René's URL Explorer Experiment


Title: Python: promote nosql query by yoff · Pull Request #14070 · github/codeql · GitHub

Open Graph Title: Python: promote nosql query by yoff · Pull Request #14070 · github/codeql

X Title: Python: promote nosql query by yoff · Pull Request #14070 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Python: promote nosql query by yoff · Pull Request #14070 · github/codeql

Open Graph Description: Promotes the NoSQL injection query and updates it to modern style. Also addresses the points raised in the original review. The approach is similar to JavaScript but, rather than having a state for...

X Description: Promotes the NoSQL injection query and updates it to modern style. Also addresses the points raised in the original review. The approach is similar to JavaScript but, rather than having a state for...

Opengraph URL: https://github.com/github/codeql/pull/14070

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:b733e187-3ba5-3928-65cd-b5ed1c42a013
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idAFA2:38C5EF:132E058:1A24B45:6A4D7175
html-safe-nonceb70ff8bdb1fc65f14debefaeee6c54b6589c6b2152700f796b8843fe98e5e750
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBRkEyOjM4QzVFRjoxMzJFMDU4OjFBMjRCNDU6NkE0RDcxNzUiLCJ2aXNpdG9yX2lkIjoiMzE1Mzk0MjEyNjczNzA2MDIxMyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmaccffbc3760403369fc7c48f19e6d084d88e35a7f622368fdf193005e3be68a635
hovercard-subject-tagpull_request:1492061942
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/14070/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/c48fd5d40e210444c8f7d90bf65c5dc8531b3f37c5ffc33ae76f55f64207942a/github/codeql/pull/14070
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/c48fd5d40e210444c8f7d90bf65c5dc8531b3f37c5ffc33ae76f55f64207942a/github/codeql/pull/14070
og:image:altPromotes the NoSQL injection query and updates it to modern style. Also addresses the points raised in the original review. The approach is similar to JavaScript but, rather than having a state for...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameyoff
hostnamegithub.com
expected-hostnamegithub.com
Nonec78260c7b3f4ac4b0356c8208537f05406a3a2d46a9ec3f735b372dcc519c39e
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release399fff412f48461d435721c009efc17ea44be72f
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/14070#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F14070
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F14070
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/14070
Reloadhttps://github.com/github/codeql/pull/14070
Reloadhttps://github.com/github/codeql/pull/14070
Please reload this pagehttps://github.com/github/codeql/pull/14070
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 425 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
yoffhttps://github.com/yoff
github:mainhttps://github.com/github/codeql/tree/main
yoff:python/promote-nosql-queryhttps://github.com/yoff/codeql/tree/python/promote-nosql-query
Conversationhttps://github.com/github/codeql/pull/14070
Commits45 (45)https://github.com/github/codeql/pull/14070/commits
Checkshttps://github.com/github/codeql/pull/14070/checks
Files changedhttps://github.com/github/codeql/pull/14070/files
Python: promote nosql queryhttps://github.com/github/codeql/pull/14070#top
yoffhttps://github.com/yoff
github:mainhttps://github.com/github/codeql/tree/main
yoff:python/promote-nosql-queryhttps://github.com/yoff/codeql/tree/python/promote-nosql-query
https://github.com/yoff
yoffhttps://github.com/yoff
