1426 Commits

Author	SHA1	Message	Date
thank_you	0be2c6b765	Add SQLEscapySanitizerCall class	2021-06-29 19:39:46 -04:00
thank_you	986f2f4302	Add SQLEscape module	2021-06-29 19:39:26 -04:00
jorgectf	d475d52c76	Add partial modeling	2021-06-30 00:59:40 +02:00
jorgectf	c3b3bde35d	Add XMLParser concept	2021-06-30 00:59:17 +02:00
jorgectf	b9fa57f518	Move tests to test/	2021-06-30 00:58:58 +02:00
jorgectf	19a626742a	Almost fix getFlaskMailArgument(...)	2021-06-29 17:28:45 +02:00
jorgectf	0819090fcb	Fix qldocs typo	2021-06-29 16:53:32 +02:00
jorgectf	2f9e6454a5	Hardcode ldap2 binding functions	2021-06-29 16:14:55 +02:00
Rasmus Wriedt Larsen	a5a7f3e38a	Python: Add taint-step for sqlalchemy.text	2021-06-29 11:06:25 +02:00
Rasmus Wriedt Larsen	684f51ae5f	Merge branch 'main' into python-use-sqlalchemy	2021-06-29 10:58:51 +02:00
jorgectf	51395d155f	Move xmltodict to its own file under frameworks/	2021-06-28 21:08:43 +02:00
Jorge	350440897c	Apply suggestions from code review ... Update `xmltodict` format and delete `ujson` modeling. Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>	2021-06-28 21:02:40 +02:00
jorgectf	68c683189a	Polish documentation, mongoCollectionMethod() and update .expected	2021-06-28 20:55:49 +02:00
jorgectf	1d4d8ab6e0	Fix tests	2021-06-28 14:16:52 +02:00
jorgectf	b9422518b3	Rephrase .qhelp	2021-06-28 14:00:00 +02:00
Rasmus Wriedt Larsen	318694ccc8	Python: Don't rely on d = d.getOutput() for Decoding ... Although it is for `json.loads` and the like.	2021-06-28 13:17:45 +02:00
Rasmus Wriedt Larsen	59711424bd	Python: Fix qhelp for NoSQL injection	2021-06-28 11:48:28 +02:00
Rasmus Wriedt Larsen	5477b2e0d5	Python: Minor refactoring cleanup	2021-06-28 10:54:21 +02:00
Rasmus Wriedt Larsen	4a2c99a021	Python: Inline LDAPImproperAuth.qll ... Since having it inlined makes the query a bit easier to read. We obviously need to share it if we want to share this predicate, but for now that does not seem to be the case.	2021-06-28 10:54:21 +02:00
Rasmus Wriedt Larsen	b33f6a315c	Python: Fix select for py/improper-ldap-auth	2021-06-28 10:54:21 +02:00
Rasmus Wriedt Larsen	dfe16aae4c	Python: Handle both positional and keyword args for LDAP bind	2021-06-28 10:46:13 +02:00
Rasmus Wriedt Larsen	a9469b73d9	Python: Port py/clear-text-storage-sensitive-data	2021-06-24 17:39:08 +02:00
jorgectf	e0013fcdbb	Fix Concepts.qll dependencies	2021-06-23 21:29:35 +02:00
jorgectf	7b9cbafd62	Move flask_mail to libraries/	2021-06-23 21:28:11 +02:00
jorgectf	70d651184b	Optimize Flask.qll	2021-06-23 21:21:45 +02:00
jorgectf	5e8f9959ef	Extend Sendgrid setters	2021-06-23 20:56:48 +02:00
jorgectf	9563faf918	Add Sendgrid modeling	2021-06-23 20:53:17 +02:00
jorgectf	bf1eb7238e	Cover django.core.mail	2021-06-23 18:37:55 +02:00
jorgectf	8ae864827a	Format ReflectedXSS.qll	2021-06-23 18:37:33 +02:00
jorgectf	355bb5c734	Format Flask.qll	2021-06-23 18:37:11 +02:00
jorgectf	eac5eba9d2	Move tests and qlref to test/	2021-06-23 18:36:44 +02:00
jorgectf	c323fbbf3c	Cover Flask-SendMail (Flask-Mail copy)	2021-06-23 17:26:14 +02:00
jorgectf	ae84df817a	Extend ReflectedXSS query	2021-06-23 17:08:28 +02:00
jorgectf	4c9ecf0d9b	Delete testing class-variable	2021-06-23 00:52:34 +02:00
jorgectf	7956b97ac3	Unit tests move and temporary ql	2021-06-23 00:40:05 +02:00
jorgectf	4d890ddeae	Polish flask_mail tests and code	2021-06-23 00:38:58 +02:00
jorgectf	48cd5062cf	Change EmailSender structure	2021-06-23 00:37:54 +02:00
thank_you	20f321e623	Remove accidental slash	2021-06-22 13:03:23 -04:00
jorgectf	78deec84fc	Upload main structure and initial tests	2021-06-22 16:41:08 +02:00
Rasmus Wriedt Larsen	e05d6e71b8	Merge pull request #6064 from tausbn/python-add-get-method-call ... Python: Add `getAMethodCall` to `LocalSourceNode`	2021-06-22 11:16:39 +02:00
thank_you	24d4415457	Create EmailClients.qll	2021-06-21 19:01:04 -04:00
Taus	768cab3642	Python: Address review comments ... - changes `getReceiver` to `getObject` - fixes `calls` to avoid unwanted cross-talk - adds some more documentation to highlight the above issue	2021-06-21 14:57:19 +00:00
jorgectf	b10ade17be	Update HeaderDeclaration input naming	2021-06-20 00:13:59 +02:00
jorgectf	058ade4d8e	Merge remote-tracking branch 'upstream/main' into jorgectf/python/jwt-queries	2021-06-18 22:21:38 +02:00
jorgectf	6565680dd6	Finish query	2021-06-18 22:16:39 +02:00
jorgectf	017a778a20	Polish make_response and fix extend argument	2021-06-18 20:21:11 +02:00
jorgectf	eac5254a88	Resolve merge conflict	2021-06-18 02:12:49 +02:00
jorgectf	dcb1da338b	Extend documentation	2021-06-18 02:03:56 +02:00
jorgectf	4963caf506	Rewrite frameworks modeling	2021-06-18 02:03:27 +02:00
jorgectf	066504e79e	Checkout Stdlib.qll	2021-06-18 02:02:47 +02:00