hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-02 09:16:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
ddb50b81206627cc4b60c1f372b078ed75c368dc
codeql/python/ql/test/query-tests/Security
History
jorgectf c82ab2b2ab Add markupsafe as XXE sanitizer 
Co-authored-by: Kevin Stubbings <Kwstubbs@users.noreply.github.com>
2023-07-05 20:23:20 +02:00
..
CVE-2018-1281
…
CWE-020-ExternalAPIs
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-020-IncompleteHostnameRegExp
…
CWE-020-IncompleteUrlSubstringSanitization
…
CWE-020-SuspiciousRegexpRange
…
CWE-022-PathInjection
Python: Update more inline expectation tests to use the paramterized module
2023-06-20 10:16:15 +02:00
CWE-022-TarSlip
…
CWE-078-CommandInjection
Python: Update more inline expectation tests to use the paramterized module
2023-06-20 10:16:15 +02:00
CWE-078-CommandInjection-py2
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-078-UnsafeShellCommandConstruction
Python: Update more inline expectation tests to use the paramterized module
2023-06-20 10:16:15 +02:00
CWE-079-Jinja2WithoutEscaping
…
CWE-079-ReflectedXss
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-089-SqlInjection
…
CWE-090-LdapInjection
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
CWE-094-CodeInjection
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-116-BadTagFilter
…
CWE-117-LogInjection
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-209-StackTraceExposure
Python: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:29 +02:00
CWE-215-FlaskDebug
…
CWE-285-PamAuthorization
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-295-MissingHostKeyValidation
Python: Expand modeling of paramiko
2023-04-18 11:57:20 +02:00
CWE-295-RequestWithoutValidation
…
CWE-312-CleartextLogging
Python: Fix results outside DB for CleartextLogging
2022-11-22 14:46:32 +01:00
CWE-312-CleartextStorage
…
CWE-312-CleartextStorage-py3
Python: Fix problems with sinks in pathlib
2022-11-22 14:46:32 +01:00
CWE-326-WeakCryptoKey
update python test cases
2022-12-01 11:56:44 -05:00
CWE-327-BrokenCryptoAlgorithm
…
CWE-327-InsecureDefaultProtocol
…
CWE-327-InsecureProtocol
Merge branch 'main' into python/rewrite-InsecureContextConfiguration
2023-03-27 10:20:53 +02:00
CWE-327-WeakSensitiveDataHashing
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
CWE-377-InsecureTemporaryFile
…
CWE-502-UnsafeDeserialization
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-601-UrlRedirect
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-611-Xxe
Add markupsafe as XXE sanitizer
2023-07-05 20:23:20 +02:00
CWE-643-XPathInjection
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-730-PolynomialReDoS
python: add summaries for
2023-05-26 14:04:15 +02:00
CWE-730-ReDoS
track string-constants to regular expression uses
2023-01-06 13:17:31 +01:00
CWE-730-RegexInjection
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
CWE-732-WeakFilePermissions
Python: Accept change to WeakFilePermissions.expected
2023-02-16 13:27:16 +01:00
CWE-776-XmlBomb
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
CWE-798-HardcodedCredentials
do a quick-and-dirty conversion of py/hardcoded-credentials to the new dataflow library
2023-06-14 08:31:56 +02:00
CWE-918-ServerSideRequestForgery
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
lib
…