Commits

Commit history

1. Commits on Apr 24, 2024

   • Update instances of experimental concept to the main one, and anotate missing experimental test results.

     joefarebrother

     committed
     cf8db4eView commit details

     Copy full SHA for cf8db4e

     View code at this pointBrowse repository at this point

   • Add documentation

     joefarebrother

     committed
     daa31b5View commit details

     Copy full SHA for daa31b5

     View code at this pointBrowse repository at this point

   • Fix qldoc + remove deprecation from experimental concepts (as they are still used in another experimental query)

     joefarebrother

     committed
     8636a50View commit details

     Copy full SHA for 8636a50

     View code at this pointBrowse repository at this point

   • Implemented sinks for bulk header updates, and added corresponding tests.

     joefarebrother

     committed
     a88ad62View commit details

     Copy full SHA for a88ad62

     View code at this pointBrowse repository at this point

   • Add to header write concept a specification of whether the name or value arg allows newlines.

     Show description for 68d9091
     joefarebrother

     committed
     68d9091View commit details

     Copy full SHA for 68d9091

     View code at this pointBrowse repository at this point

   • Move headers injection query and concept from experimental to main

     joefarebrother

     committed
     6021d92View commit details

     Copy full SHA for 6021d92

     View code at this pointBrowse repository at this point
2. Commits on Apr 22, 2024

   • Python: Autoformat everything

     Show description for b484aee
     tausbn

     committed
     b484aeeView commit details

     Copy full SHA for b484aee

     View code at this pointBrowse repository at this point

   • Python: Change all remaining occurrences of `StrConst`

     Show description for 1c68c98
     tausbn

     committed
     1c68c98View commit details

     Copy full SHA for 1c68c98

     View code at this pointBrowse repository at this point
3. Commits on Mar 15, 2024

   • use of a single var "op" of type Cmpop

     

     Sim4n6

     authored and

     yoff

     committed
     26a16b7View commit details

     Copy full SHA for 26a16b7

     View code at this pointBrowse repository at this point

   • Fix p tag in UnicodeDoS.qhelp

     

     Sim4n6

     authored and

     yoff

     committed
     a717bf1View commit details

     Copy full SHA for a717bf1

     View code at this pointBrowse repository at this point

   • Fix UnicodeDoS vulnerability in CWE-770 code

     

     Sim4n6

     authored and

     yoff

     committed
     af19a03View commit details

     Copy full SHA for af19a03

     View code at this pointBrowse repository at this point

   • Fix UnicodeDoS vulnerability in CWE-770

     

     Sim4n6

     authored and

     yoff

     committed
     085d803View commit details

     Copy full SHA for 085d803

     View code at this pointBrowse repository at this point

   • Update request parameter name in good_1() function

     

     Sim4n6

     authored and

     yoff

     committed
     31dc542View commit details

     Copy full SHA for 31dc542

     View code at this pointBrowse repository at this point

   • Refactor Unicode normalization code

     

     Sim4n6

     authored and

     yoff

     committed
     70ebc58View commit details

     Copy full SHA for 70ebc58

     View code at this pointBrowse repository at this point

   • Update python/ql/src/experimental/Security/CWE-770/UnicodeDoS.ql

     Show description for 658b88e
     

     Sim4n6

     and

     yoff

     committed
     658b88eView commit details

     Copy full SHA for 658b88e

     View code at this pointBrowse repository at this point

   • Add some comments and docs

     

     Sim4n6

     authored and

     yoff

     committed
     1f767b8View commit details

     Copy full SHA for 1f767b8

     View code at this pointBrowse repository at this point

   • Add UnicodeDoS sink for werkzeug secure_filename

     

     Sim4n6

     authored and

     yoff

     committed
     5cc9170View commit details

     Copy full SHA for 5cc9170

     View code at this pointBrowse repository at this point

   • Add Unicode DoS (CWE-770)

     

     Sim4n6

     authored and

     yoff

     committed
     3424650View commit details

     Copy full SHA for 3424650

     View code at this pointBrowse repository at this point
4. Commits on Feb 14, 2024

   • Fix QLDoc issues

     am0o0

     committed
     09d8a75View commit details

     Copy full SHA for 09d8a75

     View code at this pointBrowse repository at this point

   • Python: Fix test exclusion for stdlib Python 3.12

     RasmusWL

     committed
     eb401a2View commit details

     Copy full SHA for eb401a2

     View code at this pointBrowse repository at this point

   • Python: Change name/id to `Decompression Bomb`

     Show description for e5bd633
     RasmusWL

     committed
     e5bd633View commit details

     Copy full SHA for e5bd633

     View code at this pointBrowse repository at this point

   • Python: Use dataflow instead of taint-tracking

     RasmusWL

     committed
     69c8ef9View commit details

     Copy full SHA for 69c8ef9

     View code at this pointBrowse repository at this point

   • Python: Delete duplicated file

     RasmusWL

     committed
     ba7dd38View commit details

     Copy full SHA for ba7dd38

     View code at this pointBrowse repository at this point

   • Python: Remove spurious results in stdlib

     RasmusWL

     committed
     9ae3ea8View commit details

     Copy full SHA for 9ae3ea8

     View code at this pointBrowse repository at this point

   • Python: Use helper predicate

     Show description for d8fd457
     RasmusWL

     committed
     d8fd457View commit details

     Copy full SHA for d8fd457

     View code at this pointBrowse repository at this point

   • Python: Use `Unit` class

     RasmusWL

     committed
     e7772f1View commit details

     Copy full SHA for e7772f1

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into amammad-python-bombs

     RasmusWL

     committed
     9399258View commit details

     Copy full SHA for 9399258

     View code at this pointBrowse repository at this point
5. Commits on Jan 22, 2024

   • delete outdated deprecations

     erik-krogh

     committed
     8be7eadView commit details

     Copy full SHA for 8be7ead

     View code at this pointBrowse repository at this point
6. Commits on Dec 14, 2023

   • Python: Remove references to FlowStateString.

     aschackmull

     committed
     8ef4821View commit details

     Copy full SHA for 8ef4821

     View code at this pointBrowse repository at this point
7. Commits on Dec 7, 2023

   • added inline tests

     am0o0

     committed
     5795c72View commit details

     Copy full SHA for 5795c72

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into amammad-python-bombs

     am0o0

     committed
     6ebdae3View commit details

     Copy full SHA for 6ebdae3

     View code at this pointBrowse repository at this point

   • fix some qldocs, change Sink extenstion model, deduct some not necessarily checks :)

     am0o0

     committed
     2d0067dView commit details

     Copy full SHA for 2d0067d

     View code at this pointBrowse repository at this point
8. Commits on Nov 16, 2023

   • Remove @precision values, correct missing tags

     ctcampbell

     committed
     114b694View commit details

     Copy full SHA for 114b694

     View code at this pointBrowse repository at this point
9. Commits on Oct 9, 2023

   • clean up unused vars,fix tests

     am0o0

     committed
     4283bb7View commit details

     Copy full SHA for 4283bb7

     View code at this pointBrowse repository at this point

   • move library file to experimental lib directory

     am0o0

     committed
     9d86e79View commit details

     Copy full SHA for 9d86e79

     View code at this pointBrowse repository at this point