Rasmus Wriedt Larsen
|
6f08e73dbc
|
Python: Move UnsafeDeserialization to new dataflow API
|
2023-08-28 15:27:50 +02:00 |
|
jorgectf
|
5608082f35
|
Update py/unsafe-deserialization name
|
2023-06-02 17:57:24 +02:00 |
|
erik-krogh
|
944ca4a0da
|
fix some more style-guide violations in the alert-messages
|
2022-10-07 11:23:34 +02:00 |
|
erik-krogh
|
089ce5a8a4
|
change alert messages of path queries to use the same template
|
2022-09-02 14:45:40 +02:00 |
|
erik-krogh
|
31e15e27fc
|
update py/unsafe-deserialization to match ruby/javascript/java
|
2022-08-22 21:41:47 +02:00 |
|
Rasmus Wriedt Larsen
|
695553ba9f
|
Python: Deprecate old non-Query.qll dataflow defs
|
2022-03-21 15:03:22 +01:00 |
|
Rasmus Wriedt Larsen
|
934007c811
|
Python: Port py/unsafe-deserialization to use proper source/sink customization
|
2021-07-12 16:22:10 +02:00 |
|
Calum Grant
|
771e686946
|
Update security-severity scores
|
2021-06-15 13:25:17 +01:00 |
|
Calum Grant
|
a594afb828
|
Add security-severity metadata
|
2021-06-10 20:11:08 +01:00 |
|
Rasmus Wriedt Larsen
|
f328e84bd2
|
Python: Mention yaml.safe_load in the qhelp
|
2021-02-12 12:29:55 +01:00 |
|
Rasmus Wriedt Larsen
|
9ebe59d393
|
Python: Move UnsafeDeserialization configuration to own file
|
2020-11-06 14:27:37 +01:00 |
|
Taus Brock-Nannestad
|
fb6a02e060
|
Python: More import fixups
|
2020-11-02 22:17:42 +01:00 |
|
Taus Brock-Nannestad
|
f903e4ffbe
|
Python: Promote experimental queries
DO NOT MERGE
Also adds performance fix to `python.qll`.
|
2020-10-30 19:40:56 +01:00 |
|
Taus Brock-Nannestad
|
f07a7bf8cf
|
Python: Autoformat everything using qlformat.
Will need subsequent PRs fixing up test failures (due to deprecated
methods moving around), but other than that everything should be
straight-forward.
|
2020-07-07 15:43:52 +02:00 |
|
Rasmus Wriedt Larsen
|
e5abfd0196
|
Python: Modernise Security/ queries
|
2020-02-04 11:42:11 +01:00 |
|
Rasmus Wriedt Larsen
|
2648e34f1a
|
Python: Autoformat security
|
2020-01-31 14:49:18 +01:00 |
|
Sauyon Lee
|
0040c9fb4c
|
Update links to OWASP cheat sheet
|
2019-11-06 20:21:47 -08:00 |
|
Mark Shannon
|
8b01bac900
|
Python: make sure unsafe deserialization query is using correct sources and that pickle is included in sinks.
|
2019-04-04 10:56:45 +01:00 |
|
Mark Shannon
|
61e6ae7c4a
|
Python: Use new taint-tracking query in unsafe deserialization query.
|
2019-04-04 10:56:45 +01:00 |
|
Mark Shannon
|
61bd8682df
|
Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.
|
2018-11-23 12:32:14 +00:00 |
|
Mark Shannon
|
722d89fc75
|
Upgrade taint-tracking security queries to path-problem queries.
|
2018-11-22 11:05:01 +00:00 |
|
Mark Shannon
|
e930b43bf3
|
Python security queries. Choose a precision reflecting actual precision for Security queries.
|
2018-11-19 17:10:40 +00:00 |
|
Mark Shannon
|
5f58824d1b
|
Initial commit of Python queries and QL libraries.
|
2018-11-19 15:10:42 +00:00 |
|