Aug 28, 2023https://github.com/github/codeql/pull/14070#issue-1869737637
Please reload this pagehttps://github.com/github/codeql/pull/14070
raised in the original reviewhttps://github.com/github/codeql/pull/5612#issuecomment-818618094
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
Aug 28, 2023https://github.com/github/codeql/pull/14070#event-10209086351
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Aug 28, 2023https://github.com/github/codeql/pull/14070#issuecomment-1695676326
Please reload this pagehttps://github.com/github/codeql/pull/14070
Documentationhttp://mongoengine.org/
Documentationhttp://docs.mongoengine.org/projects/flask-mongoengine/en/latest/
Documentationhttps://pypi.org/project/pymongo/
Documentationhttps://flask-pymongo.readthedocs.io/en/latest/
NoSQL Injectionhttps://owasp.org/www-pdf-archive/GOD16-NOSQL.pdf
Question 83231https://security.stackexchange.com/questions/83231/mongodb-nosql-injection-in-python-code
CWE-943https://cwe.mitre.org/data/definitions/943.html
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
September 7, 2023 09:28https://github.com/github/codeql/pull/14070#commits-pushed-60dc1af
https://github.com/yoff
Python: prepare to promote NoSqlInjectionhttps://github.com/github/codeql/pull/14070/commits/60dc1afbc06358070edf1c28a875917d97194c38
60dc1afhttps://github.com/github/codeql/pull/14070/commits/60dc1afbc06358070edf1c28a875917d97194c38
https://github.com/yoff
Python: Make things compile in their new locationhttps://github.com/github/codeql/pull/14070/commits/55707d395e4949640e6b523414988f28d8cfd2a5
55707d3https://github.com/github/codeql/pull/14070/commits/55707d395e4949640e6b523414988f28d8cfd2a5
https://github.com/yoff
Python: rename filehttps://github.com/github/codeql/pull/14070/commits/db0459739f5b837a008816475ccd3632eefef6de
db04597https://github.com/github/codeql/pull/14070/commits/db0459739f5b837a008816475ccd3632eefef6de
https://github.com/yoff
Python: Refactor to allow customizationshttps://github.com/github/codeql/pull/14070/commits/087961d179fa9809bf379aff916644605654fe6b
087961dhttps://github.com/github/codeql/pull/14070/commits/087961d179fa9809bf379aff916644605654fe6b
https://github.com/yoff
Python: more renameshttps://github.com/github/codeql/pull/14070/commits/19046ea417e1efae5308c17012d974ca5b1a0762
19046eahttps://github.com/github/codeql/pull/14070/commits/19046ea417e1efae5308c17012d974ca5b1a0762
https://github.com/yoff
Python: Add inline query testhttps://github.com/github/codeql/pull/14070/commits/bf8bfd91cd6e47c068a2e5bc31cf82513d2a1140
bf8bfd9https://github.com/github/codeql/pull/14070/commits/bf8bfd91cd6e47c068a2e5bc31cf82513d2a1140
https://github.com/yoff
Python: Added tests based on security analysishttps://github.com/github/codeql/pull/14070/commits/114984bd8cb92ba8f06dbb3902eb48d3481a1a67
114984bhttps://github.com/github/codeql/pull/14070/commits/114984bd8cb92ba8f06dbb3902eb48d3481a1a67
https://github.com/yoff
Python: Enrich the NoSql concepthttps://github.com/github/codeql/pull/14070/commits/c0b3245a5393306660a04026357cf1ae2eb2a4e2
c0b3245https://github.com/github/codeql/pull/14070/commits/c0b3245a5393306660a04026357cf1ae2eb2a4e2
https://github.com/yoff
Python: Add QLDocshttps://github.com/github/codeql/pull/14070/commits/7edebbeaffe10c5d8b7774666c34d8d58d6e194c
7edebbehttps://github.com/github/codeql/pull/14070/commits/7edebbeaffe10c5d8b7774666c34d8d58d6e194c
https://github.com/yoff
Python: update test expectationshttps://github.com/github/codeql/pull/14070/commits/f253f9797fe448c076ceb639734f3111ce8a7ebe
f253f97https://github.com/github/codeql/pull/14070/commits/f253f9797fe448c076ceb639734f3111ce8a7ebe
