Mark Shannon 2ba122373a Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation ...

Python: Add query for insecure SSH host key policies in Paramiko.

2019-04-04 16:57:13 +01:00

..

CWE-020

Python: Two new queries for URL and hostname sanitization (CWE-020).

2019-01-24 12:57:14 +00:00

CWE-022

Python: Fix parent relation for path-queries.

2018-11-23 15:04:01 +00:00

CWE-078

Python: Add extra sinks for command-injection query.

2018-11-23 14:29:02 +00:00

CWE-079

Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.

2018-11-28 10:46:44 +00:00

CWE-089

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-094

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-209

Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

2019-03-05 16:52:28 +00:00

CWE-215

Python: Implement check for flask debug mode.

2018-11-27 15:14:38 +01:00

CWE-295

Address review comments.

2019-03-19 15:44:11 +01:00

CWE-326

Python: Use consistent abbreviations in weak-crypto query message.

2018-11-28 16:58:22 +00:00

CWE-327

Fix false positive and add test.

2019-03-21 14:10:05 +01:00

CWE-377

Fix interpolation.

2019-02-26 16:27:04 +01:00

CWE-502

Python: Support the dill pickling library.

2019-01-16 14:53:42 +01:00

CWE-601

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-732

Python: Check os.open as well as os.chmod for weak file permissions.

2019-01-28 14:26:16 +00:00

CWE-798

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

lib

Python: Add query for insecure SSH host key policies in Paramiko.

2019-03-18 16:45:54 +01:00

options

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00