Mark Shannon 3bcd445a32 Python change 'SimpleHttpResponseTaintSink' to 'HttpResponseTaintSink'.

2019-04-04 14:45:37 +01:00

..

CWE-020

Make qhelp for 'Incomplete URL substring sanitization' consistent across languages.

2019-01-25 16:47:23 +00:00

CWE-022

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-078

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-079

Python change 'SimpleHttpResponseTaintSink' to 'HttpResponseTaintSink'.

2019-04-04 14:45:37 +01:00

CWE-089

Python revert .getNode() to .getSink()/.getSource() to keep expected test output the same.

2019-04-04 10:56:45 +01:00

CWE-094

Python: make sure code injection query is using correct sources.

2019-04-04 10:56:45 +01:00

CWE-209

Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

2019-03-05 16:52:28 +00:00

CWE-215

Change precision to high.

2018-11-27 19:02:44 +01:00

CWE-295

Python: Use ModuleObject::named more consistently.

2019-03-20 17:41:23 +01:00

CWE-326

Python: Add 'attr' predicate as a synomnym for 'getAttribute' to help readability.

2019-02-20 11:08:44 +00:00

CWE-327

Merge pull request #1142 from taus-semmle/python-use-new-moduleobject-api

2019-03-26 15:02:44 +00:00

CWE-377

Use attr instead of getAttribute.

2019-03-20 17:41:23 +01:00

CWE-502

Python: make sure unsafe deserialization query is using correct sources and that pickle is included in sinks.

2019-04-04 10:56:45 +01:00

CWE-601

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-732

Python: Use ModuleObject::named more consistently.

2019-03-20 17:41:23 +01:00

CWE-798

Python: Use ModuleObject::named more consistently.

2019-03-20 17:41:23 +01:00