https://github.com/yoff
yoffhttps://github.com/yoff
force-pushedhttps://github.com/github/codeql/compare/1918ccf41ef04848d7b73946bee498b1d3e76476..f253f9797fe448c076ceb639734f3111ce8a7ebe
1918ccfhttps://github.com/github/codeql/commit/1918ccf41ef04848d7b73946bee498b1d3e76476
f253f97https://github.com/github/codeql/commit/f253f9797fe448c076ceb639734f3111ce8a7ebe
Compare https://github.com/github/codeql/compare/1918ccf41ef04848d7b73946bee498b1d3e76476..f253f9797fe448c076ceb639734f3111ce8a7ebe
September 7, 2023 08:25https://github.com/github/codeql/pull/14070#event-10304360741
yoffhttps://github.com/yoff
September 7, 2023 15:03https://github.com/github/codeql/pull/14070#commits-pushed-970e881
https://github.com/yoff
Python: Follow naming conventionhttps://github.com/github/codeql/pull/14070/commits/970e881697b0e8a3301eb068e779a3810cd11664
970e881https://github.com/github/codeql/pull/14070/commits/970e881697b0e8a3301eb068e779a3810cd11664
https://github.com/yoff
Python: make test PoC a proper packagehttps://github.com/github/codeql/pull/14070/commits/b07d085157e64ab774e99201da4244f9249d7b70
b07d085https://github.com/github/codeql/pull/14070/commits/b07d085157e64ab774e99201da4244f9249d7b70
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Sep 7, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1615390776
View reviewed changes https://github.com/github/codeql/pull/14070/files/b07d085157e64ab774e99201da4244f9249d7b70
python/ql/lib/semmle/python/security/dataflow/NoSQLInjectionQuery.qllhttps://github.com/github/codeql/pull/14070/files/b07d085157e64ab774e99201da4244f9249d7b70#diff-7aeda6d6c5aa7599ff8005b004615c4def3112394db94710dbaebe5ad33ab921
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
September 8, 2023 13:37https://github.com/github/codeql/pull/14070#commits-pushed-d91cd21
https://github.com/yoff
Python: rename filehttps://github.com/github/codeql/pull/14070/commits/d91cd21204c9951ff5675ef063387fafbcab5a08
d91cd21https://github.com/github/codeql/pull/14070/commits/d91cd21204c9951ff5675ef063387fafbcab5a08
https://github.com/yoff
Python: Add test for functionhttps://github.com/github/codeql/pull/14070/commits/154a36934d87a21e1cc0932960bf9d15fb694fa7
154a369https://github.com/github/codeql/pull/14070/commits/154a36934d87a21e1cc0932960bf9d15fb694fa7
https://github.com/yoff
Python: Split modelling of query operatorshttps://github.com/github/codeql/pull/14070/commits/d9f63e1ed3ee01a580fa19fd03bb2590daeb3ccb
d9f63e1https://github.com/github/codeql/pull/14070/commits/d9f63e1ed3ee01a580fa19fd03bb2590daeb3ccb
https://github.com/yoff
Python: sinks -> decodingshttps://github.com/github/codeql/pull/14070/commits/a063d7d5104c12f785532cdc9b6358cb87a84777
a063d7dhttps://github.com/github/codeql/pull/14070/commits/a063d7d5104c12f785532cdc9b6358cb87a84777
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Sep 11, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1620172282
View reviewed changes https://github.com/github/codeql/pull/14070/files/a063d7d5104c12f785532cdc9b6358cb87a84777
python/ql/lib/semmle/python/frameworks/NoSQL.qllhttps://github.com/github/codeql/pull/14070/files/a063d7d5104c12f785532cdc9b6358cb87a84777#diff-2cf6180e2a9dd1a7abbce9b1096e0ebc42c4b9644fde408e14026d28599c159c
Please reload this pagehttps://github.com/github/codeql/pull/14070
python/ql/lib/semmle/python/frameworks/NoSQL.qllhttps://github.com/github/codeql/pull/14070/files/a063d7d5104c12f785532cdc9b6358cb87a84777#diff-2cf6180e2a9dd1a7abbce9b1096e0ebc42c4b9644fde408e14026d28599c159c
