hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-16 12:34:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
4a21a85e73fe9d741c8a76835f57dc3d23578f7f
codeql/python/ql/lib/semmle/python/security/dataflow
History
Rasmus Wriedt Larsen 4a21a85e73 Merge branch 'main' into threat-models
2024-09-23 11:19:58 +02:00
..
CleartextLoggingCustomizations.qll
Update formatting
2024-08-30 13:51:33 +01:00
CleartextLoggingQuery.qll
Python: Move CleartextLogging to new dataflow API
2023-08-28 15:27:50 +02:00
CleartextStorageCustomizations.qll
Update formatting
2024-08-30 13:51:33 +01:00
CleartextStorageQuery.qll
Python: Move CleartextStorage to new dataflow API
2023-08-28 15:27:50 +02:00
CodeInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
CodeInjectionQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
CommandInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
CommandInjectionQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
CookieInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
CookieInjectionQuery.qll
Promoto cookie injection query
2024-07-16 16:49:56 +01:00
ExceptionInfo.qll
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
HttpHeaderInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
HttpHeaderInjectionQuery.qll
Split into customizations file
2024-04-24 14:05:37 +01:00
LdapInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
LdapInjectionQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
LogInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
LogInjectionQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
NoSqlInjectionCustomizations.qll
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00
NoSqlInjectionQuery.qll
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00
PamAuthorizationCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
PamAuthorizationQuery.qll
Python: Move PamAuthorization to new dataflow API
2023-08-28 15:27:50 +02:00
PathInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
PathInjectionQuery.qll
Python: Remove references to FlowStateString.
2023-12-14 15:05:33 +01:00
PolynomialReDoSCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
PolynomialReDoSQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
ReflectedXSSCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
ReflectedXssQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
RegexInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
RegexInjectionQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
ServerSideRequestForgeryCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
ServerSideRequestForgeryQuery.qll
Fixes typo in deprecation notice
2024-06-03 16:31:29 +00:00
SqlInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
SqlInjectionQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
StackTraceExposureCustomizations.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
StackTraceExposureQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
TarSlipCustomizations.qll
Python: Change all remaining occurrences of StrConst
2024-04-22 12:00:09 +00:00
TarSlipQuery.qll
Python: Move TarSlip to new dataflow API
2023-08-28 15:27:49 +02:00
UnsafeDeserializationCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
UnsafeDeserializationQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
UnsafeShellCommandConstructionCustomizations.qll
Python: Change Str to StringLiteral
2024-04-22 12:00:09 +00:00
UnsafeShellCommandConstructionQuery.qll
Merge pull request #14068 from RasmusWL/dataflow-config-refactor
2023-09-04 21:04:10 +02:00
UrlRedirectCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
UrlRedirectQuery.qll
Apply suggestions from code review
2024-01-22 13:36:12 +00:00
WeakSensitiveDataHashingCustomizations.qll
Packaging: Rafactor Python core libraries
2021-08-24 13:23:45 -07:00
WeakSensitiveDataHashingQuery.qll
Python: Move WeakSensitiveDataHashing to new dataflow API
2023-08-28 15:27:50 +02:00
XmlBombCustomizations.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
XmlBombQuery.qll
Python: Move XmlBomb to new dataflow API
2023-08-28 15:27:50 +02:00
XpathInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
XpathInjectionQuery.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
XxeCustomizations.qll
Add markupsafe as XXE sanitizer
2023-07-05 20:23:20 +02:00
XxeQuery.qll
Python: Move Xxe to new dataflow API
2023-08-28 15:27:50 +02:00