Commits

Commit history

1. Commits on Dec 17, 2021

   • Python: Adjust .expected based on new comment

     Show description for 83f87f0
     RasmusWL

     committed
     83f87f0View commit details

     Copy full SHA for 83f87f0

     View code at this pointBrowse repository at this point

   • Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/full_partial_test.py

     yoff

     authored
     9866214View commit details

     Copy full SHA for 9866214

     View code at this pointBrowse repository at this point
2. Commits on Dec 16, 2021

   • Python: Allow `http[s]://` prefix for SSRF

     RasmusWL

     committed
     1d00730View commit details

     Copy full SHA for 1d00730

     View code at this pointBrowse repository at this point

   • Python: Add tricky .format SSRF tests

     RasmusWL

     committed
     8d9a797View commit details

     Copy full SHA for 8d9a797

     View code at this pointBrowse repository at this point

   • Python: Fix SSRF sanitizer tests

     Show description for 6f297f4
     RasmusWL

     committed
     6f297f4View commit details

     Copy full SHA for 6f297f4

     View code at this pointBrowse repository at this point

   • Python: Improve full/partial SSRF split

     Show description for 4b5599f
     RasmusWL

     committed
     4b5599fView commit details

     Copy full SHA for 4b5599f

     View code at this pointBrowse repository at this point

   • Python: Adjust SSRF location to request call

     Show description for cb934e1
     RasmusWL

     committed
     cb934e1View commit details

     Copy full SHA for cb934e1

     View code at this pointBrowse repository at this point

   • Python: Add interesting test-case

     RasmusWL

     committed
     b1bca85View commit details

     Copy full SHA for b1bca85

     View code at this pointBrowse repository at this point

   • Python: Add SSRF queries

     Show description for 1cc5e54
     RasmusWL

     committed
     1cc5e54View commit details

     Copy full SHA for 1cc5e54

     View code at this pointBrowse repository at this point
3. Commits on Dec 7, 2021

   • Python: Fix syntax error locations

     tausbn

     authored
     7437cd4View commit details

     Copy full SHA for 7437cd4

     View code at this pointBrowse repository at this point
4. Commits on Dec 2, 2021

   • Merge remote-tracking branch 'origin/main' into nickrolfe/regexp_g_anchor

     nickrolfe

     committed
     0541576View commit details

     Copy full SHA for 0541576

     View code at this pointBrowse repository at this point

   • Merge pull request #7217 from RasmusWL/more-path-injection-fps

     Show description for 4609b20
     yoff

     authored
     4609b20View commit details

     Copy full SHA for 4609b20

     View code at this pointBrowse repository at this point
5. Commits on Nov 23, 2021

   • Merge pull request #6972 from yoff/python/promote-redos

     Show description for 8cccee6
     tausbn

     authored
     8cccee6View commit details

     Copy full SHA for 8cccee6

     View code at this pointBrowse repository at this point

   • Python: Add an other path injection FP

     Show description for baafd9f
     RasmusWL

     committed
     baafd9fView commit details

     Copy full SHA for baafd9f

     View code at this pointBrowse repository at this point
6. Commits on Nov 19, 2021

   • Python: treat \A, \Z, \b, \B as special chars, not escapes

     nickrolfe

     committed
     df6ba43View commit details

     Copy full SHA for df6ba43

     View code at this pointBrowse repository at this point
7. Commits on Nov 18, 2021

   • Merge pull request #6561 from erik-krogh/htmlReg

     Show description for 1cca377
     erik-krogh

     authored
     1cca377View commit details

     Copy full SHA for 1cca377

     View code at this pointBrowse repository at this point
8. Commits on Nov 15, 2021

