hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-13 08:51:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e5cb6b4496c67740fc23bf89ac2661124006b206
codeql/python/ql/lib/semmle/python/security/dataflow
History
yoff cfbae50845 Python: convert barrier guard to MaD
2026-02-26 13:12:34 +01:00
..
CleartextLoggingCustomizations.qll
Update formatting
2024-08-30 13:51:33 +01:00
CleartextLoggingQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
CleartextStorageCustomizations.qll
Update formatting
2024-08-30 13:51:33 +01:00
CleartextStorageQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
CodeInjectionCustomizations.qll
Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
CodeInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
CommandInjectionCustomizations.qll
Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
CommandInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
CookieInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
CookieInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
ExceptionInfo.qll
Python: remove EssaNodes
2023-11-20 21:35:32 +01:00
HttpHeaderInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
HttpHeaderInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
LdapInjectionCustomizations.qll
Merge branch 'main' into threat-models
2024-09-26 11:44:24 +02:00
LdapInjectionQuery.qll
Python: resolve remaining TODOs
2025-02-06 10:27:56 +01:00
LogInjectionCustomizations.qll
Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
LogInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
NoSqlInjectionCustomizations.qll
Python: NoSQLInjection -> NoSqlInjection
2023-09-29 13:52:51 +02:00
NoSqlInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
PamAuthorizationCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
PamAuthorizationQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
PathInjectionCustomizations.qll
Specify vulnerable args instead of safe ones
2026-01-30 14:10:03 +00:00
PathInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
PolynomialReDoSCustomizations.qll
Python: implement for polynomial redos
2025-02-06 10:27:45 +01:00
PolynomialReDoSQuery.qll
Python/PolynomialReDoSQuery
2025-10-28 09:40:21 +01:00
ReflectedXSSCustomizations.qll
Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
ReflectedXssQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
RegexInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
RegexInjectionQuery.qll
Python: resolve remaining TODOs
2025-02-06 10:27:56 +01:00
ServerSideRequestForgeryCustomizations.qll
Python: convert barrier guard to MaD
2026-02-26 13:12:34 +01:00
ServerSideRequestForgeryQuery.qll
Use more flowTo.
2025-12-03 14:12:08 +01:00
SqlInjectionCustomizations.qll
Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
SqlInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
StackTraceExposureCustomizations.qll
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
StackTraceExposureQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
TarSlipCustomizations.qll
Python: Change all remaining occurrences of StrConst
2024-04-22 12:00:09 +00:00
TarSlipQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
TemplateInjectionCustomizations.qll
Copy template injection to standard pack + add jinja sinks
2024-12-09 19:47:06 +00:00
TemplateInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
UnsafeDeserializationCustomizations.qll
Allow MaD sanitizers for queries with MaD sinks
2026-01-30 09:27:59 +00:00
UnsafeDeserializationQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
UnsafeShellCommandConstructionCustomizations.qll
Python: Change Str to StringLiteral
2024-04-22 12:00:09 +00:00
UnsafeShellCommandConstructionQuery.qll
Python: resolve remaining TODOs
2025-02-06 10:27:56 +01:00
UrlRedirectCustomizations.qll
Make qldoc slightly more specific
2026-01-30 09:28:01 +00:00
UrlRedirectQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
WeakSensitiveDataHashingCustomizations.qll
Packaging: Rafactor Python core libraries
2021-08-24 13:23:45 -07:00
WeakSensitiveDataHashingQuery.qll
Python: resolve remaining TODOs
2025-02-06 10:27:56 +01:00
XmlBombCustomizations.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
XmlBombQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
XpathInjectionCustomizations.qll
Python: Make queries use ActiveThreatModelSource
2024-09-10 14:32:35 +02:00
XpathInjectionQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
XxeCustomizations.qll
Add markupsafe as XXE sanitizer
2023-07-05 20:23:20 +02:00
XxeQuery.qll
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00