Rasmus Wriedt Larsen 4eed94a262 Python: Fix CWE tag for py/use-of-input ...

So it better matches what is in `py/code-injection`. I had my doubts
about CWE-95, but after reading
https://owasp.org/www-community/attacks/Direct_Dynamic_Code_Evaluation_Eval%20Injection
I think it's fine to add CWE-95 as well 👍

Definitions are:

CWE-78: Improper Neutralization of Special Elements used in an OS
Command ('OS Command Injection')

CWE-94: Improper Control of Generation of Code ('Code Injection')

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated
Code ('Eval Injection')

2021-06-14 14:08:34 +02:00

..

.vscode

Python: Remove type-tracking snippets for framework modeling

2021-02-17 13:14:23 +01:00

change-notes

Python: Fix wording of change-note

2021-06-08 16:19:25 +02:00

config/suites/lgtm

Drop: ImportAdditionalLibraries.ql

2019-06-28 15:53:07 +02:00

ql

Python: Fix CWE tag for py/use-of-input

2021-06-14 14:08:34 +02:00

tools/recorded-call-graph-metrics

Python: Remove unnecessary comment

2020-09-07 15:06:07 +02:00

upgrades

Python: Autoformat everything using qlformat.

2020-07-07 15:43:52 +02:00