hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
37aa9b9d060dceb2a6b8f080f0fa78655454b6d5
codeql/python/ql/test/query-tests/Security
History
Rasmus Wriedt Larsen 37aa9b9d06 Python: Add prefix sanitizer on URL redirect query 
This doesn't cover 100% of what we want to, but matches what we used to.
2021-01-20 11:35:47 +01:00
..
CVE-2018-1281
Add bind-socket-all-network-interfaces Python query (#2048)
2019-10-03 11:23:11 +01:00
CWE-020
Python: Get rid of deprecated terms in code and .qhelp.
2020-06-19 16:51:09 +02:00
CWE-020-ExternalAPIs
Python: Fix untrusted data to external API example
2020-11-30 10:42:30 +01:00
CWE-022-PathInjection
Python: Add examples of Path Injection FPs seen
2020-12-03 13:41:55 +01:00
CWE-022-TarSlip
Python: Fixup CWE-022 tests
2020-11-02 11:46:28 +01:00
CWE-078
Python: Add command injection regex restricted FP
2020-12-07 15:26:56 +01:00
CWE-078-py2
Python: Fixup CWE-078 tests.
2020-11-02 11:44:42 +01:00
CWE-079
Python: Add example FP
2020-12-08 17:02:05 +01:00
CWE-089
Python: update test expectations
2020-11-10 23:58:55 +01:00
CWE-094
Python: Add example of Code Injection FP
2020-11-19 15:05:51 +01:00
CWE-209
Python: Always enable legacy taint tracking configuration
2019-11-11 11:17:21 +01:00
CWE-215
Update test to reflect new true positive.
2019-04-26 16:21:46 +01:00
CWE-295
Address review comments.
2019-03-19 15:44:11 +01:00
CWE-312
Python: Add test-case to password_in_cookie
2019-11-12 10:36:12 +01:00
CWE-326
Python: Remove --optimize: true from options files
2020-02-25 15:52:00 +01:00
CWE-327
Python: Use proper import for semmle.python.dataflow.TaintTracking
2020-05-25 13:45:49 +02:00
CWE-377
Python: Remove --optimize: true from options files
2020-02-25 15:52:00 +01:00
CWE-502
Python: Fixup CWE-502 tests.
2020-11-02 11:44:00 +01:00
CWE-601
Python: Add prefix sanitizer on URL redirect query
2021-01-20 11:35:47 +01:00
CWE-732
Python: Remove --optimize: true from options files
2020-02-25 15:52:00 +01:00
CWE-798
Python: Add test-cases for py/hardcoded-credentials
2020-02-04 11:42:11 +01:00
lib
Python : Add query to detect Server Side Template Injection
2020-07-21 18:01:27 +05:30