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/yoff
yoffhttps://github.com/yoff
September 11, 2023 14:46https://github.com/github/codeql/pull/14070#event-10335324497
https://github.com/yoff
yoffhttps://github.com/yoff
code ownerhttps://github.com/github/codeql/blob/c18de7d9afee0e5caf76351ad53b509769ff8b88/CODEOWNERS#L6
September 11, 2023 14:46https://github.com/github/codeql/pull/14070#event-10335324567
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
September 13, 2023 13:56https://github.com/github/codeql/pull/14070#event-10360079813
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Sep 13, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1624656083
View reviewed changes https://github.com/github/codeql/pull/14070/files/a063d7d5104c12f785532cdc9b6358cb87a84777
RasmusWLhttps://github.com/RasmusWL
https://github.com/github/codeql/pull/14070#pullrequestreview-1624656083
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
$grouphttps://docs.mongodb.com/manual/reference/operator/aggregation/group/#mongodb-pipeline-pipe.-group
mapReducehttps://docs.mongodb.com/manual/reference/command/mapReduce/#mongodb-dbcommand-dbcmd.mapReduce
Please reload this pagehttps://github.com/github/codeql/pull/14070
python/ql/lib/semmle/python/Concepts.qllhttps://github.com/github/codeql/pull/14070/files/a063d7d5104c12f785532cdc9b6358cb87a84777#diff-d31b95d0643733e70ef7320bd131b75f31ea4a9701fd817781a438ef1a87a48d
RasmusWLhttps://github.com/RasmusWL
Sep 13, 2023https://github.com/github/codeql/pull/14070#discussion_r1324580280
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
Sep 15, 2023https://github.com/github/codeql/pull/14070#discussion_r1326981211
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/yoff
yoffhttps://github.com/yoff
Sep 15, 2023https://github.com/github/codeql/pull/14070#issuecomment-1720955504
$grouphttps://docs.mongodb.com/manual/reference/operator/aggregation/group/#mongodb-pipeline-pipe.-group
mapReducehttps://docs.mongodb.com/manual/reference/command/mapReduce/#mongodb-dbcommand-dbcmd.mapReduce
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
September 18, 2023 14:34https://github.com/github/codeql/pull/14070#commits-pushed-4614b1a
https://github.com/yoff
Python: add change notehttps://github.com/github/codeql/pull/14070/commits/4614b1ae9cadaf39da9de6f8912d16ca4f3d384f
4614b1ahttps://github.com/github/codeql/pull/14070/commits/4614b1ae9cadaf39da9de6f8912d16ca4f3d384f
https://github.com/yoff
Python: add test for $accumulatorhttps://github.com/github/codeql/pull/14070/commits/5611bda7ee7a971963c6b586e01430e82d420f4c
5611bdahttps://github.com/github/codeql/pull/14070/commits/5611bda7ee7a971963c6b586e01430e82d420f4c
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Sep 19, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1633735660
View reviewed changes https://github.com/github/codeql/pull/14070/files
python/ql/lib/semmle/python/frameworks/NoSQL.qllhttps://github.com/github/codeql/pull/14070/files#diff-2cf6180e2a9dd1a7abbce9b1096e0ebc42c4b9644fde408e14026d28599c159c
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
September 28, 2023 12:40https://github.com/github/codeql/pull/14070#commits-pushed-c2b6383
https://github.com/yoff
https://github.com/RasmusWL
Apply suggestions from code reviewhttps://github.com/github/codeql/pull/14070/commits/c2b63830f1688fe352ab6764b7c7d3375f842326
c2b6383https://github.com/github/codeql/pull/14070/commits/c2b63830f1688fe352ab6764b7c7d3375f842326
https://github.com/yoff
Python: rename filehttps://github.com/github/codeql/pull/14070/commits/9682c8218afbff12acb757d6c23cbfa032879cb4
