Rasmus Wriedt Larsen 1b30cf8eca Merge branch 'main' into call-graph-tests

2022-11-22 13:39:27 +01:00

..

CVE-2018-1281

Python: Port bind-to-all-interfaces to type-tracking

2021-02-23 16:01:24 +01:00

CWE-020-ExternalAPIs

Python: Expand ExternalAPIs test

2022-10-28 09:38:02 +02:00

CWE-020-IncompleteHostnameRegExp

Revert "Revert "Python: switch to shared implementation of IncompleteHostnameRegExp.ql""

2022-03-18 16:31:22 +01:00

CWE-020-IncompleteUrlSubstringSanitization

changes to address reviews

2022-10-07 22:31:00 +02:00

CWE-020-SuspiciousRegexpRange

rename query to overly-large-range, and rewrite the @description

2022-07-12 16:02:46 +02:00

CWE-022-PathInjection

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-022-TarSlip

fix some more style-guide violations in the alert-messages

2022-10-07 11:23:34 +02:00

CWE-078-CommandInjection

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-078-CommandInjection-py2

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-079-Jinja2WithoutEscaping

Python: Remove last -p ../lib/ in options files

2022-09-29 18:05:51 +02:00

CWE-079-ReflectedXss

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-089-SqlInjection

fix some more style-guide violations in the alert-messages

2022-10-07 11:23:34 +02:00

CWE-090-LdapInjection

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-094-CodeInjection

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-116-BadTagFilter

JS/Python/Ruby: s/a HTML/an HTML/

2022-09-30 10:37:52 +01:00

CWE-117-LogInjection

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-209-StackTraceExposure

fix capitalization in stack-trace-exposure

2022-10-11 13:59:10 +02:00

CWE-215-FlaskDebug

Python: Expand test for py/flask-debug

2022-10-04 20:39:08 +02:00

CWE-285-PamAuthorization

Python: Apply suggestions from code review

2022-05-18 10:30:29 +02:00

CWE-295-MissingHostKeyValidation

Python: Split CWE-295 tests

2021-02-24 10:12:45 +01:00

CWE-295-RequestWithoutValidation

changes to address reviews

2022-10-07 22:31:00 +02:00

CWE-312-CleartextLogging

changes to address reviews

2022-10-07 22:31:00 +02:00

CWE-312-CleartextStorage

changes to address reviews

2022-10-07 22:31:00 +02:00

CWE-312-CleartextStorage-py3

changes to address reviews

2022-10-07 22:31:00 +02:00

CWE-326-WeakCryptoKey

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-327-BrokenCryptoAlgorithm

python: update py/weak-cryptographic-algorithm to flag use of ECB block mode

2022-05-13 16:32:36 +01:00

CWE-327-InsecureDefaultProtocol

Python: Fix test folder for InsecureDefaultProtocol

2021-07-19 16:56:07 +02:00

CWE-327-InsecureProtocol

fix some more style-guide violations in the alert-messages

2022-10-07 11:23:34 +02:00

CWE-327-WeakSensitiveDataHashing

Python: Revert changes to sensitive data query alert messages

2022-09-06 12:01:24 +02:00

CWE-377-InsecureTemporaryFile

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-502-UnsafeDeserialization

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-601-UrlRedirect

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-611-Xxe

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-643-XPathInjection

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-730-PolynomialReDoS

update expected output of the queries (some sorting changed due to locations being used slightly differently in the shared pack)

2022-11-07 14:31:52 +01:00

CWE-730-ReDoS

update expected output of the queries (some sorting changed due to locations being used slightly differently in the shared pack)

2022-11-07 14:31:52 +01:00

CWE-730-RegexInjection

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-732-WeakFilePermissions

Python: Remove last -p ../lib/ in options files

2022-09-29 18:05:51 +02:00

CWE-776-XmlBomb

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

CWE-798-HardcodedCredentials

changes to address reviews

2022-10-07 22:31:00 +02:00

CWE-918-ServerSideRequestForgery

Merge branch 'main' into py-last-msg

2022-10-11 10:49:19 +02:00

lib

Python : Add query to detect Server Side Template Injection

2020-07-21 18:01:27 +05:30