Mark Shannon 38a5fb715a Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

2019-03-05 16:52:28 +00:00

..

CWE-020

Python: Two new queries for URL and hostname sanitization (CWE-020).

2019-01-24 12:57:14 +00:00

CWE-022

Python: Fix parent relation for path-queries.

2018-11-23 15:04:01 +00:00

CWE-078

Python: Add extra sinks for command-injection query.

2018-11-23 14:29:02 +00:00

CWE-079

Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.

2018-11-28 10:46:44 +00:00

CWE-089

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-094

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-209

Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

2019-03-05 16:52:28 +00:00

CWE-215

Python: Implement check for flask debug mode.

2018-11-27 15:14:38 +01:00

CWE-295

Python: Account for other 'falsey' values in query.

2018-11-23 14:42:45 +00:00

CWE-326

Python: Use consistent abbreviations in weak-crypto query message.

2018-11-28 16:58:22 +00:00

CWE-327

Support from ssl import PROTOCOL_....

2019-01-07 15:24:15 +01:00

CWE-377

Fix interpolation.

2019-02-26 16:27:04 +01:00

CWE-502

Python: Support the dill pickling library.

2019-01-16 14:53:42 +01:00

CWE-601

Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

2018-11-23 12:32:14 +00:00

CWE-732

Python: Check os.open as well as os.chmod for weak file permissions.

2019-01-28 14:26:16 +00:00

CWE-798

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

lib

Python: CherryPy web framework support -- requests.

2019-02-28 15:24:58 +00:00

options

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00