hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-11 20:51:06 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
5ad42f8bcc6618744cf09c62ed96bcdaf9eabe0e
codeql/python/ql/lib/semmle/python/frameworks
History
REDMOND\brodes 8459eec239 Moving the SsrfSink concept into Concepts.qll, and renaming to HttpClientRequestFromModel as suggested in PR review.
2026-02-06 09:26:49 -05:00
..
data
Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering
2026-01-26 17:24:34 +01:00
internal
Python: Fix bad join in function resolution
2024-07-01 14:04:01 +00:00
Stdlib
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
agent.model.yml
python: Add query for prompt injection
2026-01-29 23:47:52 +01:00
Aioch.qll
Python: Add aioch model
2023-12-08 11:27:52 +01:00
Aiofile.qll
separate each new FileSystemAccess packages.
2023-11-06 19:03:55 +01:00
Aiofiles.qll
separate each new FileSystemAccess packages.
2023-11-06 19:03:55 +01:00
Aiohttp.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Aiomysql.qll
Python: Make asyncio version of PEP249 modeling library
2023-03-22 15:51:33 +01:00
Aiopg.qll
Python: Make asyncio version of PEP249 modeling library
2023-03-22 15:51:33 +01:00
Aiosqlite.qll
Python: Model aiosqlite
2023-03-22 15:51:47 +01:00
Airspeed.qll
Fix qldoc, formatting, and redundant import warnings
2024-12-09 19:55:21 +00:00
Anyio.qll
separate each new FileSystemAccess packages.
2023-11-06 19:03:55 +01:00
Asyncpg.model.yml
Python: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
Asyncpg.qll
Python: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
Azure.Keyvault.model.yml
Python: Altering SSRF MaD to use 'request-forgery' tag. Update to test cases expected results, off by one line. Changed to using ModelOutput::sinkNode.
2026-02-04 09:04:22 -05:00
Azure.Storage.model.yml
Python: Altering SSRF MaD to use 'request-forgery' tag. Update to test cases expected results, off by one line. Changed to using ModelOutput::sinkNode.
2026-02-04 09:04:22 -05:00
Baize.qll
put new frameworks in Frameworks.qll and fix some mistakes of Baize
2023-11-06 19:17:50 +01:00
Bottle.qll
Promote template injection sinks for each framework covered
2024-12-09 19:55:17 +00:00
BSon.qll
Apply suggestions from code review
2023-09-29 11:32:51 +02:00
builtins.model.yml
Use generator script directly
2025-08-21 14:12:26 +01:00
CassandraDriver.qll
Python: Model cassandra-driver PyPI package
2023-03-22 10:28:04 +01:00
Chameleon.qll
Fix qldoc, formatting, and redundant import warnings
2024-12-09 19:55:21 +00:00
Cherrypy.qll
cherrypy framework file system access Sinks are added
2023-10-21 19:47:30 +02:00
Chevron.qll
Fix qldoc, formatting, and redundant import warnings
2024-12-09 19:55:21 +00:00
ClickhouseDriver.qll
Python: Add clickhouse_driver model
2023-12-08 11:27:51 +01:00
Cryptodome.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Cryptography.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Cx_Oracle.qll
Apply suggestions from code review
2022-10-12 12:08:20 +02:00
Dill.qll
…
Django.model.yml
python: add machinery for MaD barriers
2026-01-22 17:30:24 +01:00
Django.qll
python: remove barrier that can be expressed in MaD
2026-01-22 17:30:24 +01:00
Fabric.qll
Merge pull request #16789 from yoff/python/document-models-as-data
2024-06-25 15:46:28 +02:00
FastApi.qll
missed some
2024-09-13 00:21:33 -07:00
Flask.qll
Specify vulnerable args instead of safe ones
2026-01-30 14:10:03 +00:00
FlaskAdmin.qll
…
FlaskSqlAlchemy.qll
Python: Rename getAnImmediateUse -> asSource
2022-06-21 12:44:06 +02:00
Genshi.qll
Add concepts tests + some fixes
2024-12-09 19:55:42 +00:00
Gradio.qll
Change classes to private
2024-05-15 15:08:27 +02:00
Hdbcli.qll
Added implementation hdbcli as part of PEP249::PEP249ModuleApiNode
2025-05-01 14:18:02 +02:00
Httpx.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Idna.qll
…
Invoke.qll
Python: Add invoke model
2023-12-08 11:27:51 +01:00
