| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:1cf7cd6b-b9f4-0e1c-a02e-28bfaf51fe40 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | A38A:39FFB3:132C875:1BB2794:6A4CDB33 |
| html-safe-nonce | bf4303b029cd4548c6b0da918c95a96f4807c860a82f57abb709814dfe300276 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBMzhBOjM5RkZCMzoxMzJDODc1OjFCQjI3OTQ6NkE0Q0RCMzMiLCJ2aXNpdG9yX2lkIjoiMTE2ODc4Njk4NjczMjY3Mzg0MyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 483b4bf7d4316b571ba03990e20f16bc81c1bb15a0432244fcb95e3d90b9fab5 |
| hovercard-subject-tag | pull_request:420366931 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/3522/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/96c101f59ceee9ca19d5bb8f6c1606d4ef1b4c4777003b66107960fc1bc52ac4/github/codeql/pull/3522 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/96c101f59ceee9ca19d5bb8f6c1606d4ef1b4c4777003b66107960fc1bc52ac4/github/codeql/pull/3522 |
| og:image:alt | This PR adds support for detecting Xpath injection in Python.
I have included the ql files as well as the tests with this.
However, I haven't included included the *.expected files as lxml is
n... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 299b43bca6e02ad35197ffeba30d2466846d5fb02ab96fbced5b5e6cec589fb8 |
| turbo-cache-control | no-cache |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 3eeb74f55ccd8a31bdaec6839577c592bbf7844c |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/3522#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F3522 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F3522 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/3522 |
| Reload | https://github.com/github/codeql/pull/3522 |
| Reload | https://github.com/github/codeql/pull/3522 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
987
| https://github.com/github/codeql/issues |
|
Pull requests
424
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| RasmusWL | https://github.com/RasmusWL |
| master | https://github.com/github/codeql/tree/master |
| Conversation | https://github.com/github/codeql/pull/3522 |
| Commits4 (4) | https://github.com/github/codeql/pull/3522/commits |
| Checks | https://github.com/github/codeql/pull/3522/checks |
| Files changed | https://github.com/github/codeql/pull/3522/files |
| Python : Add Xpath injection query | https://github.com/github/codeql/pull/3522#top |
| RasmusWL | https://github.com/RasmusWL |
| master | https://github.com/github/codeql/tree/master |
|
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| May 19, 2020 | https://github.com/github/codeql/pull/3522#issue-621286578 |
| @RasmusWL | https://github.com/RasmusWL |
| @tausbn | https://github.com/tausbn |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| code owner | https://github.com/github/codeql/blob/0a8b3adc25a59d8c79b148a368b7f91c7a63f213/CODEOWNERS#L5 |
| May 19, 2020 21:09 | https://github.com/github/codeql/pull/3522#event-3353727460 |
|
May 21, 2020
| https://github.com/github/codeql/pull/3522#ref-issue-622819990 |
|
Python : Add Xpath injection query
github/securitylab#92
| https://github.com/github/securitylab/issues/92 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Python
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython |
| May 22, 2020 | https://github.com/github/codeql/pull/3522#event-3365050926 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| May 22, 2020 | https://github.com/github/codeql/pull/3522#event-3365248386 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| May 22, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-632778827 |
| #3521 (comment) | https://github.com/github/codeql/pull/3521#issuecomment-632775916 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
|
May 23, 2020
| https://github.com/github/codeql/pull/3522#pullrequestreview-417316484 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3522/files |
| python/ql/test/experimental/CWE-643/XpathLibTests/xpathSinks.ql | https://github.com/github/codeql/pull/3522/files#diff-720cbe6f95ba3797e86ebe5666a4a6d5bfd4bdd8560bb7545bef2af03d0a2186 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| May 25, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-633597914 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
May 26, 2020
| https://github.com/github/codeql/pull/3522#pullrequestreview-418095442 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3522/files |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/3522#pullrequestreview-418095442 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/test/query-tests/Security/lib/lxml/etree/__init__.py | https://github.com/github/codeql/pull/3522/files#diff-0d52b1f1f68009f296bdf7488c533dd38eb14606dec521c5ee937d4fc5967499 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/test/query-tests/Security/lib/lxml/etree/__init__.py | https://github.com/github/codeql/pull/3522/files#diff-0d52b1f1f68009f296bdf7488c533dd38eb14606dec521c5ee937d4fc5967499 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/test/query-tests/Security/lib/lxml/etree/__init__.py | https://github.com/github/codeql/pull/3522/files#diff-0d52b1f1f68009f296bdf7488c533dd38eb14606dec521c5ee937d4fc5967499 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| May 26, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-633901118 |
| #3521 | https://github.com/github/codeql/pull/3521 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| May 27, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-634958181 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| @RasmusWL | https://github.com/RasmusWL |
