Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Aug 28, 2023

• Python: Move `CommandInjection` to new dataflow API

  RasmusWL

  committed
  b30142c

  Copy full SHA for b30142c

• Python: Move `UnsafeShellCommandConstruction` to new dataflow API

  RasmusWL

  committed
  700841e

  Copy full SHA for 700841e

Commits on Mar 13, 2023

• lower precision of py/shell-command-constructed-from-input to medium

  erik-krogh

  committed
  6a5d6eb

  Copy full SHA for 6a5d6eb

Commits on Feb 15, 2023

• fix various nits based on feedback

  erik-krogh

  committed
  7598549

  Copy full SHA for 7598549

Commits on Feb 3, 2023

• add `py/shell-command-constructed-from-input`, but without a source.

  Show description for 7fcc548
  erik-krogh

  committed
  7fcc548

  Copy full SHA for 7fcc548

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  944ca4a

  Copy full SHA for 944ca4a

Commits on Sep 2, 2022

• change alert messages of path queries to use the same template

  erik-krogh

  committed
  089ce5a

  Copy full SHA for 089ce5a

Commits on Aug 25, 2022

• Merge pull request #9816 from erik-krogh/msgConsis

  Show description for 06afe9c
  erik-krogh

  authored
  06afe9c

  Copy full SHA for 06afe9c

Commits on Aug 24, 2022

• Make *.ql non-executable

  igfoo

  committed
  3fcfd32

  Copy full SHA for 3fcfd32

Commits on Aug 22, 2022

• update {js/py}/command-line-injection to match csharp/java

  erik-krogh

  committed
  9395f15

  Copy full SHA for 9395f15

Commits on Mar 21, 2022

• Python: Deprecate old non-Query.qll dataflow defs

  RasmusWL

  committed
  695553b

  Copy full SHA for 695553b

Commits on Nov 16, 2021

• Python/Ruby: Remove owasp tags

  Show description for 98e6fc8
  RasmusWL

  committed
  98e6fc8

  Copy full SHA for 98e6fc8

Commits on Jul 12, 2021

• Python: Port `py/command-line-injection` to use proper source/sink customization

  RasmusWL

  committed
  62e4445

  Copy full SHA for 62e4445

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Feb 17, 2021

• Revert "Merge pull request #5171 from RasmusWL/restructure-queries"

  Show description for 7afe397
  RasmusWL

  committed
  7afe397

  Copy full SHA for 7afe397

Commits on Feb 16, 2021

• Python: Restructure query file location

  Show description for 3a18881
  RasmusWL

  committed
  3a18881

  Copy full SHA for 3a18881

Commits on Nov 6, 2020

• Python: Move CommandInjection configuration to own file

  RasmusWL

  committed
  6299b73

  Copy full SHA for 6299b73

Commits on Nov 2, 2020

• Python: More import fixups

  tausbn

  committed
  fb6a02e

  Copy full SHA for fb6a02e

Commits on Oct 30, 2020

• Python: Promote experimental queries

  Show description for f903e4f
  tausbn

  committed
  f903e4f

  Copy full SHA for f903e4f

Commits on Jul 7, 2020

• Python: Autoformat everything using `qlformat`.

  Show description for f07a7bf
  tausbn

  committed
  f07a7bf

  Copy full SHA for f07a7bf

Commits on Jun 19, 2020

• Python: Get rid of deprecated terms in code and `.qhelp`.

  tausbn

  committed
  01fb1e3

  Copy full SHA for 01fb1e3

Commits on May 26, 2020

• Python: Extend command-injection to handle fabric.api.execute

  RasmusWL

  committed
  9c75a39

  Copy full SHA for 9c75a39

Commits on Mar 30, 2020

• Python: Autoformat one final straggler.

  tausbn

  committed
  ab4cef5

  Copy full SHA for ab4cef5

Commits on Mar 23, 2020

• Python: Add abstract class CommandSink

  Show description for d475bb9
  RasmusWL

  committed
  d475bb9

  Copy full SHA for d475bb9

Commits on Feb 3, 2020

• Python: Fix minor problems in security examples

  RasmusWL

  committed
  27a7d09

  Copy full SHA for 27a7d09

Commits on Jan 31, 2020

• Python: Autoformat security

  RasmusWL

  committed
  2648e34

  Copy full SHA for 2648e34

Commits on Jul 26, 2019

• Python: Update all remaining taint-tracking queries to use configurations.

  markshannon

  committed
  3e5fddd

  Copy full SHA for 3e5fddd

Commits on Nov 23, 2018

• Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

  markshannon

  committed
  61bd868

  Copy full SHA for 61bd868

Commits on Nov 22, 2018

• Upgrade taint-tracking security queries to path-problem queries.

  

  Mark Shannon

  authored and

  markshannon

  committed
  722d89f

  Copy full SHA for 722d89f

Commits on Nov 19, 2018

• Python security queries. Choose a precision reflecting actual precision for Security queries.

  markshannon

  committed
  e930b43

  Copy full SHA for e930b43

• Initial commit of Python queries and QL libraries.

  

  Mark Shannon

  authored and

  markshannon

  committed
  5f58824

  Copy full SHA for 5f58824

Loading