hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-25 21:26:37 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
c74bc6828712d6bcad60abeecaa23ca174e58858
codeql/python/ql/test/query-tests/Security
History
Max Schaefer 98178458d0 Python: Add support for more URL redirect sanitisers. 
Since some sanitisers don't handle backslashes correctly, I updated the data-flow configuration to incorporate a flow state tracking whether or not backslashes have been eliminated or converted to forward slashes.
2024-01-22 13:24:18 +00:00
..
CVE-2018-1281
…
CWE-020-ExternalAPIs
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-020-IncompleteHostnameRegExp
Update expected test output.
2023-09-22 11:28:50 +01:00
CWE-020-IncompleteUrlSubstringSanitization
…
CWE-020-SuspiciousRegexpRange
escape unicode chars in overly-large-range
2023-09-28 20:16:09 +02:00
CWE-022-PathInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-022-TarSlip
Merge branch 'main' of https://github.com/github/codeql into python/remove-ssa-nodes-from-dataflow-graph
2023-12-04 14:05:40 +01:00
CWE-078-CommandInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-078-CommandInjection-py2
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-078-UnsafeShellCommandConstruction
Python: Accept new ordering of query predicates in .expected
2023-11-15 10:09:54 +01:00
CWE-079-Jinja2WithoutEscaping
…
CWE-079-ReflectedXss
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-089-SqlInjection
Python: Accept consistency-errors in django-orm
2023-11-21 12:44:42 +01:00
CWE-090-LdapInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-094-CodeInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-116-BadTagFilter
PythonÆ fix test expectations
2023-08-24 21:21:49 +02:00
CWE-117-LogInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-209-StackTraceExposure
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-215-FlaskDebug
…
CWE-285-PamAuthorization
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-295-MissingHostKeyValidation
…
CWE-295-RequestWithoutValidation
…
CWE-312-CleartextLogging
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-312-CleartextStorage
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-312-CleartextStorage-py3
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-326-WeakCryptoKey
…
CWE-327-BrokenCryptoAlgorithm
Address review comment.
2023-10-27 10:19:28 +01:00
CWE-327-InsecureDefaultProtocol
…
CWE-327-InsecureProtocol
…
CWE-327-WeakSensitiveDataHashing
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-377-InsecureTemporaryFile
…
CWE-502-UnsafeDeserialization
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-601-UrlRedirect
Python: Add support for more URL redirect sanitisers.
2024-01-22 13:24:18 +00:00
CWE-611-Xxe
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-643-XPathInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-730-PolynomialReDoS
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-730-ReDoS
Python: accept improved test output
2023-09-26 20:58:51 +02:00
CWE-730-RegexInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-732-WeakFilePermissions
…
CWE-776-XmlBomb
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-798-HardcodedCredentials
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-918-ServerSideRequestForgery
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
CWE-943-NoSqlInjection
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
lib
…