Taus
34800d1519
Merge pull request #20945 from joefarebrother/python-websockets
...
Python: Model remote flow sources for the `websockets` library
2026-01-29 15:47:46 +01:00
Joe Farebrother
384e17a4ef
Implement websockets models
2025-12-01 16:24:59 +00:00
Joe Farebrother
a83c70f99d
Add tests
2025-11-24 11:03:16 +00:00
Napalys Klicius
e1fc0ca051
Added implementation hdbcli as part of PEP249::PEP249ModuleApiNode
2025-05-01 14:18:02 +02:00
Joe Farebrother
ebaab89933
Formatting updates
2024-12-09 19:57:25 +00:00
Joe Farebrother
b2c13fe351
Promote template injection sinks for each framework covered
...
`Cheetah` was excluded as it was last updated 15 years ago and its documentation links are dead.
2024-12-09 19:55:17 +00:00
Kevin Stubbings
326eb6946e
Added
2024-08-30 18:17:38 -07:00
Sylwia Budzynska
6d1c00742f
Add tests and change note
2024-07-26 14:15:43 +02:00
am0o0
8a7fdfa6fe
fix conflict
2024-06-18 17:18:59 +02:00
Rasmus Wriedt Larsen
dd8b65130e
Merge pull request #16598 from jorgectf/jorgectf/opml-models
...
Python: Add models for `opml`
2024-06-04 10:16:26 +02:00
Jorge
34230369bc
Add OPML module to frameworks imports
2024-05-27 09:48:49 +00:00
yoff
5076b1a214
Merge pull request #16135 from sylwia-budzynska/gradio-model
...
Python: Add Gradio models
2024-05-16 09:00:50 +02:00
Joe Farebrother
88e3227ed0
Add pyramid models
2024-04-22 13:27:18 +01:00
Sylwia Budzynska
bed0d5678d
Add Gradio models
2024-04-05 14:14:21 +02:00
amammad
ab219902a9
add jsonpickle and pexpect libs in case of unsafe decoding and secondary command execution, add proper test cases
2024-02-25 17:15:35 +04:00
amammad
385c3ba7ff
continue to convert paramiko query to a more general query,
...
the proxy command is not a secondary command execution
so we can add proxy command to SystemCommandExecution::Range, update QLDocs,
add a proper Paramiko test case
fix a typo
2024-02-25 01:18:34 +04:00
amammad
076faa3a4e
add pyTorch :) code execution sinks, add proper tests
2024-02-24 15:55:33 +04:00
Rasmus Wriedt Larsen
3f0dc2b022
Python: Model the psycopg package
2024-01-29 14:30:20 +01:00
amammad
ad756d59c8
put new frameworks in Frameworks.qll and fix some mistakes of Baize
2023-11-06 19:17:50 +01:00
Rasmus Wriedt Larsen
92b13c4259
Merge branch 'main' into amammad-python-FileSystemAccess
2023-11-06 11:30:09 +01:00
amammad
a0e2e1ef21
add to Frameworks.qll
2023-10-21 19:49:27 +02:00
Rasmus Wriedt Larsen
2d947a4f53
Merge pull request #13781 from maikypedia/maikypedia/python-unsafe-deserialization
...
Python: Add unsafe deserialization sinks (CWE-502)
2023-10-10 13:30:38 +02:00
amammad
6c8cc79b4d
v1
2023-10-08 21:24:54 +02:00
Rasmus Lerchedahl Petersen
a8e0023f39
Python: forgot to list framework
2023-09-28 13:42:33 +02:00
Rasmus Lerchedahl Petersen
9682c8218a
Python: rename file
2023-09-28 12:54:05 +02:00
Rasmus Wriedt Larsen
db7b1eea55
Merge branch 'main' into maikypedia/python-unsafe-deserialization
2023-09-25 10:29:18 +02:00
Rasmus Wriedt Larsen
f515559e56
Python: Sort Frameworks.qll
2023-09-25 10:25:43 +02:00
Rasmus Lerchedahl Petersen
60dc1afbc0
Python: prepare to promote NoSqlInjection
...
Mostly move files, preserving authourship.
This will not compile.
2023-09-07 09:28:29 +02:00
Maiky
a1782182dd
Python: Add unsafe deserialization sinks (CWE-502)
2023-07-20 03:26:22 +02:00
Rasmus Lerchedahl Petersen
4d2ce6b2e0
python: create shared serverless module and use it
...
Modelled on the javascript serverless module, but
- The predicate that reports YAML files is now public
so languages can implement their own file conventions.
- It also reports framework and runtime.
- The conveninece predicates with files still exist,
but they only report the path.
- Handler mapping conventions are now documented.
- Use parameterised serverless module in Python,
tests now pass.
2023-07-12 16:42:01 +02:00
Rasmus Wriedt Larsen
7b3f710e91
Python: Model aiosqlite
2023-03-22 15:51:47 +01:00
Rasmus Wriedt Larsen
170a93cc4f
Python: Model cassandra-driver PyPI package
2023-03-22 10:28:04 +01:00
erik-krogh
47a06d2824
add library inputs as a source, and get minimal test to work
2023-02-03 14:47:55 +01:00
Sylwia Budzynska
e291d61bc7
Add oracledb model
2022-10-13 18:08:47 +02:00
sylwia-budzynska
c33dd8fd4b
Merge branch 'main' into python-db-models
2022-10-13 16:48:50 +02:00
sylwia-budzynska
fec3ab7e01
Update Frameworks.qll
2022-10-13 12:46:20 +02:00
Sylwia Budzynska
e41d79e37d
Add python cx_oracle, phoenixdb, pyodbc models
2022-10-13 12:36:41 +02:00
Sylwia Budzynska
319923f445
Add python cx_oracle, phoenixdb, pyodbc models
2022-10-11 15:29:57 +02:00
Rasmus Wriedt Larsen
4ee71ae4a1
Python: Add support for pymssql package
...
I also forgot to mention `PyMySQL` in frameworks.rst
2022-10-10 14:02:40 +02:00
Rasmus Wriedt Larsen
b1d33a404c
Python: Sort Frameworks.qll
2022-10-10 13:55:10 +02:00
Erik Krogh Kristensen
85a652f3d1
remove a bunch of repeated words
2022-07-14 12:42:48 +02:00
Erik Krogh Kristensen
31e9876de7
Merge branch 'main' into pyMaD
2022-05-12 14:43:16 +02:00
Erik Krogh Kristensen
1c2c9159a9
initial MaD implementation for Python
2022-05-02 12:45:19 +02:00
Rasmus Wriedt Larsen
7f5f7679f8
Python: Promote xmltodict modeling
2022-03-31 10:28:34 +02:00
haby0
7e6666bc63
Merge branch 'main' into py/add-ssrf-sinks
2022-03-07 12:09:14 +08:00
Rasmus Wriedt Larsen
02a97b08bb
Python: Move urllib and urllib2 to be part of stdlib modeling
2022-03-04 11:31:47 +01:00
Rasmus Lerchedahl Petersen
143e9ee954
Merge branch 'main' of github.com:github/codeql into python/promote-xpath-injection
2022-03-02 13:14:08 +01:00
haby0
b23e28a1e6
add Server-side Request Forgery sinks
2022-02-28 15:24:02 +08:00
Rasmus Lerchedahl Petersen
17aa2898f9
python: model (xpathEval from) libxml2
2022-02-09 14:25:43 +01:00
Rasmus Lerchedahl Petersen
e8649d8947
python: model (etree from) lxml
2022-02-09 14:15:17 +01:00