| code | https://github.com/lxml/lxml/tree/master/src/lxml |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| Python : Add Xpath injection query | https://github.com/github/codeql/pull/3522/commits/8c5a97170d98279a3b6944f202b2d8245c626141 |
| 8c5a971 | https://github.com/github/codeql/pull/3522/commits/8c5a97170d98279a3b6944f202b2d8245c626141 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| May 28, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-635226670 |
| @RasmusWL | https://github.com/RasmusWL |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jun 2, 2020
| https://github.com/github/codeql/pull/3522#pullrequestreview-422977408 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3522/files/8c5a97170d98279a3b6944f202b2d8245c626141 |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/3522#pullrequestreview-422977408 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| contributing guidelines | https://github.com/github/codeql/blob/master/CONTRIBUTING.md |
| #3521 | https://github.com/github/codeql/pull/3521 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/src/experimental/CWE-643/xpath.qhelp | https://github.com/github/codeql/pull/3522/files/8c5a97170d98279a3b6944f202b2d8245c626141#diff-5aac4577d412c627dded5c00025399ce68c76f9bfe39792400adc4ad04df3d98 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/src/experimental/semmle/python/security/injection/Xpath.qll | https://github.com/github/codeql/pull/3522/files/8c5a97170d98279a3b6944f202b2d8245c626141#diff-f5448f92b58336f5390f901b3ed6a4eb6a0a4d848c6367ca98bfe557c4c86f5a |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/src/experimental/semmle/python/security/injection/Xpath.qll | https://github.com/github/codeql/pull/3522/files/8c5a97170d98279a3b6944f202b2d8245c626141#diff-f5448f92b58336f5390f901b3ed6a4eb6a0a4d848c6367ca98bfe557c4c86f5a |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/src/experimental/semmle/python/security/injection/Xpath.qll | https://github.com/github/codeql/pull/3522/files/8c5a97170d98279a3b6944f202b2d8245c626141#diff-f5448f92b58336f5390f901b3ed6a4eb6a0a4d848c6367ca98bfe557c4c86f5a |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| include sugestions from review | https://github.com/github/codeql/pull/3522/commits/424e88d318b1a5fae565bae6a91be5f95b6789f9 |
| 424e88d | https://github.com/github/codeql/pull/3522/commits/424e88d318b1a5fae565bae6a91be5f95b6789f9 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| Jun 7, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-640283898 |
| @RasmusWL | https://github.com/RasmusWL |
| Fortify | https://vulncat.fortify.com/en/detail?id=desc.dataflow.cfml.xpath_injection |
| SonarSource | https://rules.sonarsource.com/python/RSPEC-2091 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| Jun 7, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-640284558 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| Jun 8, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-640729187 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jun 10, 2020
| https://github.com/github/codeql/pull/3522#pullrequestreview-428132970 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3522/files/424e88d318b1a5fae565bae6a91be5f95b6789f9 |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/3522#pullrequestreview-428132970 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| python/ql/src/experimental/CWE-643/xpath.qhelp | https://github.com/github/codeql/pull/3522/files/424e88d318b1a5fae565bae6a91be5f95b6789f9#diff-5aac4577d412c627dded5c00025399ce68c76f9bfe39792400adc4ad04df3d98 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
|
| https://github.com/RasmusWL |
| Python: Minor fixup of qhelp for XPath injection | https://github.com/github/codeql/pull/3522/commits/ce1f0a39acd2f764930c0d901eb7f0d0a6189943 |
| ce1f0a3 | https://github.com/github/codeql/pull/3522/commits/ce1f0a39acd2f764930c0d901eb7f0d0a6189943 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| June 10, 2020 14:59 | https://github.com/github/codeql/pull/3522#event-3430089506 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jun 12, 2020
| https://github.com/github/codeql/pull/3522#pullrequestreview-429672347 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3522/files/ce1f0a39acd2f764930c0d901eb7f0d0a6189943 |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/3522#pullrequestreview-429672347 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/anticomputer |
| anticomputer | https://github.com/anticomputer |
| Jun 12, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-643368205 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/anticomputer |
| anticomputer | https://github.com/anticomputer |
|
Jun 12, 2020
| https://github.com/github/codeql/pull/3522#ref-pullrequest-621285534 |
|
Python : Add support for detecting XSLT Injection
#3521
| https://github.com/github/codeql/pull/3521 |
| add support for libxml2 | https://github.com/github/codeql/pull/3522/commits/a519132407db1f89a3038b7479fa119b8e1fbc44 |
| a519132 | https://github.com/github/codeql/pull/3522/commits/a519132407db1f89a3038b7479fa119b8e1fbc44 |
| RasmusWL | https://github.com/RasmusWL |
| stale review | https://github.com/github/codeql/pull/3522#pullrequestreview-429672347 |
| a519132 | https://github.com/github/codeql/commit/a519132407db1f89a3038b7479fa119b8e1fbc44 |
| June 21, 2020 20:31 | https://github.com/github/codeql/pull/3522#event-3465831997 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| Jun 21, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-647179149 |
| @anticomputer | https://github.com/anticomputer |
| @RasmusWL | https://github.com/RasmusWL |