9682c82https://github.com/github/codeql/pull/14070/commits/9682c8218afbff12acb757d6c23cbfa032879cb4
https://github.com/yoff
Python: rename modulehttps://github.com/github/codeql/pull/14070/commits/2a739b3b7a04bdbd40331b2fd5e4c2c2f043819d
2a739b3https://github.com/github/codeql/pull/14070/commits/2a739b3b7a04bdbd40331b2fd5e4c2c2f043819d
https://github.com/yoff
Python: split modellinghttps://github.com/github/codeql/pull/14070/commits/eb1be08bce7ce353a9455359fcf54e6d58724898
eb1be08https://github.com/github/codeql/pull/14070/commits/eb1be08bce7ce353a9455359fcf54e6d58724898
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Sep 28, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1648488195
View reviewed changes https://github.com/github/codeql/pull/14070/files/eb1be08bce7ce353a9455359fcf54e6d58724898
python/ql/lib/semmle/python/frameworks/PyMongo.qllhttps://github.com/github/codeql/pull/14070/files/eb1be08bce7ce353a9455359fcf54e6d58724898#diff-1108f8b03944b1ef793e5270937fb9aa33f735e04d7f473079b7a48fdba81d2b
Please reload this pagehttps://github.com/github/codeql/pull/14070
python/ql/lib/semmle/python/frameworks/PyMongo.qllhttps://github.com/github/codeql/pull/14070/files/eb1be08bce7ce353a9455359fcf54e6d58724898#diff-1108f8b03944b1ef793e5270937fb9aa33f735e04d7f473079b7a48fdba81d2b
Please reload this pagehttps://github.com/github/codeql/pull/14070
python/ql/lib/semmle/python/frameworks/PyMongo.qllhttps://github.com/github/codeql/pull/14070/files/eb1be08bce7ce353a9455359fcf54e6d58724898#diff-1108f8b03944b1ef793e5270937fb9aa33f735e04d7f473079b7a48fdba81d2b
Please reload this pagehttps://github.com/github/codeql/pull/14070
python/ql/lib/semmle/python/frameworks/PyMongo.qllhttps://github.com/github/codeql/pull/14070/files/eb1be08bce7ce353a9455359fcf54e6d58724898#diff-1108f8b03944b1ef793e5270937fb9aa33f735e04d7f473079b7a48fdba81d2b
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
September 28, 2023 13:35https://github.com/github/codeql/pull/14070#commits-pushed-2a7b593
https://github.com/yoff
Python: Fix QL alertshttps://github.com/github/codeql/pull/14070/commits/2a7b59328583f98e0aeaca885d8e6b762cf97e12
2a7b593https://github.com/github/codeql/pull/14070/commits/2a7b59328583f98e0aeaca885d8e6b762cf97e12
https://github.com/yoff
Python: forgot to list frameworkhttps://github.com/github/codeql/pull/14070/commits/a8e0023f390a53d6f17b55ab2e29d6f31670f113
a8e0023https://github.com/github/codeql/pull/14070/commits/a8e0023f390a53d6f17b55ab2e29d6f31670f113
https://github.com/yoff
Python: update test expectationshttps://github.com/github/codeql/pull/14070/commits/d5b64c5ff2abe8565c14f4dd4939ab0d99a81b04
d5b64c5https://github.com/github/codeql/pull/14070/commits/d5b64c5ff2abe8565c14f4dd4939ab0d99a81b04
https://github.com/yoff
Python: Some renaming of flow stateshttps://github.com/github/codeql/pull/14070/commits/3043633d9c16a9eb1cf0aab3249d38430a062ad6
3043633https://github.com/github/codeql/pull/14070/commits/3043633d9c16a9eb1cf0aab3249d38430a062ad6
https://github.com/yoff
yoffhttps://github.com/yoff
RasmusWLhttps://github.com/RasmusWL
September 28, 2023 12:28https://github.com/github/codeql/pull/14070#event-10498777506
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Sep 29, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1650237311
View reviewed changes https://github.com/github/codeql/pull/14070/files/3043633d9c16a9eb1cf0aab3249d38430a062ad6
python/ql/lib/semmle/python/frameworks/BSon.qllhttps://github.com/github/codeql/pull/14070/files/3043633d9c16a9eb1cf0aab3249d38430a062ad6#diff-f51795144a78c4c31ce7a71e447d02d15315a82e48d4d20db905aaa957261c87