   • Merge pull request #7091 from RasmusWL/port-request-without-validation

     Show description for 7c3b68b
     RasmusWL

     authored
     7c3b68bView commit details

     Copy full SHA for 7c3b68b

     View code at this pointBrowse repository at this point
9. Commits on Nov 9, 2021

   • Python: Port `py/request-without-cert-validation` to use API graphs

     RasmusWL

     committed
     985cd1eView commit details

     Copy full SHA for 985cd1e

     View code at this pointBrowse repository at this point

   • Python: Add `py/request-without-cert-validation` tests

     RasmusWL

     committed
     5958169View commit details

     Copy full SHA for 5958169

     View code at this pointBrowse repository at this point

   • Python: Add interesting path-injection FP

     RasmusWL

     committed
     f70e4feView commit details

     Copy full SHA for f70e4fe

     View code at this pointBrowse repository at this point
10. Commits on Nov 4, 2021

    • Merge branch 'main' into htmlReg

      erik-krogh

      committed
      02f500bView commit details

      Copy full SHA for 02f500b

      View code at this pointBrowse repository at this point
11. Commits on Oct 28, 2021

    • Python: remember to update refs...

      yoff

      committed
      8536f5fView commit details

      Copy full SHA for 8536f5f

      View code at this pointBrowse repository at this point

    • Python: Properly model `flask.send_from_directory`

      Show description for 8c3349f
      RasmusWL

      committed
      8c3349fView commit details

      Copy full SHA for 8c3349f

      View code at this pointBrowse repository at this point

    • Python: Add flask specific path-injection test

      RasmusWL

      committed
      6648a69View commit details

      Copy full SHA for 6648a69

      View code at this pointBrowse repository at this point
12. Commits on Oct 26, 2021

    • Merge branch 'main' of github.com:github/codeql into htmlReg

      erik-krogh

      committed
      44afa34View commit details

      Copy full SHA for 44afa34

      View code at this pointBrowse repository at this point
13. Commits on Oct 20, 2021

    • Python: Fix tests

      RasmusWL

      committed
      8167e83View commit details

      Copy full SHA for 8167e83

      View code at this pointBrowse repository at this point
14. Commits on Oct 14, 2021

    • Merge pull request #6693 from yoff/python/promote-regex-injection

      Show description for 7cd5e68
      RasmusWL

      authored
      7cd5e68View commit details

      Copy full SHA for 7cd5e68

      View code at this pointBrowse repository at this point
15. Commits on Oct 12, 2021

    • Merge branch 'main' of github.com:github/codeql into python/promote-regex-injection

      yoff

      committed
      61008fdView commit details

      Copy full SHA for 61008fd

      View code at this pointBrowse repository at this point

    • Python: Update test expectation following rename

      yoff

      committed
      f34d1eeView commit details

      Copy full SHA for f34d1ee

      View code at this pointBrowse repository at this point
16. Commits on Sep 21, 2021

    • Python: Merge SQLAlchemy TextClause injection into `py/sql-injection`

      Show description for a83bb39
      RasmusWL

      committed
      a83bb39View commit details

      Copy full SHA for a83bb39

      View code at this pointBrowse repository at this point

    • add a bad-tag-filter query for Python and JavaScript

      erik-krogh

      committed
      99ed4a1View commit details

      Copy full SHA for 99ed4a1

      View code at this pointBrowse repository at this point

    • use toUnicode in RegexTreeView

      erik-krogh

      committed
      8535e6fView commit details

      Copy full SHA for 8535e6f

      View code at this pointBrowse repository at this point

    • Merge pull request #6589 from RasmusWL/promote-sqlalchemy

      Show description for 4adb0c7
      yoff

      authored
      4adb0c7View commit details

      Copy full SHA for 4adb0c7

      View code at this pointBrowse repository at this point

    • Merge pull request #6557 from yoff/python/port-modification-of-default-value

      Show description for 4a16be2
      RasmusWL

      authored
      4a16be2View commit details

      Copy full SHA for 4a16be2

      View code at this pointBrowse repository at this point

    • Python: Fix .expected for new `subpaths` query predicate

      RasmusWL

      committed
      f8e6ba6View commit details

      Copy full SHA for f8e6ba6

      View code at this pointBrowse repository at this point