| https://github.com/tweksteen/django_vuln/blob/a18f5e86a441e6d0b7ea82f9dde7fb4bd94732e7/xpath_injection/views.py#L10-L15 | https://github.com/tweksteen/django_vuln/blob/a18f5e86a441e6d0b7ea82f9dde7fb4bd94732e7/xpath_injection/views.py#L10-L15 |
| https://github.com/andresriancho/django-moth/blob/f836e4f914821f99766623238806c1db68beb6ba/moth/views/vulnerabilities/audit/xpath.py#L32 | https://github.com/andresriancho/django-moth/blob/f836e4f914821f99766623238806c1db68beb6ba/moth/views/vulnerabilities/audit/xpath.py#L32 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| Jun 21, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-647179437 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| Jun 22, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-647417797 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/anticomputer |
| anticomputer | https://github.com/anticomputer |
| Jun 22, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-647549916 |
| @anticomputer | https://github.com/anticomputer |
| @RasmusWL | https://github.com/RasmusWL |
| https://github.com/tweksteen/django_vuln/blob/a18f5e86a441e6d0b7ea82f9dde7fb4bd94732e7/xpath_injection/views.py#L10-L15 | https://github.com/tweksteen/django_vuln/blob/a18f5e86a441e6d0b7ea82f9dde7fb4bd94732e7/xpath_injection/views.py#L10-L15 |
| https://github.com/andresriancho/django-moth/blob/f836e4f914821f99766623238806c1db68beb6ba/moth/views/vulnerabilities/audit/xpath.py#L32 | https://github.com/andresriancho/django-moth/blob/f836e4f914821f99766623238806c1db68beb6ba/moth/views/vulnerabilities/audit/xpath.py#L32 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/anticomputer |
| anticomputer | https://github.com/anticomputer |
| Jun 24, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-648842651 |
| @anticomputer | https://github.com/anticomputer |
| @RasmusWL | https://github.com/RasmusWL |
| https://github.com/tweksteen/django_vuln/blob/a18f5e86a441e6d0b7ea82f9dde7fb4bd94732e7/xpath_injection/views.py#L10-L15 | https://github.com/tweksteen/django_vuln/blob/a18f5e86a441e6d0b7ea82f9dde7fb4bd94732e7/xpath_injection/views.py#L10-L15 |
| https://github.com/andresriancho/django-moth/blob/f836e4f914821f99766623238806c1db68beb6ba/moth/views/vulnerabilities/audit/xpath.py#L32 | https://github.com/andresriancho/django-moth/blob/f836e4f914821f99766623238806c1db68beb6ba/moth/views/vulnerabilities/audit/xpath.py#L32 |
| https://securitylab.github.com/bounties | https://securitylab.github.com/bounties |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| Jun 24, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-648917389 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| @anticomputer | https://github.com/anticomputer |
| golang xpath pr | https://github.com/github/codeql-go/pull/66 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/anticomputer |
| anticomputer | https://github.com/anticomputer |
| Jun 24, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-648960667 |
| @anticomputer | https://github.com/anticomputer |
| golang xpath pr | https://github.com/github/codeql-go/pull/66 |
| https://securitylab.github.com/bounties | https://securitylab.github.com/bounties |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| Jun 24, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-649021145 |
| @anticomputer | https://github.com/anticomputer |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| Jun 24, 2020 | https://github.com/github/codeql/pull/3522#event-3478998144 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| Jun 25, 2020 | https://github.com/github/codeql/pull/3522#event-3481346993 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| June 25, 2020 09:00 | https://github.com/github/codeql/pull/3522#event-3481353327 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| Jun 25, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-649406025 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/tausbn |
| tausbn | https://github.com/tausbn |
|
Jun 25, 2020
| https://github.com/github/codeql/pull/3522#pullrequestreview-437312855 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3522/files/a519132407db1f89a3038b7479fa119b8e1fbc44 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| 0b36cd4 | https://github.com/github/codeql/commit/0b36cd44b86111fcb803c4264aec76919c0f6a00 |
| Jun 25, 2020 | https://github.com/github/codeql/pull/3522#event-3481458183 |
|
Jun 26, 2020
| https://github.com/github/codeql/pull/3522#ref-pullrequest-645437993 |
|
Python: Add support for detecting XSLT Injection (#3521 revived)
#3801
| https://github.com/github/codeql/pull/3801 |
| June 26, 2020 15:14 | https://github.com/github/codeql/pull/3522#event-3487030500 |
| https://github.com/ghost |
| ghost | https://github.com/ghost |
| Jun 26, 2020 | https://github.com/github/codeql/pull/3522#issuecomment-650234163 |
| here | https://github.com/github/codeql/pull/3801#issuecomment-650233147 |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Feb 28, 2022
| https://github.com/github/codeql/pull/3522#ref-pullrequest-948062935 |
|
Python : Improve Xpath Injection Query
#6331
| https://github.com/github/codeql/pull/6331 |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F3522 |
|
| https://github.com/RasmusWL |
|
RasmusWL
| https://github.com/RasmusWL |
|
| https://github.com/RasmusWL |
|
RasmusWL
| https://github.com/RasmusWL |
|
Python
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython |
| Please reload this page | https://github.com/github/codeql/pull/3522 |
|
| https://github.com/RasmusWL |
|
| https://github.com/anticomputer |
|
| https://github.com/tausbn |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |