Taus
55dc75615a
Python: Add Peewee model
2023-11-13 13:56:00 +01:00
Taus
f0102be052
Python: Add Pydantic model
2023-11-13 13:56:00 +01:00
Taus
c2df81a838
Python: Add logging.Logger model
2023-11-13 13:56:00 +01:00
Taus
94e0bc06c7
Python: Add Urllib3 model
2023-11-13 13:56:00 +01:00
Taus
0844563523
Python: Add Tornado models
2023-11-13 13:56:00 +01:00
Taus
5016c5568c
Python: add some stdlib models
2023-11-13 13:56:00 +01:00
Taus
359a162522
Python: Add starlette.requests.URL model
2023-11-13 13:56:00 +01:00
Taus
1c0af9d759
Python: Add SqlAlchemy model
2023-11-13 13:56:00 +01:00
Taus
84ba18cfc2
Python: Add rest_framework model
2023-11-13 13:56:00 +01:00
Taus
e060cfc554
Python: Add Pycurl model
2023-11-13 13:56:00 +01:00
Taus
ebd9802e74
Python: add MultiDict model
2023-11-13 13:55:59 +01:00
Taus
1178894ad4
Python: Add MarkupSafe model
2023-11-13 13:55:59 +01:00
Taus
c08587c84c
Python: Add invoke model
2023-11-13 13:55:59 +01:00
Taus
4f75e5fa5c
Python: Add httpx model
2023-11-13 13:55:59 +01:00
Taus
da01b95801
Python: Add Flask app and blueprint models
2023-11-13 13:55:59 +01:00
Taus
e1e4ec8936
Python: Add Django RawSQL and HttpRequest models
2023-11-13 13:55:59 +01:00
Taus
8500acd996
Python: Add fabric connection model
2023-11-13 13:55:59 +01:00
Taus
0d20a712fd
Python: Add aiohttp.ClientSession model
2023-11-13 13:55:59 +01:00
Taus
7acf287c70
Python: Add clickhouse_driver model
2023-11-13 13:55:59 +01:00
Taus
71b9bd3f21
Python: Add starlette.websocket model
2023-11-13 13:55:59 +01:00
Rasmus Wriedt Larsen
215c954dea
Python: Improve speed of process-mrva-results.py
...
Same trick as 'generate-code-scanning-query-list.py'
2023-11-13 13:55:59 +01:00
Taus
92b5ac8b6a
Python: Add http.client.HTTPResponse model
2023-11-13 13:55:59 +01:00
Taus
e860d5e1e5
Python: Add Requests response model
...
This required making some of the relevant bits public, but they are marked as internal anyway.
2023-11-13 13:55:59 +01:00
Taus
e34e0a0426
Python: Add Flask response model
2023-11-13 13:55:58 +01:00
Taus
332423dd25
Python: Add Django response models
2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
3a1a8ad4fc
Python: Enable auto-model for Django Model
2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
a15af39007
Python: Enable auto-model for cgi.FieldStorage
2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
ef6113c45c
Python: Enable auto-model BaseHttpRequestHandler
2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
9fe02edf9a
Python: Allow any results.bqrs file
2023-11-13 13:55:58 +01:00
Rasmus Wriedt Larsen
7949403bd8
Python: Automodel for WSGIServer
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
a23fe366a1
Python: Automodel for tornado
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
d4acc704a4
Python: Sort MaD rows
...
(makes future diffing much easier)
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
fd7de0ee92
FIXME already fixed
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
8121debbd7
Python: Add script to process results from MRVA (bqrs files)
...
Also makes `empty.model.yml` empty once again
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
afc00567f0
Python: Add query metadata
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
4d69cb33eb
Python: Streamline what modules to allow for now
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
a6a09b4a7a
WIP rest of modeling done so far
2023-11-13 13:55:57 +01:00
Rasmus Wriedt Larsen
7d6d9a7420
WIP: Flask View class modeling for restplus
...
Based on some DBs I had that contained dependencies
2023-11-13 13:55:57 +01:00
yoff
dbecb1bd0f
Merge pull request #14070 from yoff/python/promote-nosql-query
...
Python: promote nosql query
2023-09-29 14:21:22 +02:00
Rasmus Wriedt Larsen
d7ad5a0f23
Python: List NoSQL injection sinks
2023-09-29 13:54:21 +02:00
Rasmus Wriedt Larsen
16e1a00e88
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00
Rasmus Lerchedahl Petersen
74d6f37467
Python: update meta query TaintSinks
2023-09-29 12:02:16 +02:00
Rasmus Wriedt Larsen
fd8d186b34
Python: Add debug queries
...
For manually debugging things, it's nice to be able to share debug
queries.
I had the DebugStats.ql lying around from way back, and thought it was
kinda cute. I've extended it with a bunch of things, not too sure if
they're all important, but I think it's kinda fun to see the
distribution of things 😊
2023-09-18 20:46:52 +02:00
Asger F
75fd20b3b8
Python: add meta-query for calls to summarized callables
2023-05-26 11:40:58 +02:00
Rasmus Wriedt Larsen
a3b7273844
Python: Fix duplicated meta query id
2023-01-16 20:33:28 +01:00
Rasmus Wriedt Larsen
a826c4f48b
Merge branch 'main' into call-graph-code
2022-12-08 11:39:30 +01:00
Rasmus Wriedt Larsen
d47b3265c4
Python: Fix py/meta/points-to-call-graph
2022-12-01 14:56:10 +01:00
Rasmus Wriedt Larsen
607639c100
Python: restrict py/meta/points-to-call-graph to non-ignored files
2022-11-29 15:10:45 +01:00
Rasmus Wriedt Larsen
d7aea228ce
Python: Add taint-sinks meta query
...
Inspired by the one they have in JS:
097d5189e9/javascript/ql/src/meta/alerts/TaintSinks.ql
2022-11-29 15:10:09 +01:00
Rasmus Wriedt Larsen
69b43f147a
Python: Fix ql4ql alerts
...
The rest will be ignored.
2022-11-22 16:24:47 +01:00