hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-26 13:46:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
fbab0f50f258ccd00f154297ecd70956ebbbc0dc
codeql/python/ql/test/query-tests/Security
History
Rasmus Wriedt Larsen a0fcd4a9bf Merge pull request #10631 from RasmusWL/cleanup-options-files 
Python: Remove last `-p ../lib/` in `options` files
2022-10-03 11:09:59 +02:00
..
CVE-2018-1281
…
CWE-020-ExternalAPIs
…
CWE-020-IncompleteHostnameRegExp
Revert "Revert "Python: switch to shared implementation of IncompleteHostnameRegExp.ql""
2022-03-18 16:31:22 +01:00
CWE-020-IncompleteUrlSubstringSanitization
…
CWE-020-SuspiciousRegexpRange
rename query to overly-large-range, and rewrite the @description
2022-07-12 16:02:46 +02:00
CWE-022-PathInjection
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-022-TarSlip
Python: Fix imports for tarslip tests
2022-09-20 17:25:46 +02:00
CWE-078-CommandInjection
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-078-CommandInjection-py2
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-079-Jinja2WithoutEscaping
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-079-ReflectedXss
…
CWE-089-SqlInjection
…
CWE-090-LdapInjection
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-094-CodeInjection
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-116-BadTagFilter
JS/Python/Ruby: s/a HTML/an HTML/
2022-09-30 10:37:52 +01:00
CWE-117-LogInjection
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-209-StackTraceExposure
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-215-FlaskDebug
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-285-PamAuthorization
Python: Apply suggestions from code review
2022-05-18 10:30:29 +02:00
CWE-295-MissingHostKeyValidation
…
CWE-295-RequestWithoutValidation
Python: Use HTTP::Client::Request request for py/request-without-cert-validation
2022-06-08 15:42:32 +02:00
CWE-312-CleartextLogging
Python: Revert changes to sensitive data query alert messages
2022-09-06 12:01:24 +02:00
CWE-312-CleartextStorage
Python: Revert changes to sensitive data query alert messages
2022-09-06 12:01:24 +02:00
CWE-312-CleartextStorage-py3
Python: Revert changes to sensitive data query alert messages
2022-09-06 12:01:24 +02:00
CWE-326-WeakCryptoKey
…
CWE-327-BrokenCryptoAlgorithm
python: update py/weak-cryptographic-algorithm to flag use of ECB block mode
2022-05-13 16:32:36 +01:00
CWE-327-InsecureDefaultProtocol
…
CWE-327-InsecureProtocol
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-327-WeakSensitiveDataHashing
Python: Revert changes to sensitive data query alert messages
2022-09-06 12:01:24 +02:00
CWE-377-InsecureTemporaryFile
…
CWE-502-UnsafeDeserialization
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-601-UrlRedirect
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-611-Xxe
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-643-XPathInjection
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-730-PolynomialReDoS
rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"
2022-06-23 14:36:25 +02:00
CWE-730-ReDoS
fix RegExpEscape::getValue having multiple results for some escapes
2022-09-27 13:25:23 +02:00
CWE-730-RegexInjection
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-732-WeakFilePermissions
Python: Remove last -p ../lib/ in options files
2022-09-29 18:05:51 +02:00
CWE-776-XmlBomb
change alert messages of path queries to use the same template
2022-09-02 14:45:40 +02:00
CWE-798-HardcodedCredentials
…
CWE-918-ServerSideRequestForgery
Python: Implement ContentSet
2022-04-04 13:51:44 +02:00
lib
…