131 Commits

Author	SHA1	Message	Date
jorgectf	3fe2a08376	Update .expected file	2021-11-16 15:03:49 +01:00
jorgectf	3dec222922	Merge remote-tracking branch 'origin/main' into jorgectf/python/jwt-queries	2021-10-28 13:11:46 +02:00
jorgectf	271e2e4c49	Update .expected	2021-10-16 13:12:33 +02:00
jorgectf	45146bc798	Merge branch 'main' into jorgectf/python/headerInjection	2021-10-16 12:46:57 +02:00
jorgectf	bf76d9cd8b	Fix django test	2021-10-16 10:45:25 +02:00
jorgectf	2db1ffef1e	Merge remote-tracking branch 'origin/main' into jorgectf/python/headerInjection	2021-10-16 10:40:52 +02:00
Rasmus Lerchedahl Petersen	61008fd3d0	Merge branch 'main' of github.com:github/codeql into python/promote-regex-injection	2021-10-12 11:28:12 +02:00
yoff	43f7eede0b	Merge pull request #6182 from haby0/python/LogInjection ... Python: CWE-117 Log injection	2021-10-12 10:54:45 +02:00
yoff	0629ce00de	Merge pull request #6214 from haby0/python/ClientSuppliedIpUsedInSecurityCheck ... [Python] CWE-348: Client supplied ip used in security check	2021-10-11 16:38:04 +02:00
haby0	c2d0fcfbe6	Update python/ql/test/experimental/query-tests/Security/CWE-348/ClientSuppliedIpUsedInSecurityCheck.expected ... Co-authored-by: yoff <lerchedahl@gmail.com>	2021-10-11 16:46:02 +08:00
haby0	29ddc76e2f	Update python/ql/test/experimental/query-tests/Security/CWE-117/LogInjection.expected ... Co-authored-by: yoff <lerchedahl@gmail.com>	2021-10-11 16:43:30 +08:00
Rasmus Wriedt Larsen	547cbb6322	Merge pull request #6331 from porcupineyhairs/pythonXpath ... Python : Improve Xpath Injection Query	2021-09-24 18:11:08 +02:00
Rasmus Wriedt Larsen	d39df18544	Python: Minor test cleanup	2021-09-24 16:11:27 +02:00
Rasmus Wriedt Larsen	26d2fbd217	Python: Fix new XPath injection query ... Fixes the typo `ETXpath` => `ETXPath`	2021-09-24 15:11:34 +02:00
Rasmus Wriedt Larsen	913a679ef5	Python: Replace old XPath injection query	2021-09-24 15:10:41 +02:00
Rasmus Wriedt Larsen	ef6e502ff0	Python: Make LDAP global options test better ... Before it didn't really showcase that we know it can make connections secure.	2021-09-23 10:18:18 +02:00
haby0	c60eded2de	Fix conflicting	2021-09-15 11:07:43 +08:00
Rasmus Lerchedahl Petersen	1c7982b319	Python: Move query tests over	2021-09-14 13:29:21 +02:00
jorgectf	b505662ef9	Fix global test and update .expected	2021-09-14 10:20:50 +02:00
jorgectf	2ccc6dc092	Merge branch 'main' into jorgectf/python/ldapinsecureauth	2021-09-14 09:32:19 +02:00
jorgectf	18b05bc56e	Fix tests and add global option	2021-09-12 20:35:57 +02:00
jorgectf	eee9b3f39e	Merge remote-tracking branch 'origin/main' into jorgectf/python/headerInjection	2021-09-07 19:54:58 +02:00
Anders Schack-Mulligen	f30dad7705	Dataflow: Update test expected outputs.	2021-09-07 13:02:20 +02:00
jorgectf	64b305cf7a	Add .qhelp along with its example	2021-08-26 23:29:45 +02:00
jorgectf	786edb72df	Update .expected	2021-08-26 12:36:34 +02:00
jorgectf	e6ce10b5c5	Merge remote-tracking branch 'origin/main' into jty/python/nosqlInjection	2021-08-10 20:01:08 +02:00
jorgectf	f9b244ecad	Polish documentation	2021-07-24 01:06:05 +02:00
jorgectf	b03e75e3d1	Extend ldap3's start_tls and fix tests	2021-07-22 18:42:41 +02:00
jorgectf	a34d6d390e	Port to ApiGraphs and finish the query	2021-07-22 18:34:57 +02:00
jorgectf	68f79f054b	Update .expected	2021-07-21 21:32:08 +02:00
jorgectf	8d84d63b94	Add Python-Jose modeling and tests	2021-07-21 21:31:53 +02:00
jorgectf	ce507beed4	Add Authlib modeling and tests	2021-07-21 21:31:35 +02:00
jorgectf	e14b10370e	Add indeterminate test to pyjwt	2021-07-21 21:30:54 +02:00
jorgectf	6f09b95019	Update .expected	2021-07-15 17:16:29 +02:00
${sleep,5}	51a6140258	Change variable name to correct sanitized input variable ... Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>	2021-07-13 14:04:06 -04:00
haby0	e8d0827916	Add tornado source	2021-07-05 10:42:15 +08:00
haby0	b866f1b21e	Add CWE-348 ClientSuppliedIpUsedInSecurityCheck	2021-07-02 19:30:33 +08:00
jorgectf	7fb44470ee	Add .expected results	2021-07-01 17:53:04 +02:00
jorgectf	07422a1dce	Move tests under test/	2021-07-01 17:51:00 +02:00
jorgectf	e02a63a27a	Delete trivial *_good.py tests	2021-06-29 23:03:41 +02:00
jorgectf	621a810b7b	Update .expected	2021-06-29 16:53:53 +02:00
jorgectf	9a8d1f8e0f	Take back non-trivial tests	2021-06-29 16:53:44 +02:00
jorgectf	68c683189a	Polish documentation, mongoCollectionMethod() and update .expected	2021-06-28 20:55:49 +02:00
jorgectf	3fd1129895	Delete trivial tests	2021-06-28 20:18:31 +02:00
jorgectf	0ca4f240d9	Merge tests and update .expected	2021-06-28 20:13:53 +02:00
jorgectf	1d432af498	Update .expected	2021-06-28 14:18:27 +02:00
jorgectf	1d4d8ab6e0	Fix tests	2021-06-28 14:16:52 +02:00
Rasmus Wriedt Larsen	b33f6a315c	Python: Fix select for py/improper-ldap-auth	2021-06-28 10:54:21 +02:00
Rasmus Wriedt Larsen	dfe16aae4c	Python: Handle both positional and keyword args for LDAP bind	2021-06-28 10:46:13 +02:00
jorgectf	eac5254a88	Resolve merge conflict	2021-06-18 02:12:49 +02:00