Ahmed Farid
f70f5c7935
Update TimingAttackAgainstHeaderValue.ql
2023-02-16 14:03:26 +01:00
Ahmed Farid
b8f9b2b424
Update TimingAttackAgainstHeaderValue.ql
2023-02-16 01:11:41 +01:00
Ahmed Farid
13d1a4fdc1
Update TimingAttackAgainstHeaderValue.ql
2022-08-31 12:46:17 +01:00
Ahmed Farid
f2688c4a02
Update select statement
2022-08-31 12:39:00 +01:00
Ahmed Farid
275ed0d6e5
Update select statement
2022-08-31 12:37:36 +01:00
Ahmed Farid
141b65fea8
Fix typo
2022-08-29 18:18:19 +01:00
Ahmed Farid
199e3d9462
Rename the query ID
2022-08-29 18:13:45 +01:00
Ahmed Farid
66fb420d00
Update PossibleTimingAttackAgainstHash.ql
2022-08-29 18:08:09 +01:00
Taus
bd45ea94d0
Python: Fix TimingAttackAgainstHash.ql select
2022-08-19 12:31:12 +00:00
Taus
3d17989107
Python: Fix broken select statement
...
Based on the alert description, "message" seemed like a suitable word to
use here.
2022-08-17 17:09:18 +00:00
Taus
76de2f4203
Python: Remove trailing newlines
...
These were causing the autoformatting check to fail. I'm not really sure
how these newlines got introduced. Possibly some editor option or
`git-commit` hook?
2022-08-17 15:12:51 +00:00
Ahmed Farid
313dbc9120
Autoformat PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-17 12:59:09 +01:00
Ahmed Farid
9f3de035c7
Autoformat PossibleTimingAttackAgainstHash.ql
2022-08-17 12:57:57 +01:00
Ahmed Farid
cb5331bdd8
Autoformat TimingAttackAgainstHeaderValue.ql
2022-08-17 12:54:34 +01:00
Ahmed Farid
a7dcf96f55
Autoformat TimingAttackAgainstSensitiveInfo.ql
2022-08-17 12:53:07 +01:00
Ahmed Farid
9b4d1789b1
Autoformat TimingAttackAgainstHash.ql
2022-08-17 12:49:58 +01:00
Ahmed Farid
5daeea7aeb
Adjust the @id property
2022-08-17 12:24:40 +01:00
Ahmed Farid
01828936e2
fix qhelp
2022-08-17 12:19:44 +01:00
Ahmed Farid
10d5ab20f5
fix qhelp
2022-08-17 12:19:02 +01:00
Ahmed Farid
169d27951a
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 15:19:13 +01:00
Ahmed Farid
dbd6076725
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:18:09 +01:00
Ahmed Farid
8ebf428078
Update SafeComparisonOfSensitiveInfo.py
2022-08-15 15:15:24 +01:00
Ahmed Farid
054e0726b0
Update UnsafeComparisonOfHeaderValue.py
2022-08-15 15:13:17 +01:00
Ahmed Farid
c578a34892
Update SafeComparisonOfHeaderValue.py
2022-08-15 15:12:38 +01:00
Ahmed Farid
773bb5fffd
Update SafeComparisonOfHeaderValue.py
2022-08-15 14:43:32 +01:00
Ahmed Farid
a724bd1e32
Update UnSafeComparisonOfSensitiveInfo.py
2022-08-15 14:42:17 +01:00
Ahmed Farid
21f9ee449a
Delete UnSafeComparison.py
2022-08-05 12:49:00 +01:00
Ahmed Farid
d9e85a9064
Delete SafeComparison.py
2022-08-05 12:48:51 +01:00
Ahmed Farid
c7828bf9b4
Create UnSafeComparisonOfSensitiveInfo.py
2022-08-05 12:47:58 +01:00
Ahmed Farid
dd61383469
Create SafeComparisonOfSensitiveInfo.py
2022-08-05 12:46:46 +01:00
Ahmed Farid
5eef14a0a9
Update SafeComparisonOfHeaderValue.py
2022-08-04 12:51:30 +01:00
Ahmed Farid
a6af455eae
Create UnsafeComparisonOfHeaderValue.py
2022-08-04 12:50:55 +01:00
Ahmed Farid
a98a77ad40
Create SafeComparisonOfHeaderValue.py
2022-08-04 12:48:19 +01:00
Ahmed Farid
e1435afea9
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.qhelp
2022-08-04 12:45:01 +01:00
Ahmed Farid
76c8e7d2e8
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.ql
2022-08-04 12:44:45 +01:00
Ahmed Farid
428132a58e
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:44:10 +01:00
Ahmed Farid
a34478d58f
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:43:53 +01:00
Ahmed Farid
59f05b4d62
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:43:35 +01:00
Ahmed Farid
fe51a917ec
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:43:21 +01:00
Ahmed Farid
a747bacbe5
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql
2022-08-04 12:42:08 +01:00
Ahmed Farid
cf36a30909
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.qhelp
2022-08-04 12:41:51 +01:00
Ahmed Farid
4b0c42951f
Rename python/ql/src/experimental/Security/CWE-208/UnSafeComparisonOfHash.py to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/UnSafeComparisonOfHash.py
2022-08-04 12:41:27 +01:00
Ahmed Farid
cf47104f62
Update TimingAttackAgainstHeaderValue.ql
2022-08-04 12:39:31 +01:00
Ahmed Farid
8490a54af5
Update TimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:38:31 +01:00
Ahmed Farid
31692f523f
Update PossibleTimingAttackAgainstHash.ql
2022-08-04 12:37:57 +01:00
Ahmed Farid
61b7d89813
Update TimingAttackAgainstHash.ql
2022-08-04 12:36:58 +01:00
Ahmed Farid
b5ff606b41
Update PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:36:36 +01:00
Ahmed Farid
ad53176546
Rename python/ql/src/experimental/Security/CWE-208/TimingAttack.qll to python/ql/src/experimental/semmle/python/security/TimingAttack.qll
2022-08-04 12:35:24 +01:00
Ahmed Farid
028ac19259
Rename python/ql/src/experimental/Security/CWE-208/SafeComparisonOfHash.py to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/SafeComparisonOfHash.py
2022-08-04 12:30:56 +01:00
Ahmed Farid
5afc0a7773
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstHash.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.ql
2022-08-04 12:30:38 +01:00
