Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
Rasmus Wriedt Larsen
72687e0368
Merge branch 'main' into automated-subclass-models
2023-12-19 17:08:25 +01:00
Rasmus Wriedt Larsen
fa3e16adea
Python: Refactor taint-sinks meta queries
2023-12-19 17:07:01 +01:00
Taus
5920a8fad6
Python: Add meta-query for "interesting" taint sinks
2023-12-08 11:27:52 +01:00
Rasmus Wriedt Larsen
c952f6a648
Python: Update rest of tests to new dataflow lib
...
I had missed these originally, since I had just fixed the ones that were
highlighted in the actions logs, thinking they had covered everything :(
2023-12-04 14:49:40 +01:00
Rasmus Wriedt Larsen
d7ad5a0f23
Python: List NoSQL injection sinks
2023-09-29 13:54:21 +02:00
Rasmus Wriedt Larsen
16e1a00e88
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00
Rasmus Lerchedahl Petersen
74d6f37467
Python: update meta query TaintSinks
2023-09-29 12:02:16 +02:00
Rasmus Wriedt Larsen
d7aea228ce
Python: Add taint-sinks meta query
...
Inspired by the one they have in JS:
097d5189e9/javascript/ql/src/meta/alerts/TaintSinks.ql
2022-11-29 15:10:09 +01:00
Rasmus Wriedt Larsen
60527dfc17
Python: Fix py/meta/alerts/remote-flow-sources-reach
2022-10-04 14:42:51 +02:00
erik-krogh
26d8553f6e
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Rasmus Wriedt Larsen
c2632cff3d
Python: Add RequestHandler meta query
2021-11-02 15:41:57 +01:00
yoff
c7146ac10c
Update python/ql/src/meta/alerts/RemoteFlowSourcesReach.ql
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswl@github.com >
2021-09-06 16:00:58 +02:00
Rasmus Wriedt Larsen
ce4b192caa
Python: Improve usefulness of RemoteFlowSourcesReach meta query
...
Before, results from `dca` would look something like
## + py/meta/alerts/remote-flow-sources-reach
- django/django@c2250cf_cb8f: tests/messages_tests/urls.py:38:16:38:48
reachable with taint-tracking from RemoteFlowSource
- django/django@c2250cf_cb8f: tests/messages_tests/urls.py:38:9:38:12
reachable with taint-tracking from RemoteFlowSource
now it should make it easier to spot _what_ it is that actually changed,
since we pretty-print the node.
2021-07-21 16:35:09 +02:00
Rasmus Wriedt Larsen
6aabbf0b9a
Python: Add some alert meta queries
...
Intended for use with dca
2021-07-21 14:53:01 +02:00
