yoff 3dbfb9fa4b python: add machinery for MaD barriers ...

and reinstate previously removed barrier
now as a MaD row

2026-01-22 17:30:24 +01:00

..

CVE-2018-1281

…

CWE-020-CookieInjection

…

CWE-020-ExternalAPIs

…

CWE-020-IncompleteHostnameRegExp

…

CWE-020-IncompleteUrlSubstringSanitization

…

CWE-020-SuspiciousRegexpRange

…

CWE-022-PathInjection

Python: Add global variable nested field jump steps

2025-09-16 18:08:53 +02:00

CWE-022-TarSlip

Python: use known sanitiser

2024-09-30 14:22:17 +02:00

CWE-074-TemplateInjection

Update test output

2024-12-09 19:57:52 +00:00

CWE-078-CommandInjection

Python: Update all test util paths to point to the new location.

2024-12-12 13:54:30 +01:00

CWE-078-CommandInjection-py2

…

CWE-078-UnsafeShellCommandConstruction

Python: Update all test util paths to point to the new location.

2024-12-12 13:54:30 +01:00

CWE-079-Jinja2WithoutEscaping

…

CWE-079-ReflectedXss

…

CWE-089-SqlInjection

…

CWE-089-SqlInjection-local-threat-model

python: add machinery for MaD barriers

2026-01-22 17:30:24 +01:00

CWE-090-LdapInjection

…

CWE-094-CodeInjection

Python: Update all test util paths to point to the new location.

2024-12-12 13:54:30 +01:00

CWE-113-HeaderInjection

python: add machinery for MaD barriers

2026-01-22 17:30:24 +01:00

CWE-116-BadTagFilter

…

CWE-117-LogInjection

…

CWE-209-StackTraceExposure

Python: Update all test util paths to point to the new location.

2024-12-12 13:54:30 +01:00

CWE-215-FlaskDebug

…

CWE-285-PamAuthorization

…

CWE-295-MissingHostKeyValidation

…

CWE-295-RequestWithoutValidation

…

CWE-312-CleartextLogging

…

CWE-312-CleartextStorage

…

CWE-312-CleartextStorage-py3

…

CWE-326-WeakCryptoKey

…

CWE-327-BrokenCryptoAlgorithm

…

CWE-327-InsecureDefaultProtocol

…

CWE-327-InsecureProtocol

…

CWE-327-WeakSensitiveDataHashing

…

CWE-377-InsecureTemporaryFile

…

CWE-502-UnsafeDeserialization

…

CWE-601-UrlRedirect

python: add machinery for MaD barriers

2026-01-22 17:30:24 +01:00

CWE-611-Xxe

…

CWE-614-InsecureCookie

Update test output

2025-09-24 15:03:40 +01:00

CWE-643-XPathInjection

…

CWE-730-PolynomialReDoS

…

CWE-730-ReDoS

…

CWE-730-RegexInjection

…

CWE-732-WeakFilePermissions

Python: update test expectations

2024-10-11 15:36:44 +02:00

CWE-776-XmlBomb

Removed lxml.etree.XMLParser from xml bomb sinks

2025-07-15 13:43:00 +02:00

CWE-798-HardcodedCredentials

…

CWE-918-ServerSideRequestForgery

…

CWE-942-CorsMisconfigurationMiddleware

Fix tests

2024-09-12 21:30:32 -07:00

CWE-943-NoSqlInjection

Python: Update all test util paths to point to the new location.

2024-12-12 13:54:30 +01:00

CWE-1004-NonHttpOnlyCookie

Update alert message

2025-09-25 09:52:27 +01:00

CWE-1275-SameSiteNoneCookie

Update test output

2025-09-24 15:03:40 +01:00