Porcupiney Hairs 1ceb963d4c Python : Add support for detecting XSLT Injection ...

This PR adds support for detecting XSLT injection in Python.
I have included the ql files as well as the tests with this.

2020-06-07 03:05:50 +05:30

..

CVE-2018-1281

Add bind-socket-all-network-interfaces Python query (#2048)

2019-10-03 11:23:11 +01:00

CWE-020

Python: Fix false positive in 'Incomplete URL substring sanitization' query.

2019-04-25 18:11:01 +01:00

CWE-022

Merge pull request #2888 from RasmusWL/python-tarslip-sanitizer

2020-03-24 12:59:20 +01:00

CWE-078

Python: Remove --optimize: true from options files

2020-02-25 15:52:00 +01:00

CWE-079

Python: Add Value.getABooleanValue and Value.getDefiniteBooleanValue

2020-02-04 11:42:11 +01:00

CWE-089

Python: Always enable legacy taint tracking configuration

2019-11-11 11:17:21 +01:00

CWE-094

Python: Remove --optimize: true from options files

2020-02-25 15:52:00 +01:00

CWE-209

Python: Always enable legacy taint tracking configuration

2019-11-11 11:17:21 +01:00

CWE-215

Update test to reflect new true positive.

2019-04-26 16:21:46 +01:00

CWE-295

Address review comments.

2019-03-19 15:44:11 +01:00

CWE-312

Python: Add test-case to password_in_cookie

2019-11-12 10:36:12 +01:00

CWE-326

Python: Remove --optimize: true from options files

2020-02-25 15:52:00 +01:00

CWE-327

Python: Use proper import for semmle.python.dataflow.TaintTracking

2020-05-25 13:45:49 +02:00

CWE-377

Python: Remove --optimize: true from options files

2020-02-25 15:52:00 +01:00

CWE-502

Python: Remove --optimize: true from options files

2020-02-25 15:52:00 +01:00

CWE-601

Python: Remove unused variable in example for py/url-redirection

2020-01-21 15:45:05 +01:00

CWE-732

Python: Remove --optimize: true from options files

2020-02-25 15:52:00 +01:00

CWE-798

Python: Add test-cases for py/hardcoded-credentials

2020-02-04 11:42:11 +01:00

lib

Python : Add support for detecting XSLT Injection

2020-06-07 03:05:50 +05:30