Mark Shannon f7d7b8eef2 Merge pull request #785 from taus-semmle/python-unsafe-use-of-mktemp ...

Python: Add query for unsafe use of `tempfile.mktemp`.

2019-02-27 15:01:06 +00:00

..

CWE-020

Python: Two new queries for URL and hostname sanitization (CWE-020).

2019-01-24 12:57:14 +00:00

CWE-022

Python: Fix parent relation for path-queries.

2018-11-23 15:04:01 +00:00

CWE-078

Python: Add extra sinks for command-injection query.

2018-11-23 14:29:02 +00:00

CWE-079

Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.

2018-11-28 10:46:44 +00:00

CWE-089

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-094

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-209

Python: Fix parent relation for path-queries.

2018-11-23 15:04:01 +00:00

CWE-215

Python: Implement check for flask debug mode.

2018-11-27 15:14:38 +01:00

CWE-295

Python: Account for other 'falsey' values in query.

2018-11-23 14:42:45 +00:00

CWE-326

Python: Use consistent abbreviations in weak-crypto query message.

2018-11-28 16:58:22 +00:00

CWE-327

Support from ssl import PROTOCOL_....

2019-01-07 15:24:15 +01:00

CWE-377

Fix interpolation.

2019-02-26 16:27:04 +01:00

CWE-502

Python: Support the dill pickling library.

2019-01-16 14:53:42 +01:00

CWE-601

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-732

Python: Check os.open as well as os.chmod for weak file permissions.

2019-01-28 14:26:16 +00:00

CWE-798

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

lib

Merge pull request #785 from taus-semmle/python-unsafe-use-of-mktemp

2019-02-27 15:01:06 +00:00

options

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00