codeql

CleartextLoggingCustomizations.qll

Python: Fix results outside DB for CleartextLogging

2022-11-22 14:46:32 +01:00

CleartextLoggingQuery.qll

Python: Move CleartextLogging to new dataflow API

2023-08-28 15:27:50 +02:00

CleartextStorageCustomizations.qll

Python: Fix problems with sinks in pathlib

2022-11-22 14:46:32 +01:00

CleartextStorageQuery.qll

Python: Move CleartextStorage to new dataflow API

2023-08-28 15:27:50 +02:00

CodeInjectionCustomizations.qll

python: Document MaD format

2024-06-19 17:00:15 +02:00

CodeInjectionQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

CommandInjectionCustomizations.qll

python: Document MaD format

2024-06-19 17:00:15 +02:00

CommandInjectionQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

CookieInjectionCustomizations.qll

Promoto cookie injection query

2024-07-16 16:49:56 +01:00

CookieInjectionQuery.qll

Promoto cookie injection query

2024-07-16 16:49:56 +01:00

ExceptionInfo.qll

Python: remove EssaNodes

2023-11-20 21:35:32 +01:00

HttpHeaderInjectionCustomizations.qll

Move Header Write derrived concepts to Concepts

2024-06-24 17:26:51 +01:00

HttpHeaderInjectionQuery.qll

Split into customizations file

2024-04-24 14:05:37 +01:00

LdapInjectionCustomizations.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

LdapInjectionQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

LogInjectionCustomizations.qll

python: Document MaD format

2024-06-19 17:00:15 +02:00

LogInjectionQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

NoSqlInjectionCustomizations.qll

Python: NoSQLInjection -> NoSqlInjection

2023-09-29 13:52:51 +02:00

NoSqlInjectionQuery.qll

Python: NoSQLInjection -> NoSqlInjection

2023-09-29 13:52:51 +02:00

PamAuthorizationCustomizations.qll

Python: Change all remaining occurrences of StrConst

2024-04-22 12:00:09 +00:00

PamAuthorizationQuery.qll

Python: Move PamAuthorization to new dataflow API

2023-08-28 15:27:50 +02:00

PathInjectionCustomizations.qll

Python: filter more sinks in stdlib

2023-11-20 21:35:52 +01:00

PathInjectionQuery.qll

Python: Remove references to FlowStateString.

2023-12-14 15:05:33 +01:00

PolynomialReDoSCustomizations.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

PolynomialReDoSQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

ReflectedXSSCustomizations.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

ReflectedXssQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

RegexInjectionCustomizations.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

RegexInjectionQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

ServerSideRequestForgeryCustomizations.qll

Add sanitizers for compiled regexes

2024-06-11 15:44:16 +01:00

ServerSideRequestForgeryQuery.qll

Fixes typo in deprecation notice

2024-06-03 16:31:29 +00:00

SqlInjectionCustomizations.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

SqlInjectionQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

StackTraceExposureCustomizations.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

StackTraceExposureQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

TarSlipCustomizations.qll

Python: Change all remaining occurrences of StrConst

2024-04-22 12:00:09 +00:00

TarSlipQuery.qll

Python: Move TarSlip to new dataflow API

2023-08-28 15:27:49 +02:00

UnsafeDeserializationCustomizations.qll

python: Document MaD format

2024-06-19 17:00:15 +02:00

UnsafeDeserializationQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

UnsafeShellCommandConstructionCustomizations.qll

Python: Change Str to StringLiteral

2024-04-22 12:00:09 +00:00

UnsafeShellCommandConstructionQuery.qll

Merge pull request #14068 from RasmusWL/dataflow-config-refactor

2023-09-04 21:04:10 +02:00

UrlRedirectCustomizations.qll

Python: autoformat

2024-06-20 10:59:39 +02:00

UrlRedirectQuery.qll

Apply suggestions from code review

2024-01-22 13:36:12 +00:00

WeakSensitiveDataHashingCustomizations.qll

Packaging: Rafactor Python core libraries

2021-08-24 13:23:45 -07:00

WeakSensitiveDataHashingQuery.qll

Python: Move WeakSensitiveDataHashing to new dataflow API

2023-08-28 15:27:50 +02:00

XmlBombCustomizations.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00

XmlBombQuery.qll

Python: Move XmlBomb to new dataflow API

2023-08-28 15:27:50 +02:00

XpathInjectionCustomizations.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

XpathInjectionQuery.qll

delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses

2023-10-07 21:48:49 +02:00

XxeCustomizations.qll

Add markupsafe as XXE sanitizer

2023-07-05 20:23:20 +02:00

XxeQuery.qll

Python: Move Xxe to new dataflow API

2023-08-28 15:27:50 +02:00