Harry Maclean f8359767bc Exclude non-shell interpreted args ...

Update the CommandInjection query to only consider sinks where the
argument is interpreted by a shell. If the argument is passed directly
to a subprocess then it's not vulnerable to shell injection.

2021-09-17 17:02:17 +01:00

..

library-tests

Separate open3 pipeline methods

2021-09-17 17:02:17 +01:00

query-tests

Exclude non-shell interpreted args

2021-09-17 17:02:17 +01:00

TestUtilities

Fix merge conflicts during rebase

2021-08-26 18:48:53 -04:00

qlpack.lock.yml

Revert "Use hotfixed version of codeql/suite-helpers with workaround for bug in released CLI"

2021-09-02 16:01:51 +02:00

qlpack.yml

Updated pack versions and lock files

2021-08-26 18:50:04 -04:00