Jinja2.qll
Add qldoc
2024-12-09 19:57:39 +00:00
Jmespath.qll
…
Joblib.qll
autoformat
2023-09-25 10:35:18 +02:00
JsonPickle.qll
fix actions reviews
2024-05-10 08:32:45 +02:00
Ldap3.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Ldap.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Libtaxii.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Libxml2.qll
…
Lxml.qll
Removed lxml.etree.XMLParser from xml bomb sinks
2025-07-15 13:43:00 +02:00
Mako.qll
Fix qldoc, formatting, and redundant import warnings
2024-12-09 19:55:21 +00:00
MarkupSafe.qll
Python: Add MarkupSafe model
2023-12-08 11:27:51 +01:00
Multidict.qll
Python: add MultiDict model
2023-12-08 11:27:51 +01:00
Mysql.qll
Python: clean up Mysql.qll
2022-10-10 13:49:26 +02:00
MySQLdb.qll
…
Numpy.qll
Add numpy reference
2023-09-25 10:24:53 +02:00
openai.model.yml
python: Add query for prompt injection
2026-01-29 23:47:52 +01:00
Opml.qll
Add OPML models
2024-05-27 09:48:10 +00:00
Oracledb.qll
Add oracledb model
2022-10-13 18:08:47 +02:00
Pandas.qll
Fix formatting
2025-05-27 13:51:03 +02:00
Paramiko.qll
Paramiko.qll: improve docs
2024-05-29 15:42:29 +02:00
Peewee.qll
Python: Add Peewee model
2023-12-08 11:27:52 +01:00
PEP249.qll
Python: Add basic support for database threat-model
2024-09-10 14:32:37 +02:00
Pexpect.qll
fix actions reviews
2024-05-10 08:32:45 +02:00
Phoenixdb.qll
Apply suggestions from code review
2022-10-12 12:08:20 +02:00
Psycopg2.qll
Python: Add support for Psycopg2 database connection pools
2025-08-25 12:35:57 +00:00
Psycopg.qll
Python: Model the psycopg package
2024-01-29 14:30:20 +01:00
Pycurl.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Pydantic.qll
Python: Add Pydantic model
2023-12-08 11:27:51 +01:00
PyMongo.qll
Python: Add keyword argument support
2023-09-29 13:54:21 +02:00
Pymssql.qll
Python: Add support for pymssql package
2022-10-10 14:02:40 +02:00
PyMySQL.qll
…
Pyodbc.qll
Resolve confilct
2022-10-13 12:43:47 +02:00
Pyramid.qll
Factor each framework implementation of the cookie parameters to a common concept
2024-07-29 10:51:24 +01:00
Requests.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
RestFramework.qll
Python: Model rest_framework.exceptions.APIException
2023-12-08 11:27:52 +01:00
Rsa.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
RuamelYaml.qll
Python: Rename getAUse -> getAValueReachableFromSource
2022-06-21 12:44:06 +02:00
Sanic.qll
v1
2023-10-08 21:24:54 +02:00
ServerLess.qll
Python: Switch to shared XML.qll implementation
2024-03-19 13:17:53 +01:00
Setuptools.qll
adjust which folders are seen as exported to remove an FP
2023-02-03 14:47:55 +01:00
Simplejson.qll
…
Socketio.qll
qldoc fixes
2025-11-26 11:23:04 +00:00
SqlAlchemy.qll
Python: Apply suggestions from code review
2024-03-21 14:51:45 +01:00
Starlette.qll
Python: Model FastAPI requests
2024-12-18 15:58:51 +01:00
Stdlib.model.yml
python: model urllib.ParseResult
2025-11-26 13:36:05 +01:00
Stdlib.qll
Python: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:19 +01:00
Streamlit.qll
Fix typo
2024-07-31 13:22:27 +02:00
Toml.qll
…
Torch.qll
Torch.qll: use better alternative instead of exists
2024-05-29 15:43:41 +02:00
Tornado.qll
Fix qldoc and tests
2025-11-24 13:57:43 +00:00
TRender.qll
Fix qldoc, formatting, and redundant import warnings
2024-12-09 19:55:21 +00:00
Twisted.qll
Factor each framework implementation of the cookie parameters to a common concept
2024-07-29 10:51:24 +01:00
Ujson.qll
…
Urllib3.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Websockets.qll
Update test and qldoc
2025-12-01 20:41:59 +00:00
Werkzeug.qll
Add more tests
2024-04-24 14:05:40 +01:00
Xmltodict.qll
Python: getAValueReachingRhs -> getAValueReachingSink
2022-06-21 12:44:06 +02:00
Yaml.qll
Python: Rename getAUse -> getAValueReachableFromSource
2022-06-21 12:44:06 +02:00
Yarl.qll
Python: Add support for more URL redirect sanitisers.
2024-01-22 13:24:18 +00:00