Commits

Breadcrumbs

History for

on0b2f44b

User selector

All users

All time

Commit History

Commits on Mar 15, 2019

• Merge pull request #1052 from markshannon/python-taint-tracking-configuration

  Show description for 0b2f44b
  taus-semmle

  authored
  0b2f44b

  Copy full SHA for 0b2f44b

Commits on Mar 14, 2019

• Python: Move taint-tracking library to new location and extend configuration to match API of other languages.

  markshannon

  committed
  ab23a15

  Copy full SHA for ab23a15

Commits on Mar 12, 2019

• Python: Fix false positive for redundant comparison query when a complex comparison is negated.

  markshannon

  committed
  28c20a3

  Copy full SHA for 28c20a3

• Python: Make behaviour of taint-tracking sanitizers and extensions less surprising for the unlikely case of mutliple configurations.

  markshannon

  committed
  7b8ca30

  Copy full SHA for 7b8ca30

Commits on Mar 8, 2019

• Merge pull request #1043 from markshannon/python-fix-stack-trace-exposure

  Show description for 984fb3a
  taus-semmle

  authored
  984fb3a

  Copy full SHA for 984fb3a

Commits on Mar 6, 2019

• Python: Add basic taint-tracking configuration. Should help avoid cross-talk between flows and brings the interface closer to that of the other languages.

  markshannon

  committed
  7aef32e

  Copy full SHA for 7aef32e

Commits on Mar 5, 2019

• Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.

  markshannon

  committed
  38a5fb7

  Copy full SHA for 38a5fb7

• Python: Ignore dead objects from library trap files.

  markshannon

  committed
  32dabce

  Copy full SHA for 32dabce

Commits on Mar 4, 2019

• Merge pull request #1032 from xiemaisi/master-for-merge

  Show description for 7f5e263
  

  Max Schaefer

  authored
  7f5e263

  Copy full SHA for 7f5e263

• Python: Add missing `@kind` for `py/insecure-temporary-file`.

  taus-semmle

  committed
  63893fe

  Copy full SHA for 63893fe

Commits on Mar 1, 2019

• Python: Update py/modification-of-default-value to account for truthiness of default value.

  markshannon

  committed
  94190e7

  Copy full SHA for 94190e7

• Python: Improve taint tracking to account for truthiness of the taint kind.

  markshannon

  committed
  ebd9bc3

  Copy full SHA for ebd9bc3

• Merge branch 'master' into python-mutable-default-with-flow

  taus-semmle

  committed
  64e6974

  Copy full SHA for 64e6974

• Change kind to `path-problem`.

  taus-semmle

  committed
  91cfc9b

  Copy full SHA for 91cfc9b

Commits on Feb 28, 2019

• Python: Fix qldoc.

  markshannon

  committed
  af26807

  Copy full SHA for af26807

• Python: Make bottle response logic consistent with other frameworks.

  markshannon

  committed
  2df718d

  Copy full SHA for 2df718d

• Python: Add cherrypy handler function return values as taint sinks.

  markshannon

  committed
  91a1cc9

  Copy full SHA for 91a1cc9

• Python: CherryPy web framework support -- requests.

  markshannon

  committed
  6c82be8

  Copy full SHA for 6c82be8

• Python: Add basic support for stdlib cookie objects.

  markshannon

  committed
  e933ba2

  Copy full SHA for e933ba2

• Merge pull request #979 from markshannon/python-falcon

  Show description for b8b4216
  taus-semmle

  authored
  b8b4216

  Copy full SHA for b8b4216

• Python: Add wsgi.environment as a kind of taint, and add suuport for `env` attribute of falcon request objects.

  markshannon

  committed
  1444b39

  Copy full SHA for 1444b39

• Merge pull request #1001 from markshannon/python-delete-internal-tests

  Show description for a83f33b
  taus-semmle

  authored
  a83f33b

  Copy full SHA for a83f33b

Commits on Feb 27, 2019

• Python: Fix falcon sources to only be source if a route is attached.

  markshannon

  committed
  9170d85

  Copy full SHA for 9170d85

• Python delete extractor tests. Duplicates of internal tests.

  markshannon

  committed
  d605dfd

  Copy full SHA for d605dfd

• Merge pull request #785 from taus-semmle/python-unsafe-use-of-mktemp

  Show description for f7d7b8e
  markshannon

  authored
  f7d7b8e

  Copy full SHA for f7d7b8e

• Python: Add responses to Falcon framework support.

  markshannon

  committed
  9e268d7

  Copy full SHA for 9e268d7

• Python: Basic support for falcon framework; routing and requests.

  markshannon

  committed
  6a48420

  Copy full SHA for 6a48420

• Python: Add test skeleton for falcon web framework.

  markshannon

  committed
  742c1d0

  Copy full SHA for 742c1d0

Commits on Feb 26, 2019

• Merge pull request #978 from markshannon/python-turbogears

  Show description for dcaf0f8
  taus-semmle

  authored
  dcaf0f8

  Copy full SHA for dcaf0f8

• Python: Generalize turbogear response sinks to allow for internally sourced strings.

  markshannon

  committed
  a480da6

  Copy full SHA for a480da6

• Python: Fix handling of turbogears' 'expose' decorator.

  markshannon

  committed
  2995b02

  Copy full SHA for 2995b02

• Fix interpolation.

  taus-semmle

  committed
  e47b391

  Copy full SHA for e47b391

• Make query alert refer to AST nodes rather than CFG nodes.

  taus-semmle

  committed
  7daaf77

  Copy full SHA for 7daaf77

• Change query description.

  taus-semmle

  committed
  504cb64

  Copy full SHA for 504cb64

• Merge branch 'master' into python-unsafe-use-of-mktemp

  taus-semmle

  committed
  8d774cd

  Copy full SHA for 8d774cd