hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
ea4c2e432100cb15e4ad5448d02c36153a6f9f95
codeql/python/ql/test/query-tests/Security
History
Taus 25043f51a4 Merge pull request #11376 from RasmusWL/call-graph-code 
Python: New type-tracking based call-graph
2023-02-27 14:51:21 +01:00
..
CVE-2018-1281
Python: Port bind-to-all-interfaces to type-tracking
2021-02-23 16:01:24 +01:00
CWE-020-ExternalAPIs
Python: Suppress None.json.dumps from ExternalAPI queries
2022-11-22 14:46:29 +01:00
CWE-020-IncompleteHostnameRegExp
Revert "Revert "Python: switch to shared implementation of IncompleteHostnameRegExp.ql""
2022-03-18 16:31:22 +01:00
CWE-020-IncompleteUrlSubstringSanitization
changes to address reviews
2022-10-07 22:31:00 +02:00
CWE-020-SuspiciousRegexpRange
rename query to overly-large-range, and rewrite the @description
2022-07-12 16:02:46 +02:00
CWE-022-PathInjection
Python: Fixup annotation for CWE-022-PathInjection/pathlib_use.py
2023-01-23 17:40:24 +01:00
CWE-022-TarSlip
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-078-CommandInjection
python: align annotations with Ruby
2023-01-05 21:41:28 +01:00
CWE-078-CommandInjection-py2
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-079-Jinja2WithoutEscaping
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-079-ReflectedXss
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-089-SqlInjection
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-090-LdapInjection
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-094-CodeInjection
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-116-BadTagFilter
JS/Python/Ruby: s/a HTML/an HTML/
2022-09-30 10:37:52 +01:00
CWE-117-LogInjection
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-209-StackTraceExposure
Python: Fix results outside DB for StackTraceExposure
2022-11-22 14:46:32 +01:00
CWE-215-FlaskDebug
Python: Expand test for py/flask-debug
2022-10-04 20:39:08 +02:00
CWE-285-PamAuthorization
Python: Use ' instead of ` in select text
2022-11-29 14:47:45 +01:00
CWE-295-MissingHostKeyValidation
Python: Split CWE-295 tests
2021-02-24 10:12:45 +01:00
CWE-295-RequestWithoutValidation
changes to address reviews
2022-10-07 22:31:00 +02:00
CWE-312-CleartextLogging
Python: Fix results outside DB for CleartextLogging
2022-11-22 14:46:32 +01:00
CWE-312-CleartextStorage
changes to address reviews
2022-10-07 22:31:00 +02:00
CWE-312-CleartextStorage-py3
Python: Fix problems with sinks in pathlib
2022-11-22 14:46:32 +01:00
CWE-326-WeakCryptoKey
update python test cases
2022-12-01 11:56:44 -05:00
CWE-327-BrokenCryptoAlgorithm
python: update py/weak-cryptographic-algorithm to flag use of ECB block mode
2022-05-13 16:32:36 +01:00
CWE-327-InsecureDefaultProtocol
Python: Fix test folder for InsecureDefaultProtocol
2021-07-19 16:56:07 +02:00
CWE-327-InsecureProtocol
fix some more style-guide violations in the alert-messages
2022-10-07 11:23:34 +02:00
CWE-327-WeakSensitiveDataHashing
Python: Revert changes to sensitive data query alert messages
2022-09-06 12:01:24 +02:00
CWE-377-InsecureTemporaryFile
Python: Restructure security tests to contain query name
2021-07-19 16:54:34 +02:00
CWE-502-UnsafeDeserialization
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-601-UrlRedirect
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-611-Xxe
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-643-XPathInjection
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-730-PolynomialReDoS
add tracking of strings to compile-sites for poly-redos, in the style of Ruby
2023-02-02 22:56:20 +01:00
CWE-730-ReDoS
track string-constants to regular expression uses
2023-01-06 13:17:31 +01:00
CWE-730-RegexInjection
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-732-WeakFilePermissions
Python: Accept change to WeakFilePermissions.expected
2023-02-16 13:27:16 +01:00
CWE-776-XmlBomb
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
CWE-798-HardcodedCredentials
changes to address reviews
2022-10-07 22:31:00 +02:00
CWE-918-ServerSideRequestForgery
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
lib
Python : Add query to detect Server Side Template Injection
2020-07-21 18:01:27 +05:30