Skip to content

Python: promote log injection #7735

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
RasmusWL merged 18 commits into from
Feb 23, 2022
Merged

Python: promote log injection #7735

Changes from 1 commit
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
20d5454
python: move log injection out of experimental
yoff Jan 25, 2022
8b5114d
python: Add standard customization setup
yoff Jan 25, 2022
bf1145e
python: Add change note
yoff Jan 25, 2022
9d41666
python: modern change note
yoff Jan 25, 2022
c03f89d
Apply suggestions from code review
yoff Feb 1, 2022
7511b33
python: "command" -> "log"
yoff Feb 1, 2022
26befeb
python: drop precision and add severity score
yoff Feb 1, 2022
ecea392
python: rewrite qhelp overview
yoff Feb 1, 2022
119a7e4
python: provide links for Flask
yoff Feb 1, 2022
c587084
python: use standard `InstanceSource` construction
yoff Feb 1, 2022
bec8c0d
python: update change note
yoff Feb 1, 2022
448e078
python: `logging.root` is not a call
yoff Feb 2, 2022
f21ac04
Update python/ql/lib/semmle/python/frameworks/Stdlib.qll
yoff Feb 9, 2022
bd14ade
python: add apologetic comment
yoff Feb 14, 2022
62598c0
Update python/ql/lib/semmle/python/security/dataflow/LogInjectionCust…
yoff Feb 14, 2022
3a995ec
Update python/ql/lib/semmle/python/security/dataflow/LogInjectionCust…
yoff Feb 14, 2022
62d4bb5
Python: Autoformat
RasmusWL Feb 15, 2022
b59ab7f
Merge branch 'main' into python/promote-log-injection
RasmusWL Feb 21, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
python: modern change note 
I set the category to newQuery since that is what users will see.
When we have tags, it would be nice to tag it as a query promotion.
  • Loading branch information
@yoff
yoff committed Jan 31, 2022
commit 9d416664a1576b79cc76f3fd3dcc4de81dbf91db
4 changes: 3 additions & 1 deletion ...notes/2022-02-25-promote-log-injection.md → ...notes/2022-02-25-promote-log-injection.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1,4 @@
lgtm,codescanning
---
category: newQuery
---
* The query "Log Injection" (`py/log-injection`) has been promoted from experimental to the main query pack. Its results will now appear by default. This query was originally [submitted as an experimental query by @haby0](https://github.com/github/codeql/pull/6182).