Mark Shannon 39b7a69abd Python: Tarslip query: Fix up sanitizers.

2019-06-19 15:00:02 +01:00

..

CWE-020

Python: Fix false positive in 'Incomplete URL substring sanitization' query.

2019-04-25 18:11:01 +01:00

CWE-022

Python: Tarslip query: Fix up sanitizers.

2019-06-19 15:00:02 +01:00

CWE-078

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-079

Fix typo.

2019-04-08 15:47:49 +01:00

CWE-089

Python revert .getNode() to .getSink()/.getSource() to keep expected test output the same.

2019-04-04 10:56:45 +01:00

CWE-094

Merge pull request #1203 from markshannon/python-taint-tracking-configuration-2

2019-04-09 10:01:35 +02:00

CWE-209

Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

2019-03-05 16:52:28 +00:00

CWE-215

Change precision to high.

2018-11-27 19:02:44 +01:00

CWE-295

Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation

2019-04-04 16:57:13 +01:00

CWE-326

Python: Add 'attr' predicate as a synomnym for 'getAttribute' to help readability.

2019-02-20 11:08:44 +00:00

CWE-327

Merge pull request #1142 from taus-semmle/python-use-new-moduleobject-api

2019-03-26 15:02:44 +00:00

CWE-377

Use attr instead of getAttribute.

2019-03-20 17:41:23 +01:00

CWE-502

Python: make sure unsafe deserialization query is using correct sources and that pickle is included in sinks.

2019-04-04 10:56:45 +01:00

CWE-601

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-732

Python: Use ModuleObject::named more consistently.

2019-03-20 17:41:23 +01:00

CWE-798

Python: Reduce the number of strings and ints identified and possible hard-coded credentials.

2019-06-03 12:22:15 +01:00