:45:21 +01:00 |
|
Mark Shannon
|
527c95cd0b
|
Python tests: Add missing metadata files.
|
2018-11-21 14:39:18 +00:00 |
|
Mark Shannon
|
976fed76b9
|
Python tests: Remove some obsolete tests.
|
2018-11-21 14:18:46 +00:00 |
|
Pavel Avgustinov
|
5cd3a9c40d
|
Merge pull request #500 from markshannon/python-python-security-queries-to-high
Python: Set precision of security queries to 'high'
|
2018-11-21 09:41:38 +00:00 |
|
Taus
|
7ba4d71ffb
|
Merge pull request #494 from markshannon/python-tests
QL tests for Python queries and libraries.
|
2018-11-20 16:00:06 +01:00 |
|
Mark Shannon
|
e930b43bf3
|
Python security queries. Choose a precision reflecting actual precision for Security queries.
|
2018-11-19 17:10:40 +00:00 |
|
Mark Shannon
|
c2e0ee1c47
|
Add .qlpath and .project files for Python queries.
|
2018-11-19 16:28:53 +00:00 |
|
Mark Shannon
|
05b69a1c0f
|
QL tests for Python queries and libraries.
|
2018-11-19 15:15:54 +00:00 |
|
Mark Shannon
|
5f58824d1b
|
Initial commit of Python queries and QL libraries.
|
2018-11-19 15:10:42 +00:00 |
|