9600 Commits

Author	SHA1	Message	Date
Mark Shannon	f11b5ab42f	Python ESSA: Fix performance of PythonSsaSourceVariable.hasRefinementEdge()	2018-12-01 16:36:49 +00:00
Mark Shannon	9aa59fd419	Fix spelling.	2018-11-29 18:11:57 +00:00
Mark Shannon	931122971d	Python points-to: Improve performance by factoring out handling of tuples in class tests.	2018-11-29 16:27:50 +00:00
Mark Shannon	8414d46a87	Python: Fix accidentally introduced cartesian product.	2018-11-29 14:19:47 +00:00
Mark Shannon	a345727f71	Python fix up tags in qhelp.	2018-11-28 17:14:07 +00:00
Mark Shannon	b3eaa46f14	Python: Use consistent abbreviations in weak-crypto query message.	2018-11-28 16:58:22 +00:00
Mark Shannon	4f0a666a43	Python: Tweak name of new query and add change note.	2018-11-28 16:58:22 +00:00
Mark Shannon	3c4c8cf7d3	Python: Add qhelp for new query.	2018-11-28 16:57:34 +00:00
Mark Shannon	1065ad0ce7	Python: Weak crypto query.	2018-11-28 16:57:34 +00:00
Mark Shannon	2bf98b805d	Python: Delete some misleading qhelp and rename a couple of queries.	2018-11-28 16:53:38 +00:00
Mark Shannon	21246dcbf2	Python: clean up change notes and query help.	2018-11-28 15:02:47 +00:00
Mark Shannon	eefb45c94b	Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.	2018-11-28 10:46:44 +00:00
Mark Shannon	1080525d7d	Python: Add missing test stub.	2018-11-28 10:45:48 +00:00
Mark Shannon	243280dc00	Python: New query to check for use of jinja2 templates without auto-escaping.	2018-11-28 10:45:19 +00:00
Mark Shannon	31ac33e723	Merge pull request #528 from taus-semmle/python-flask-debug ... Python: Implement check for flask debug mode.	2018-11-27 19:42:26 +00:00
Taus Brock-Nannestad	7f94c257a7	Change precision to high.	2018-11-27 19:02:44 +01:00
Taus	2b340b4804	Merge pull request #530 from markshannon/python-no-cert-validation ... New query to check for making a request without cert verification.	2018-11-27 19:01:10 +01:00
Mark Shannon	435b309852	Python: Add utility predicate for finding ModuleObject by name.	2018-11-27 17:06:40 +00:00
Taus Brock-Nannestad	6ebf504d97	Update test results after stub change.	2018-11-27 16:59:19 +01:00
Taus Brock-Nannestad	8d341ab467	Fix stub file.	2018-11-27 16:56:09 +01:00
Taus Brock-Nannestad	a4da245809	Python: Implement check for flask debug mode.	2018-11-27 15:14:38 +01:00
Mark Shannon	698957e2cf	Python: Correct case of query name and improve help.	2018-11-27 11:32:40 +00:00
Aditya Sharad	38095e2f96	Python: Add QL for VS workspace settings file.	2018-11-26 15:10:12 +00:00
Max Schaefer	a1772a9ae4	Merge pull request #543 from markshannon/python-backward-compat-default ... Python: Add default.qll for backwards compatibility with older queries and libraries.	2018-11-26 11:27:17 +00:00
Mark Shannon	4d8f5e1020	Python: Add default.qll for backwards compatibility with older queries and libraries.	2018-11-26 11:25:28 +00:00
Taus	f0fbed76e7	Merge pull request #539 from markshannon/python-path-fix-siblings ... Python: Fix parents relation for path queries.	2018-11-23 17:59:04 +01:00
Mark Shannon	3190b12544	Python: Fix parent relation for path-queries.	2018-11-23 15:04:01 +00:00
Mark Shannon	6588606739	Python: Account for other 'falsey' values in query.	2018-11-23 14:42:45 +00:00
Mark Shannon	06e5bc8359	Python: Add qhelp for new query.	2018-11-23 14:42:45 +00:00
Mark Shannon	45e864a395	Python: New query to test for requests without validation.	2018-11-23 14:42:45 +00:00
Mark Shannon	f0206a2ff4	Python: Tests for new query: requests called with verify=False.	2018-11-23 14:42:45 +00:00
Mark Shannon	b94493aec3	Python: Add extra sinks for command-injection query.	2018-11-23 14:29:02 +00:00
Mark Shannon	61bd8682df	Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.	2018-11-23 12:32:14 +00:00
Mark Shannon	c01db23f58	Python: Fix up expected results of SqlInjection.ql	2018-11-22 11:05:09 +00:00
Mark Shannon	bfb7e17ebf	Python: Move library to correct location.	2018-11-22 11:05:09 +00:00
Mark Shannon	f3fedcdf38	Python tests: Move security test stubs to correct location.	2018-11-22 11:05:09 +00:00
Mark Shannon	04e5b8927a	Python tests: use a more accurate form os os.path.join() in test lib.	2018-11-22 11:05:09 +00:00
Mark Shannon	88d82017b3	Python: Convert stack-trace-exposure query to path-problem.	2018-11-22 11:05:08 +00:00
Mark Shannon	2a24723cc3	Python: Update test results for path queries.	2018-11-22 11:05:08 +00:00
Mark Shannon	722d89fc75	Upgrade taint-tracking security queries to path-problem queries.	2018-11-22 11:05:01 +00:00
Taus	24bf2922e0	Merge pull request #515 from markshannon/python-add-metadata ... Python tests: Add missing metadata files.	2018-11-21 15:45:32 +01:00
Taus	13d130dad0	Merge pull request #514 from markshannon/python-remove-architect-tests ... Python tests: Remove some obsolete tests.	2018-11-21 15:45:21 +01:00
Mark Shannon	527c95cd0b	Python tests: Add missing metadata files.	2018-11-21 14:39:18 +00:00
Mark Shannon	976fed76b9	Python tests: Remove some obsolete tests.	2018-11-21 14:18:46 +00:00
Pavel Avgustinov	5cd3a9c40d	Merge pull request #500 from markshannon/python-python-security-queries-to-high ... Python: Set precision of security queries to 'high'	2018-11-21 09:41:38 +00:00
Taus	7ba4d71ffb	Merge pull request #494 from markshannon/python-tests ... QL tests for Python queries and libraries.	2018-11-20 16:00:06 +01:00
Mark Shannon	e930b43bf3	Python security queries. Choose a precision reflecting actual precision for Security queries.	2018-11-19 17:10:40 +00:00
Mark Shannon	c2e0ee1c47	Add .qlpath and .project files for Python queries.	2018-11-19 16:28:53 +00:00
Mark Shannon	05b69a1c0f	QL tests for Python queries and libraries.	2018-11-19 15:15:54 +00:00
Mark Shannon	5f58824d1b	Initial commit of Python queries and QL libraries.	2018-11-19 15:10:42 +00:00