hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 19:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
01a043ddbd6ab3f84897c48e62d97b7ba586fc9a
codeql/python/ql/test/query-tests/Security
History
Erik Krogh Kristensen f106e064fa Merge pull request #9422 from erik-krogh/refacReDoS 
Refactorizations of the ReDoS libraries
2022-08-16 09:32:08 +02:00
..
CVE-2018-1281
Python: Port bind-to-all-interfaces to type-tracking
2021-02-23 16:01:24 +01:00
CWE-020-ExternalAPIs
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-020-IncompleteHostnameRegExp
Revert "Revert "Python: switch to shared implementation of IncompleteHostnameRegExp.ql""
2022-03-18 16:31:22 +01:00
CWE-020-IncompleteUrlSubstringSanitization
Python: Restructure security tests to contain query name
2021-07-19 16:54:34 +02:00
CWE-020-SuspiciousRegexpRange
rename query to overly-large-range, and rewrite the @description
2022-07-12 16:02:46 +02:00
CWE-022-PathInjection
Python: Update path-injection .expected
2022-03-21 20:24:12 +01:00
CWE-022-TarSlip
Python: Accept .expected for TarSlip
2022-08-03 09:52:11 +02:00
CWE-078-CommandInjection
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-078-CommandInjection-py2
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-079-Jinja2WithoutEscaping
Python: Use API-graph flow for boolean tracking
2022-05-17 13:14:55 +00:00
CWE-079-ReflectedXss
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-089-SqlInjection
Python: Merge SQLAlchemy TextClause injection into py/sql-injection
2021-09-21 20:21:42 +02:00
CWE-090-LdapInjection
Python: Implement ContentSet
2022-04-04 13:51:44 +02:00
CWE-094-CodeInjection
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-116-BadTagFilter
add a bad-tag-filter query for Python and JavaScript
2021-09-21 15:04:03 +02:00
CWE-117-LogInjection
python: move log injection out of experimental
2022-01-31 11:27:55 +01:00
CWE-209-StackTraceExposure
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-215-FlaskDebug
Python: Restructure security tests to contain query name
2021-07-19 16:54:34 +02:00
CWE-285-PamAuthorization
Python: Apply suggestions from code review
2022-05-18 10:30:29 +02:00
CWE-295-MissingHostKeyValidation
Python: Split CWE-295 tests
2021-02-24 10:12:45 +01:00
CWE-295-RequestWithoutValidation
Python: Use HTTP::Client::Request request for py/request-without-cert-validation
2022-06-08 15:42:32 +02:00
CWE-312-CleartextLogging
Python: Apply suggestions from code review
2022-01-20 14:20:15 +01:00
CWE-312-CleartextStorage
Python: Remove usernames as sensitive source for cleartext queries
2022-01-19 15:25:21 +01:00
CWE-312-CleartextStorage-py3
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-326-WeakCryptoKey
Python: Restructure security tests to contain query name
2021-07-19 16:54:34 +02:00
CWE-327-BrokenCryptoAlgorithm
python: update py/weak-cryptographic-algorithm to flag use of ECB block mode
2022-05-13 16:32:36 +01:00
CWE-327-InsecureDefaultProtocol
Python: Fix test folder for InsecureDefaultProtocol
2021-07-19 16:56:07 +02:00
CWE-327-InsecureProtocol
Python: Fix test folder for InsecureProtocol
2021-07-19 16:57:00 +02:00
CWE-327-WeakSensitiveDataHashing
Python: Update test expectation following rename
2021-10-12 10:36:18 +02:00
CWE-377-InsecureTemporaryFile
Python: Restructure security tests to contain query name
2021-07-19 16:54:34 +02:00
CWE-502-UnsafeDeserialization
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-601-UrlRedirect
Dataflow: Update test expected outputs.
2021-09-07 13:02:20 +02:00
CWE-611-Xxe
Python: Promote XXE and XML-bomb queries
2022-03-31 18:47:50 +02:00
CWE-643-XPathInjection
python: remove superfluous configuration
2022-02-08 11:34:11 +01:00
CWE-730-PolynomialReDoS
rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"
2022-06-23 14:36:25 +02:00
CWE-730-ReDoS
add further normalization of char classses
2022-06-23 14:36:25 +02:00
CWE-730-RegexInjection
Python: Move query tests over
2021-09-14 13:29:21 +02:00
CWE-732-WeakFilePermissions
Python: Restrict test to Python 3
2022-06-14 12:58:35 +00:00
CWE-776-XmlBomb
Python: Promote XXE and XML-bomb queries
2022-03-31 18:47:50 +02:00
CWE-798-HardcodedCredentials
Python: Restructure security tests to contain query name
2021-07-19 16:54:34 +02:00
CWE-918-ServerSideRequestForgery
Python: Implement ContentSet
2022-04-04 13:51:44 +02:00
lib
Python : Add query to detect Server Side Template Injection
2020-07-21 18:01:27 +05:30