hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-03 10:35:29 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
046f2d785d08cc1c0602e5c664741ae7c09064a4
codeql/python/ql/test/query-tests/Security
History
Owen Mansel-Chan 322b7285fe Revert "Python: hotfix - disable instanceFieldStep to avoid type-tracker blowup" 
This reverts commit f251a572e1.
2026-07-02 14:14:08 +01:00
..
CVE-2018-1281
Update test results
2026-05-22 11:43:18 +01:00
CWE-020-CookieInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-ExternalAPIs
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-IncompleteHostnameRegExp
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-IncompleteUrlSubstringSanitization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-020-SuspiciousRegexpRange
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-022-PathInjection
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-022-TarSlip
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-074-TemplateInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-CommandInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-CommandInjection-py2
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-078-UnsafeShellCommandConstruction
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-079-Jinja2WithoutEscaping
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-079-ReflectedXss
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-089-SqlInjection
Revert "Python: hotfix - disable instanceFieldStep to avoid type-tracker blowup"
2026-07-02 14:14:08 +01:00
CWE-089-SqlInjection-local-threat-model
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-090-LdapInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-094-CodeInjection
Python: Update all test util paths to point to the new location.
2024-12-12 13:54:30 +01:00
CWE-113-HeaderInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-116-BadTagFilter
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-117-LogInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-209-StackTraceExposure
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-215-FlaskDebug
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-285-PamAuthorization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-295-MissingHostKeyValidation
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-295-RequestWithoutValidation
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextLogging
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextStorage
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-312-CleartextStorage-py3
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-326-WeakCryptoKey
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-BrokenCryptoAlgorithm
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-InsecureDefaultProtocol
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-InsecureProtocol
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-327-WeakSensitiveDataHashing
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-377-InsecureTemporaryFile
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-502-UnsafeDeserialization
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-601-UrlRedirect
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-611-Xxe
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-614-InsecureCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-643-XPathInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-PolynomialReDoS
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-ReDoS
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-730-RegexInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-732-WeakFilePermissions
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-776-XmlBomb
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-798-HardcodedCredentials
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-918-ServerSideRequestForgery
Python: adjust test expectations
2026-05-21 16:58:51 +01:00
CWE-942-CorsMisconfigurationMiddleware
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-943-NoSqlInjection
Convert Python qlref tests to inline expectations
2026-06-19 12:22:40 +01:00
CWE-1004-NonHttpOnlyCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00
CWE-1275-SameSiteNoneCookie
python: Inline expectation should have space after $
2026-03-04 12:45:05 +00:00