Please reload this pagehttps://github.com/github/codeql/pull/14070
python/ql/lib/semmle/python/frameworks/BSon.qllhttps://github.com/github/codeql/pull/14070/files/3043633d9c16a9eb1cf0aab3249d38430a062ad6#diff-f51795144a78c4c31ce7a71e447d02d15315a82e48d4d20db905aaa957261c87
Please reload this pagehttps://github.com/github/codeql/pull/14070
python/ql/lib/semmle/python/frameworks/NoSQL.qllhttps://github.com/github/codeql/pull/14070/files/d9f63e1ed3ee01a580fa19fd03bb2590daeb3ccb..a063d7d5104c12f785532cdc9b6358cb87a84777#diff-2cf6180e2a9dd1a7abbce9b1096e0ebc42c4b9644fde408e14026d28599c159c
RasmusWLhttps://github.com/RasmusWL
Sep 29, 2023https://github.com/github/codeql/pull/14070#discussion_r1341032405
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Sep 29, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1650260373
View reviewed changes https://github.com/github/codeql/pull/14070/files/3043633d9c16a9eb1cf0aab3249d38430a062ad6
RasmusWLhttps://github.com/RasmusWL
https://github.com/github/codeql/pull/14070#pullrequestreview-1650260373
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
codeql/python/ql/src/meta/alerts/TaintSinks.qlhttps://github.com/github/codeql/blob/d7aea228ce114ab7ae37574f390ded4232d90246/python/ql/src/meta/alerts/TaintSinks.ql#L35
d7aea22https://github.com/github/codeql/commit/d7aea228ce114ab7ae37574f390ded4232d90246
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/yoff
https://github.com/RasmusWL
Apply suggestions from code reviewhttps://github.com/github/codeql/pull/14070/commits/2e028a41eeff2517574345e4a0d5963d93ab68e1
2e028a4https://github.com/github/codeql/pull/14070/commits/2e028a41eeff2517574345e4a0d5963d93ab68e1
https://github.com/yoff
yoffhttps://github.com/yoff
Sep 29, 2023https://github.com/github/codeql/pull/14070#issuecomment-1740601802
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
September 29, 2023 12:02https://github.com/github/codeql/pull/14070#commits-pushed-74d6f37
https://github.com/yoff
Python: update meta query TaintSinkshttps://github.com/github/codeql/pull/14070/commits/74d6f37467d976d60f3f15dcd3605a692389b1bf
74d6f37https://github.com/github/codeql/pull/14070/commits/74d6f37467d976d60f3f15dcd3605a692389b1bf
https://github.com/yoff
Python: nicer pathshttps://github.com/github/codeql/pull/14070/commits/2d845e3e55899e75e3016454453f61a9c3f6434c
2d845e3https://github.com/github/codeql/pull/14070/commits/2d845e3e55899e75e3016454453f61a9c3f6434c
https://github.com/yoff
Python: fix QL alerthttps://github.com/github/codeql/pull/14070/commits/e1708054a46c460bc45a98e856c7ad654ca39ee4
e170805https://github.com/github/codeql/pull/14070/commits/e1708054a46c460bc45a98e856c7ad654ca39ee4
https://github.com/yoff
yoffhttps://github.com/yoff
RasmusWLhttps://github.com/RasmusWL
September 29, 2023 10:07https://github.com/github/codeql/pull/14070#event-10509504531
https://github.com/yoff
Python: rename flow stateshttps://github.com/github/codeql/pull/14070/commits/f3a01612e84e8d5a5fcc51526ff0f41ab26967dc
f3a0161https://github.com/github/codeql/pull/14070/commits/f3a01612e84e8d5a5fcc51526ff0f41ab26967dc
github@3043633https://github.com/github/codeql/commit/3043633d9c16a9eb1cf0aab3249d38430a062ad6
https://github.com/yoff
yoffhttps://github.com/yoff
Sep 29, 2023https://github.com/github/codeql/pull/14070#issuecomment-1740735270
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Sep 29, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1650603102
View reviewed changes https://github.com/github/codeql/pull/14070/files/f3a01612e84e8d5a5fcc51526ff0f41ab26967dc
