Rasmus Wriedt Larsen 4eed94a262 Python: Fix CWE tag for py/use-of-input ...

So it better matches what is in `py/code-injection`. I had my doubts
about CWE-95, but after reading
https://owasp.org/www-community/attacks/Direct_Dynamic_Code_Evaluation_Eval%20Injection
I think it's fine to add CWE-95 as well 👍

Definitions are:

CWE-78: Improper Neutralization of Special Elements used in an OS
Command ('OS Command Injection')

CWE-94: Improper Control of Generation of Code ('Code Injection')

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated
Code ('Eval Injection')

2021-06-14 14:08:34 +02:00

..

examples

Add qlpack.yml files for example queries

2020-07-29 16:57:04 +02:00

src

Python: Fix CWE tag for py/use-of-input

2021-06-14 14:08:34 +02:00

test

Python: Model await request.post() as MultiDictProxy

2021-06-11 14:53:30 +02:00