Mathias Vorreiter Pedersen abe30457ee Python: Accept test changes.

2022-03-17 14:03:58 +01:00

..

CVE-2018-1281

Python: Port bind-to-all-interfaces to type-tracking

2021-02-23 16:01:24 +01:00

CWE-020-ExternalAPIs

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-020-IncompleteHostnameRegExp

Python: Move py/incomplete-hostname-regexp tests to own folder

2021-07-19 16:48:21 +02:00

CWE-020-IncompleteUrlSubstringSanitization

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-022-PathInjection

Python: Accept test changes.

2022-03-17 14:03:58 +01:00

CWE-022-TarSlip

Revert "Merge pull request #5171 from RasmusWL/restructure-queries"

2021-02-17 16:32:53 +01:00

CWE-078-CommandInjection

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-078-CommandInjection-py2

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-079-Jinja2WithoutEscaping

Python: Move Jinja2WithoutEscaping tests to own folder

2021-07-19 16:44:41 +02:00

CWE-079-ReflectedXss

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-089-SqlInjection

Python: Merge SQLAlchemy TextClause injection into py/sql-injection

2021-09-21 20:21:42 +02:00

CWE-090-LdapInjection

python: more detailed alert message

2022-02-14 11:55:07 +01:00

CWE-094-CodeInjection

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-116-BadTagFilter

add a bad-tag-filter query for Python and JavaScript

2021-09-21 15:04:03 +02:00

CWE-117-LogInjection

python: move log injection out of experimental

2022-01-31 11:27:55 +01:00

CWE-209-StackTraceExposure

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-215-FlaskDebug

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-295-MissingHostKeyValidation

Python: Split CWE-295 tests

2021-02-24 10:12:45 +01:00

CWE-295-RequestWithoutValidation

Python: Port py/request-without-cert-validation to use API graphs

2021-11-09 16:37:50 +01:00

CWE-312-CleartextLogging

Python: Apply suggestions from code review

2022-01-20 14:20:15 +01:00

CWE-312-CleartextStorage

Python: Remove usernames as sensitive source for cleartext queries

2022-01-19 15:25:21 +01:00

CWE-312-CleartextStorage-py3

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-326-WeakCryptoKey

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-327-BrokenCryptoAlgorithm

Python: Port py/weak-cryptographic-algorithm

2021-04-22 15:23:38 +02:00

CWE-327-InsecureDefaultProtocol

Python: Fix test folder for InsecureDefaultProtocol

2021-07-19 16:56:07 +02:00

CWE-327-InsecureProtocol

Python: Fix test folder for InsecureProtocol

2021-07-19 16:57:00 +02:00

CWE-327-WeakSensitiveDataHashing

Python: Update test expectation following rename

2021-10-12 10:36:18 +02:00

CWE-377-InsecureTemporaryFile

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-502-UnsafeDeserialization

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-601-UrlRedirect

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-643-XPathInjection

python: remove superfluous configuration

2022-02-08 11:34:11 +01:00

CWE-730-PolynomialReDoS

Python: remember to update refs...

2021-10-28 14:32:53 +02:00

CWE-730-ReDoS

Ruby/Python: regex parser: group sequences of 'normal' characters

2022-02-22 16:15:33 +01:00

CWE-730-RegexInjection

Python: Move query tests over

2021-09-14 13:29:21 +02:00

CWE-732-WeakFilePermissions

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-798-HardcodedCredentials

Python: Restructure security tests to contain query name

2021-07-19 16:54:34 +02:00

CWE-918-ServerSideRequestForgery

Python: Adjust .expected based on new comment

2021-12-17 15:29:41 +01:00

lib

Python : Add query to detect Server Side Template Injection

2020-07-21 18:01:27 +05:30