Sotiris Dragonas db493ef30a Python: port prompt injection queries (system + user) from JS PR #21953 ...

Replace the experimental py/prompt-injection query with two queries mirroring
the JavaScript split:
- py/system-prompt-injection (system prompt / tool description / developer prompt)
- py/user-prompt-injection (user-role prompt)

Supports OpenAI (+Agents), Anthropic, Google GenAI, LangChain and OpenRouter
via MaD models plus role-filtered framework sinks that MaD cannot express.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-18 13:52:51 +03:00

..

CWE-022-TarSlip

Accept changed edges in test output

2026-06-02 16:15:08 +01:00

CWE-022-UnsafeUnpacking

Accept changed edges in test output

2026-06-02 16:15:08 +01:00

CWE-074-paramiko

fix conflict

2024-06-18 17:18:59 +02:00

CWE-074-RemoteCommandExecution

Accept changed edges in test output

2026-06-02 16:15:08 +01:00

CWE-079

Python: Accept qltest .expected file changes.

2024-05-22 15:43:49 +02:00

CWE-091-XsltInjection

Update edges in expected test output

2026-06-02 18:29:56 +01:00

CWE-094

Python: Fix .expected

2024-07-11 14:42:26 +02:00

CWE-176

python: Inline expectation should have space after $

2026-03-04 12:45:05 +00:00

CWE-208

[DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash

2025-07-17 14:40:31 +02:00

CWE-287

fix some more style-guide violations in the alert-messages

2022-10-07 11:23:34 +02:00

CWE-287-ConstantSecretKey

Python: Update all .expected files

2024-04-22 12:00:09 +00:00

CWE-327-UnsafeUsageOfClientSideEncryptionVersion

Python: Accept qltest .expected file changes.

2024-05-22 15:43:49 +02:00

CWE-338

add tests

2021-12-04 00:52:15 +08:00

CWE-346

WIP: Python: CORS Bypass

2024-09-03 03:11:35 +05:30

CWE-347

Update .expected

2022-02-23 00:55:39 +01:00

CWE-348

Python: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

CWE-409

Pretty print model numbers in tests

2026-01-30 09:21:24 +00:00

CWE-522

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-522-global-option

Python: More style-guide renaming

2023-08-28 15:31:08 +02:00

CWE-611-SimpleXmlRpcServer

fix some more style-guide violations in the alert-messages

2022-10-07 11:23:34 +02:00

CWE-770

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-1236

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

CWE-1427-SystemPromptInjection

Python: port prompt injection queries (system + user) from JS PR #21953

2026-06-18 13:52:51 +03:00

CWE-1427-UserPromptInjection

Python: port prompt injection queries (system + user) from JS PR #21953

2026-06-18 13:52:51 +03:00