Rasmus Wriedt Larsen
6f08e73dbc
Python: Move UnsafeDeserialization to new dataflow API
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
dd074173d2
Python: Move WeakSensitiveDataHashing to new dataflow API
...
I adopted helper predicates to do the "heavy" lifting of .asPathNode1(), maybe I like this approach better... let me know what you think 😊
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
9d6b96dfd2
Python: Move CleartextStorage to new dataflow API
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
70095446b6
Python: Move CleartextLogging to new dataflow API
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
cca78f31ff
Python: Move PamAuthorization to new dataflow API
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
dcd96083e8
Python: Move StackTraceExposure to new dataflow API
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
f75e65c67d
Python: Move LogInjection to new dataflow API
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
88cf9c99b0
Python: Move CodeInjection to new dataflow API
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
05573904a5
Python: Move LdapInjection to new dataflow API
...
We could have switched to a stateful config, but I tried to keep changes
as straight forward as possible.
2023-08-28 15:27:50 +02:00
Rasmus Wriedt Larsen
c360346e9e
Python: Move ReflectedXss to new dataflow API
2023-08-28 15:27:49 +02:00
Rasmus Wriedt Larsen
b30142c1d7
Python: Move CommandInjection to new dataflow API
2023-08-28 15:27:49 +02:00
Rasmus Wriedt Larsen
700841e9b0
Python: Move UnsafeShellCommandConstruction to new dataflow API
2023-08-28 15:27:49 +02:00
Rasmus Wriedt Larsen
d4e4e2d426
Python: Move TarSlip to new dataflow API
2023-08-28 15:27:49 +02:00
Rasmus Wriedt Larsen
e97032909a
Python: Move PathInjection to new dataflow API
2023-08-28 15:27:49 +02:00
Rasmus Wriedt Larsen
245c24077d
Python: Move SqlInjection to new dataflow API
2023-08-28 15:27:49 +02:00
Rasmus Wriedt Larsen
0f242475f2
Merge branch 'main' into experimental-cleanup
2023-08-28 11:01:22 +02:00
Rasmus Wriedt Larsen
0dca8a5d86
Python: Remove old points-to modeling file
...
Since all of this was ported already
2023-08-28 10:40:45 +02:00
Rasmus Wriedt Larsen
39e2b133e9
Python: Fix naming
2023-08-28 10:40:33 +02:00
yoff
00c0ebe9e4
Merge pull request #13738 from RasmusWL/path-steps
...
Python: Include all assignments in data flow paths
2023-08-22 11:58:11 +02:00
github-actions[bot]
098dfb4242
Release preparation for version 2.14.3
2023-08-18 14:48:15 +00:00
Rasmus Wriedt Larsen
4c693b4fc3
Python: Port py/xslt-injection to new data-flow
2023-08-17 15:45:07 +02:00
Rasmus Wriedt Larsen
779fe6498c
Python: Rename to XsltInjection.ql
2023-08-17 15:45:07 +02:00
Rasmus Wriedt Larsen
91edde72c4
Python: Port py/template-injection to new data-flow
...
I kept all the modeling in _one_ file, since that makes it easy to work
with such an external contribution... and I would certainly propose this
file setup for the future 👍
2023-08-17 15:44:26 +02:00
Rasmus Wriedt Larsen
4277be5819
Python: Add change-note
2023-08-17 10:46:36 +02:00
Rasmus Wriedt Larsen
24f9f13790
Python: Fix tests
2023-08-17 10:15:36 +02:00
amammad
eb5529eac5
sanitize resutls exist in test/demo/example/sample directories
2023-08-14 23:48:03 +10:00
Rasmus Wriedt Larsen
1c3cc1fa29
Python: Remove flow through stdlib
...
This means tests can pass on any machine now 👍
2023-08-14 11:55:22 +02:00
Rasmus Wriedt Larsen
6e168ff7d8
Python: Only interested in StrConst
2023-08-14 11:46:21 +02:00
Rasmus Wriedt Larsen
0fba38c6d8
Merge branch 'main' into amammad-python-WebAppsConstatntSecretKeys
2023-08-14 11:29:56 +02:00
Rasmus Wriedt Larsen
eeefdc5dcd
Python: Fix formatting
2023-08-14 11:29:38 +02:00
github-actions[bot]
432c21d4fb
Post-release preparation for codeql-cli-2.14.2
2023-08-09 18:45:18 +00:00
github-actions[bot]
79c90fa36a
Release preparation for version 2.14.2
2023-08-07 18:08:52 +00:00
amammad
bee8e6ff0d
remove unused saniter
2023-07-27 01:41:31 +10:00
amammad
591d81b5f9
remove saniter which was responsible for a defensive technique
2023-07-26 02:39:10 +10:00
amammad
1e1d42fa35
fix a mistake :(
2023-07-25 00:11:23 +10:00
amammad
7aff0079f5
better safe Flask example
2023-07-25 00:08:51 +10:00
amammad
0e8f83460c
a little bit change on flask example
2023-07-24 21:41:54 +10:00
amammad
bbba906ff1
a little bit change on flask example
2023-07-24 21:41:44 +10:00
amammad
6f8ec118df
fix qlhelp and qldoc bugs
2023-07-24 17:15:43 +10:00
amammad
c704158150
remove sources which are contained from environment variables, fix some bugs thanks to @yoff
2023-07-24 17:06:27 +10:00
github-actions[bot]
f91b7a9342
Post-release preparation for codeql-cli-2.14.1
2023-07-21 16:16:25 +00:00
github-actions[bot]
c936a920b0
Release preparation for version 2.14.1
2023-07-20 16:32:27 +00:00
Rasmus Wriedt Larsen
13fa08a90a
Python: Move source modeling to shared file
2023-07-14 14:47:50 +02:00
Rasmus Wriedt Larsen
8279cf7c9c
Merge branch 'main' into amammad-python-WebAppsConstatntSecretKeys
2023-07-14 14:32:43 +02:00
Mathias Vorreiter Pedersen
44f23bfa59
Merge pull request #13690 from github/post-release-prep/codeql-cli-2.14.0
...
Post-release preparation for codeql-cli-2.14.0
2023-07-07 23:39:38 +01:00
github-actions[bot]
13cf054a9d
Post-release preparation for codeql-cli-2.14.0
2023-07-07 14:55:41 +00:00
Rasmus Wriedt Larsen
a850a481d0
Merge pull request #13676 from RasmusWL/aiohttp-ssrf-sink
...
Python: Relax restriction of flow through `async with`
2023-07-07 14:55:57 +02:00
github-actions[bot]
6484ee106e
Release preparation for version 2.14.0
2023-07-07 08:22:14 +00:00
Dave Bartolomeo
9631e9f2f1
Bump minor version numbers post-GHES
2023-07-06 10:10:01 -04:00
Dave Bartolomeo
2bb9adfbf1
Merge remote-tracking branch 'origin/main' into dbartol/mergeback-3.10
2023-07-06 10:00:46 -04:00
