Commit history

1. Commits on Aug 28, 2023

   • Python: Move `CommandInjection` to new dataflow API

     RasmusWL

     committed
     b30142cView commit details

     Copy full SHA for b30142c

     View code at this pointBrowse repository at this point

   • Python: Move `UnsafeShellCommandConstruction` to new dataflow API

     RasmusWL

     committed
     700841eView commit details

     Copy full SHA for 700841e

     View code at this pointBrowse repository at this point
2. Commits on Mar 13, 2023

   • lower precision of py/shell-command-constructed-from-input to medium

     erik-krogh

     committed
     6a5d6ebView commit details

     Copy full SHA for 6a5d6eb

     View code at this pointBrowse repository at this point
3. Commits on Feb 15, 2023

   • fix various nits based on feedback

     erik-krogh

     committed
     7598549View commit details

     Copy full SHA for 7598549

     View code at this pointBrowse repository at this point
4. Commits on Feb 3, 2023

   • add `py/shell-command-constructed-from-input`, but without a source.

     Show description for 7fcc548
     erik-krogh

     committed
     7fcc548View commit details

     Copy full SHA for 7fcc548

     View code at this pointBrowse repository at this point
5. Commits on Oct 7, 2022

   • fix some more style-guide violations in the alert-messages

     erik-krogh

     committed
     944ca4aView commit details

     Copy full SHA for 944ca4a

     View code at this pointBrowse repository at this point
6. Commits on Sep 2, 2022

   • change alert messages of path queries to use the same template

     erik-krogh

     committed
     089ce5aView commit details

     Copy full SHA for 089ce5a

     View code at this pointBrowse repository at this point
7. Commits on Aug 25, 2022

   • Merge pull request #9816 from erik-krogh/msgConsis

     Show description for 06afe9c
     erik-krogh

     authored
     06afe9cView commit details

     Copy full SHA for 06afe9c

     View code at this pointBrowse repository at this point
8. Commits on Aug 24, 2022

   • Make *.ql non-executable

     igfoo

     committed
     3fcfd32View commit details

     Copy full SHA for 3fcfd32

     View code at this pointBrowse repository at this point
9. Commits on Aug 22, 2022

   • update {js/py}/command-line-injection to match csharp/java

     erik-krogh

     committed
     9395f15View commit details

     Copy full SHA for 9395f15

     View code at this pointBrowse repository at this point
10. Commits on Mar 21, 2022

    • Python: Deprecate old non-Query.qll dataflow defs

      RasmusWL

      committed
      695553bView commit details

      Copy full SHA for 695553b

      View code at this pointBrowse repository at this point
11. Commits on Nov 16, 2021

    • Python/Ruby: Remove owasp tags

      Show description for 98e6fc8
      RasmusWL

      committed
      98e6fc8View commit details

      Copy full SHA for 98e6fc8

      View code at this pointBrowse repository at this point
12. Commits on Jul 12, 2021

    • Python: Port `py/command-line-injection` to use proper source/sink customization

      RasmusWL

      committed
      62e4445View commit details

      Copy full SHA for 62e4445

      View code at this pointBrowse repository at this point
13. Commits on Jun 15, 2021

    • Update security-severity scores

      calumgrant

      committed
      771e686View commit details

      Copy full SHA for 771e686

      View code at this pointBrowse repository at this point
14. Commits on Jun 10, 2021

    • Add security-severity metadata

      calumgrant

      committed
      a594afbView commit details

      Copy full SHA for a594afb

      View code at this pointBrowse repository at this point
15. Commits on Feb 17, 2021

    • Revert "Merge pull request #5171 from RasmusWL/restructure-queries"

      Show description for 7afe397
      RasmusWL

      committed
      7afe397View commit details

      Copy full SHA for 7afe397

      View code at this pointBrowse repository at this point
16. Commits on Feb 16, 2021

    • Python: Restructure query file location

      Show description for 3a18881
      RasmusWL

      committed
      3a18881View commit details

      Copy full SHA for 3a18881

      View code at this pointBrowse repository at this point
17. Commits on Nov 6, 2020

    • Python: Move CommandInjection configuration to own file

      RasmusWL

      committed
      6299b73View commit details

      Copy full SHA for 6299b73

      View code at this pointBrowse repository at this point
18. Commits on Nov 2, 2020

    • Python: More import fixups

      tausbn

      committed
      fb6a02eView commit details

      Copy full SHA for fb6a02e

      View code at this pointBrowse repository at this point
19. Commits on Oct 30, 2020

    • Python: Promote experimental queries

      Show description for f903e4f
      tausbn

      committed
      f903e4fView commit details

      Copy full SHA for f903e4f

      View code at this pointBrowse repository at this point
20. Commits on Jul 7, 2020

    • Python: Autoformat everything using `qlformat`.

      Show description for f07a7bf
      tausbn

      committed
      f07a7bfView commit details

      Copy full SHA for f07a7bf

      View code at this pointBrowse repository at this point
21. Commits on Jun 19, 2020

    • Python: Get rid of deprecated terms in code and `.qhelp`.

      tausbn

      committed
      01fb1e3View commit details

      Copy full SHA for 01fb1e3

      View code at this pointBrowse repository at this point
22. Commits on May 26, 2020

    • Python: Extend command-injection to handle fabric.api.execute

      RasmusWL

      committed
      9c75a39View commit details

      Copy full SHA for 9c75a39

      View code at this pointBrowse repository at this point
23. Commits on Mar 30, 2020

    • Python: Autoformat one final straggler.

      tausbn

      committed
      ab4cef5View commit details

      Copy full SHA for ab4cef5

      View code at this pointBrowse repository at this point
24. Commits on Mar 23, 2020

    • Python: Add abstract class CommandSink

      Show description for d475bb9
      RasmusWL

      committed
      d475bb9View commit details

      Copy full SHA for d475bb9

      View code at this pointBrowse repository at this point
25. Commits on Feb 3, 2020

    • Python: Fix minor problems in security examples

      RasmusWL

      committed
      27a7d09View commit details

      Copy full SHA for 27a7d09

      View code at this pointBrowse repository at this point
26. Commits on Jan 31, 2020

    • Python: Autoformat security

      RasmusWL

      committed
      2648e34View commit details

      Copy full SHA for 2648e34

      View code at this pointBrowse repository at this point
27. Commits on Jul 26, 2019

    • Python: Update all remaining taint-tracking queries to use configurations.

      markshannon

      committed
      3e5fdddView commit details

      Copy full SHA for 3e5fddd

      View code at this pointBrowse repository at this point
28. Commits on Nov 23, 2018

    • Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.

      markshannon

      committed
      61bd868View commit details

      Copy full SHA for 61bd868

      View code at this pointBrowse repository at this point
29. Commits on Nov 22, 2018

    • Upgrade taint-tracking security queries to path-problem queries.

      

      Mark Shannon

      authored and

      markshannon

      committed
      722d89fView commit details

      Copy full SHA for 722d89f

      View code at this pointBrowse repository at this point
30. Commits on Nov 19, 2018

    • Python security queries. Choose a precision reflecting actual precision for Security queries.

      markshannon

      committed
      e930b43View commit details

      Copy full SHA for e930b43

      View code at this pointBrowse repository at this point

    • Initial commit of Python queries and QL libraries.

      

      Mark Shannon

      authored and

      markshannon

      committed
      5f58824View commit details

      Copy full SHA for 5f58824

      View code at this pointBrowse repository at this point
31. Loading