python/ql/lib/semmle/python/security/dataflow/NoSQLInjectionCustomizations.qllhttps://github.com/github/codeql/pull/14070/files/e1708054a46c460bc45a98e856c7ad654ca39ee4..f3a01612e84e8d5a5fcc51526ff0f41ab26967dc#diff-21255472c6d41cd27d6b99c46889b9684e91f760f9e16e649ade214dc3d0b228
RasmusWLhttps://github.com/RasmusWL
Sep 29, 2023https://github.com/github/codeql/pull/14070#discussion_r1341256125
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
Sep 29, 2023https://github.com/github/codeql/pull/14070#discussion_r1341265016
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14070
yoffhttps://github.com/yoff
September 29, 2023 13:45https://github.com/github/codeql/pull/14070#commits-pushed-9769668
https://github.com/yoff
Python: require dict sinks be dangerous.https://github.com/github/codeql/pull/14070/commits/97696680e67e6de2ff83a754adf1236adf5571d4
9769668https://github.com/github/codeql/pull/14070/commits/97696680e67e6de2ff83a754adf1236adf5571d4
https://github.com/RasmusWL
Python: NoSQLInjection -> NoSqlInjectionhttps://github.com/github/codeql/pull/14070/commits/16e1a00e882a4b85f06255a5726c218fb506f769
16e1a00https://github.com/github/codeql/pull/14070/commits/16e1a00e882a4b85f06255a5726c218fb506f769
https://github.com/RasmusWL
Python: List NoSQL injection sinkshttps://github.com/github/codeql/pull/14070/commits/d7ad5a0f2314d0b351c9656cd49f5e5762fc4ef1
d7ad5a0https://github.com/github/codeql/pull/14070/commits/d7ad5a0f2314d0b351c9656cd49f5e5762fc4ef1
https://github.com/RasmusWL
Python: Clean trailing whitespacehttps://github.com/github/codeql/pull/14070/commits/3676262313dd6520d1127bee806a82e77a63fa20
3676262https://github.com/github/codeql/pull/14070/commits/3676262313dd6520d1127bee806a82e77a63fa20
https://github.com/RasmusWL
Python: -> NoSQL in QLDocshttps://github.com/github/codeql/pull/14070/commits/d6d13f84a99c149180f24dfdd2d4a09039cd6dd0
d6d13f8https://github.com/github/codeql/pull/14070/commits/d6d13f84a99c149180f24dfdd2d4a09039cd6dd0
https://github.com/RasmusWL
Python: Add keyword argument supporthttps://github.com/github/codeql/pull/14070/commits/9b73bbfc31cab1c8d605a151a6d3449bd9d98568
9b73bbfhttps://github.com/github/codeql/pull/14070/commits/9b73bbfc31cab1c8d605a151a6d3449bd9d98568
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Sep 29, 2023 https://github.com/github/codeql/pull/14070#pullrequestreview-1650653452
View reviewed changes https://github.com/github/codeql/pull/14070/files/9b73bbfc31cab1c8d605a151a6d3449bd9d98568
RasmusWLhttps://github.com/RasmusWL
https://github.com/github/codeql/pull/14070#pullrequestreview-1650653452
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/yoff
yoffhttps://github.com/yoff
Sep 29, 2023https://github.com/github/codeql/pull/14070#issuecomment-1740789222
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/yoff
yoffhttps://github.com/yoff
dbecb1bhttps://github.com/github/codeql/commit/dbecb1bd0ff25154131a59fc0dd0851bab26deed
Sep 29, 2023https://github.com/github/codeql/pull/14070#event-10510826051
https://github.co/hiddenchars
https://github.com/github/codeql/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F14070
https://github.com/RasmusWL
RasmusWL https://github.com/RasmusWL
https://github.com/github/codeql/pull/14070/files/9b73bbfc31cab1c8d605a151a6d3449bd9d98568
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
Please reload this pagehttps://github.com/github/codeql/pull/14070
https://github.com/yoff
https://github.com/RasmusWL
https://github.com/apps/github-advanced-security
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.