Commits

Commit history

1. Commits on Jul 4, 2024

   • Python: Fixup qhelp

     RasmusWL

     committed
     8d1113cView commit details

     Copy full SHA for 8d1113c

     View code at this pointBrowse repository at this point
2. Commits on Jul 3, 2024

   • Python : Arbitrary codde execution due to Js2Py

     Show description for 808af28
     

     Porcupiney Hairs

     committed
     808af28View commit details

     Copy full SHA for 808af28

     View code at this pointBrowse repository at this point
3. Commits on Jun 18, 2024

   • Revert "update id of the query file"

     Show description for 1f99559
     am0o0

     committed
     1f99559View commit details

     Copy full SHA for 1f99559

     View code at this pointBrowse repository at this point

   • fix conflict

     am0o0

     committed
     8a7fdfaView commit details

     Copy full SHA for 8a7fdfa

     View code at this pointBrowse repository at this point
4. Commits on May 29, 2024

   • update id of the query file

     am0o0

     committed
     1f11246View commit details

     Copy full SHA for 1f11246

     View code at this pointBrowse repository at this point

   • rename secondary to remote :), complete the previous commit changes

     am0o0

     committed
     b9edcb7View commit details

     Copy full SHA for b9edcb7

     View code at this pointBrowse repository at this point

   • fix the qhelp of secondary server cmd injectino

     am0o0

     committed
     5299c4aView commit details

     Copy full SHA for 5299c4a

     View code at this pointBrowse repository at this point
5. Commits on May 6, 2024

   • continue to convert paramiko query to a more general query,

     Show description for 4df73f9
     

     am0o0

     authored and

     tausbn

     committed
     4df73f9View commit details

     Copy full SHA for 4df73f9

     View code at this pointBrowse repository at this point

   • convert paramiko query to SecondaryServerCmdInjection query, Add inline tests

     

     am0o0

     authored and

     tausbn

     committed
     5fea71eView commit details

     Copy full SHA for 5fea71e

     View code at this pointBrowse repository at this point
6. Commits on Apr 24, 2024

   • Add documentation

     joefarebrother

     committed
     daa31b5View commit details

     Copy full SHA for daa31b5

     View code at this pointBrowse repository at this point

   • Move headers injection query and concept from experimental to main

     joefarebrother

     committed
     6021d92View commit details

     Copy full SHA for 6021d92

     View code at this pointBrowse repository at this point
7. Commits on Apr 22, 2024

   • Python: Autoformat everything

     Show description for b484aee
     tausbn

     committed
     b484aeeView commit details

     Copy full SHA for b484aee

     View code at this pointBrowse repository at this point

   • Python: Change all remaining occurrences of `StrConst`

     Show description for 1c68c98
     tausbn

     committed
     1c68c98View commit details

     Copy full SHA for 1c68c98

     View code at this pointBrowse repository at this point
8. Commits on Mar 15, 2024

   • use of a single var "op" of type Cmpop

     

     Sim4n6

     authored and

     yoff

     committed
     26a16b7View commit details

     Copy full SHA for 26a16b7

     View code at this pointBrowse repository at this point

   • Fix p tag in UnicodeDoS.qhelp

     

     Sim4n6

     authored and

     yoff

     committed
     a717bf1View commit details

     Copy full SHA for a717bf1

     View code at this pointBrowse repository at this point

   • Fix UnicodeDoS vulnerability in CWE-770 code

     

     Sim4n6

     authored and

     yoff

     committed
     af19a03View commit details

     Copy full SHA for af19a03

     View code at this pointBrowse repository at this point

   • Fix UnicodeDoS vulnerability in CWE-770

     

     Sim4n6

     authored and

     yoff

     committed
     085d803View commit details

     Copy full SHA for 085d803

     View code at this pointBrowse repository at this point

   • Update request parameter name in good_1() function

     

     Sim4n6

     authored and

     yoff

     committed
     31dc542View commit details

     Copy full SHA for 31dc542

     View code at this pointBrowse repository at this point

   • Refactor Unicode normalization code

     

     Sim4n6

     authored and

     yoff

     committed
     70ebc58View commit details

     Copy full SHA for 70ebc58

     View code at this pointBrowse repository at this point

   • Update python/ql/src/experimental/Security/CWE-770/UnicodeDoS.ql

     Show description for 658b88e
     

     Sim4n6

     and

     yoff

     committed
     658b88eView commit details

     Copy full SHA for 658b88e

     View code at this pointBrowse repository at this point

   • Add some comments and docs

     

     Sim4n6

     authored and

     yoff

     committed
     1f767b8View commit details

     Copy full SHA for 1f767b8

     View code at this pointBrowse repository at this point

   • Add UnicodeDoS sink for werkzeug secure_filename

     

     Sim4n6

     authored and

     yoff

     committed
     5cc9170View commit details

     Copy full SHA for 5cc9170

     View code at this pointBrowse repository at this point

   • Add Unicode DoS (CWE-770)

     

     Sim4n6

     authored and

     yoff

     committed
     3424650View commit details

     Copy full SHA for 3424650

     View code at this pointBrowse repository at this point
9. Commits on Feb 14, 2024

   • Fix QLDoc issues

     am0o0

     committed
     09d8a75View commit details

     Copy full SHA for 09d8a75

     View code at this pointBrowse repository at this point

   • Python: Change name/id to `Decompression Bomb`

     Show description for e5bd633
     RasmusWL

     committed
     e5bd633View commit details

     Copy full SHA for e5bd633

     View code at this pointBrowse repository at this point

   • Python: Delete duplicated file

     RasmusWL

     committed
     ba7dd38View commit details

     Copy full SHA for ba7dd38

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into amammad-python-bombs

     RasmusWL

     committed
     9399258View commit details

     Copy full SHA for 9399258

     View code at this pointBrowse repository at this point
10. Commits on Dec 14, 2023

    • Python: Remove references to FlowStateString.

      aschackmull

      committed
      8ef4821View commit details

      Copy full SHA for 8ef4821

      View code at this pointBrowse repository at this point
11. Commits on Dec 7, 2023

    • added inline tests

      am0o0

      committed
      5795c72View commit details

      Copy full SHA for 5795c72

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into amammad-python-bombs

      am0o0

      committed
      6ebdae3View commit details

      Copy full SHA for 6ebdae3

      View code at this pointBrowse repository at this point

    • fix some qldocs, change Sink extenstion model, deduct some not necessarily checks :)

      am0o0

      committed
      2d0067dView commit details

      Copy full SHA for 2d0067d

      View code at this pointBrowse repository at this point
12. Commits on Oct 9, 2023

    • clean up unused vars,fix tests

      am0o0

      committed
      4283bb7View commit details

      Copy full SHA for 4283bb7

      View code at this pointBrowse repository at this point

    • move library file to experimental lib directory

      am0o0

      committed
      9d86e79View commit details

      Copy full SHA for 9d86e79

      View code at this pointBrowse repository at this point

    • modularize

      am0o0

      committed
      1318afdView commit details

      Copy full SHA for 1318afd

      View code at this pointBrowse repository at this point

    • upgrade fastAPI remote sources

      am0o0

      committed
      3175db2View commit details

      Copy full SHA for 3175db2

      View code at this pointBrowse repository at this point