hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-11 21:50:28 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
7fcc548665ba307f465767d31e168e54c5244010
codeql/python/ql/lib/semmle/python/security/dataflow
History
erik-krogh 7fcc548665 add py/shell-command-constructed-from-input, but without a source. 
It's a very direct port from Ruby, with only minor adjustments to fit the Python APIs
2023-02-03 14:47:55 +01:00
..
ChainedConfigs12.qll
python: deprecation
2022-01-31 08:32:24 +01:00
CleartextLogging.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CleartextLoggingCustomizations.qll
Python: Remove usernames as sensitive source for cleartext queries
2022-01-19 15:25:21 +01:00
CleartextLoggingQuery.qll
Python: Autoformat
2022-03-21 14:53:53 +01:00
CleartextStorage.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CleartextStorageCustomizations.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CleartextStorageQuery.qll
Python: Autoformat
2022-03-21 14:53:53 +01:00
CodeInjection.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CodeInjectionCustomizations.qll
Python: one more fix
2022-06-21 09:19:45 +02:00
CodeInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
CommandInjection.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
CommandInjectionCustomizations.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
CommandInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
ExceptionInfo.qll
Packaging: Rafactor Python core libraries
2021-08-24 13:23:45 -07:00
LdapInjection.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
LdapInjectionCustomizations.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
LdapInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
LogInjection.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
LogInjectionCustomizations.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
LogInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
PamAuthorizationCustomizations.qll
Python : Improve the PAM authentication bypass query
2022-11-19 01:29:25 +05:30
PamAuthorizationQuery.qll
Python: Use proper Query suffix
2022-11-28 16:03:17 +01:00
PathInjection.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
PathInjectionCustomizations.qll
Merge pull request #9369 from asgerf/python/api-graph-api
2022-06-28 14:48:12 +02:00
PathInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
PolynomialReDoS.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
PolynomialReDoSCustomizations.qll
port the Python regex/redos queries to use the shared pack
2022-11-07 14:31:51 +01:00
PolynomialReDoSQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
ReflectedXSS.qll
Python: ReflectedXSS -> ReflectedXss for new Query file
2022-03-21 16:12:38 +01:00
ReflectedXSSCustomizations.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
ReflectedXssQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
RegexInjection.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
RegexInjectionCustomizations.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
RegexInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
ServerSideRequestForgery.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
ServerSideRequestForgeryCustomizations.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
ServerSideRequestForgeryQuery.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
SqlInjection.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
SqlInjectionCustomizations.qll
Merge pull request #9369 from asgerf/python/api-graph-api
2022-06-28 14:48:12 +02:00
SqlInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
StackTraceExposure.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
StackTraceExposureCustomizations.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
StackTraceExposureQuery.qll
spelling: see https
2022-10-13 11:21:09 -04:00
TarSlipCustomizations.qll
python: More helpful comment
2022-06-30 13:07:13 +00:00
TarSlipQuery.qll
Update python/ql/lib/semmle/python/security/dataflow/TarSlipQuery.qll
2022-06-30 14:54:01 +02:00
UnsafeDeserialization.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
UnsafeDeserializationCustomizations.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
UnsafeDeserializationQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
UnsafeShellCommandConstructionCustomizations.qll
add py/shell-command-constructed-from-input, but without a source.
2023-02-03 14:47:55 +01:00
UnsafeShellCommandConstructionQuery.qll
add py/shell-command-constructed-from-input, but without a source.
2023-02-03 14:47:55 +01:00
UrlRedirect.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
UrlRedirectCustomizations.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
UrlRedirectQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
WeakSensitiveDataHashing.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
WeakSensitiveDataHashingCustomizations.qll
Packaging: Rafactor Python core libraries
2021-08-24 13:23:45 -07:00
WeakSensitiveDataHashingQuery.qll
Python: Adopt Query.qll suffix for dataflow config defs
2022-03-21 14:53:53 +01:00
XmlBombCustomizations.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
XmlBombQuery.qll
Python: Move last XXE/XML bomb out of experimental
2022-04-07 15:37:56 +02:00
XpathInjection.qll
Python: Deprecate old non-Query.qll dataflow defs
2022-03-21 15:03:22 +01:00
XpathInjectionCustomizations.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
XpathInjectionQuery.qll
Python: Deprecate and replace BarrierGuard class.
2022-06-20 15:46:38 +02:00
XxeCustomizations.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
XxeQuery.qll
Python: Move last XXE/XML bomb out of experimental
2022-04-07 15:37:56 +02:00