| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:2725da93-8c6a-9237-8c88-8a3ccce28405 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 8834:F97BC:14B1D4:1C171B:6A4D3055 |
| html-safe-nonce | 7e00bbe6e0a8d26f348fe789e76af0e44657796fb8b6004ad1d9be9512090e94 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4ODM0OkY5N0JDOjE0QjFENDoxQzE3MUI6NkE0RDMwNTUiLCJ2aXNpdG9yX2lkIjoiMTU5Mzk1MTAyNjMzODkzNDg2OSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 1ee1a7e15cd7947cdfcc4355839ccfc5256ef1a24efead6b9430ea49e82c5047 |
| hovercard-subject-tag | pull_request:610066438 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/5612/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/f2ba2cbd8571102ff34d6926a7bebd65dc2eab916e4eb81add43f53ed2fb8567/github/codeql/pull/5612 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/f2ba2cbd8571102ff34d6926a7bebd65dc2eab916e4eb81add43f53ed2fb8567/github/codeql/pull/5612 |
| og:image:alt | This PR introduces a new query that searches for NoSQL injections. This query specifically looks for vulnerabilities that utilize any one of these three major Python MongoDB libraries:
PyMonogo
Fl... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | mrthankyou |
| hostname | github.com |
| expected-hostname | github.com |
| None | 92571a8944142227b7e19cd10918b1ddd06e5066c1ad5bc7e4769cf6140a87e6 |
| turbo-cache-control | no-cache |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 93f17a978ee60bc4668e1d7b90e6bd2d622261fd |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/5612#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F5612 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F5612 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/5612 |
| Reload | https://github.com/github/codeql/pull/5612 |
| Reload | https://github.com/github/codeql/pull/5612 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
987
| https://github.com/github/codeql/issues |
|
Pull requests
424
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| RasmusWL | https://github.com/RasmusWL |
| github:main | https://github.com/github/codeql/tree/main |
| jty-team:jty/python/nosqlInjection | https://github.com/jty-team/codeql/tree/jty/python/nosqlInjection |
| Conversation | https://github.com/github/codeql/pull/5612 |
| Commits81 (81) | https://github.com/github/codeql/pull/5612/commits |
| Checks | https://github.com/github/codeql/pull/5612/checks |
| Files changed | https://github.com/github/codeql/pull/5612/files |
| Python: CWE-943 - Add NoSQL injection query | https://github.com/github/codeql/pull/5612#top |
| RasmusWL | https://github.com/RasmusWL |
| github:main | https://github.com/github/codeql/tree/main |
| jty-team:jty/python/nosqlInjection | https://github.com/jty-team/codeql/tree/jty/python/nosqlInjection |
|
| https://github.com/mrthankyou |
| mrthankyou | https://github.com/mrthankyou |
| Apr 6, 2021 | https://github.com/github/codeql/pull/5612#issue-851685862 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| PyMonogo | https://pymongo.readthedocs.io/en/stable/api/pymongo/collection.html |
| Flask-PyMongo | https://flask-pymongo.readthedocs.io/en/latest/ |
| MongoEngine | https://github.com/MongoEngine/mongoengine |
| Flask MongoEngine | https://github.com/MongoEngine/flask-mongoengine |
| @mrthankyou | https://github.com/mrthankyou |
| @jorgectf | https://github.com/jorgectf |
| @mrthankyou | https://github.com/mrthankyou |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| jorgectf | https://github.com/jorgectf |
| March 30, 2021 17:51 | https://github.com/github/codeql/pull/5612#commits-pushed-517a920 |
|
| https://github.com/jorgectf |
| PR init | https://github.com/github/codeql/pull/5612/commits/517a9202ce9a9d79dabb080b6c1d057ebf67dce9 |
| 517a920 | https://github.com/github/codeql/pull/5612/commits/517a9202ce9a9d79dabb080b6c1d057ebf67dce9 |
|
| https://github.com/jorgectf |
| Add Concepts | https://github.com/github/codeql/pull/5612/commits/aea7546cf91f955564b031d2d297f950a12ce793 |
| aea7546 | https://github.com/github/codeql/pull/5612/commits/aea7546cf91f955564b031d2d297f950a12ce793 |
|
| https://github.com/jorgectf |
| PyMongo and Mongoengine sinks | https://github.com/github/codeql/pull/5612/commits/bd5ff01ebbef8e04083a7e5efb76bb18d79236c1 |
| bd5ff01 | https://github.com/github/codeql/pull/5612/commits/bd5ff01ebbef8e04083a7e5efb76bb18d79236c1 |
|
| https://github.com/jorgectf |
| Adapt query configs and custom classes | https://github.com/github/codeql/pull/5612/commits/d856f160c8572b1c7d3de2a41283acc242f76599 |
| d856f16 | https://github.com/github/codeql/pull/5612/commits/d856f160c8572b1c7d3de2a41283acc242f76599 |
|
| https://github.com/jorgectf |
| Add left tests | https://github.com/github/codeql/pull/5612/commits/4579132f22a3d5e73962ad3e5c7ac18cb1b416e1 |
| 4579132 | https://github.com/github/codeql/pull/5612/commits/4579132f22a3d5e73962ad3e5c7ac18cb1b416e1 |
|
| https://github.com/jorgectf |
| Fix imports | https://github.com/github/codeql/pull/5612/commits/ccd57bea7a25976ad1ae46ce42b5ffb007986a37 |
| ccd57be | https://github.com/github/codeql/pull/5612/commits/ccd57bea7a25976ad1ae46ce42b5ffb007986a37 |
|
| https://github.com/jorgectf |
| Fix MongoEngine Sink | https://github.com/github/codeql/pull/5612/commits/01f9d4a1b099a5e42e06aac682cfbbebc13f08fb |
| 01f9d4a | https://github.com/github/codeql/pull/5612/commits/01f9d4a1b099a5e42e06aac682cfbbebc13f08fb |
|
| https://github.com/jorgectf |
| Fix Sinks | https://github.com/github/codeql/pull/5612/commits/7a4dc46341bf98c67c3210e5eb2afa7177379755 |
| 7a4dc46 | https://github.com/github/codeql/pull/5612/commits/7a4dc46341bf98c67c3210e5eb2afa7177379755 |
|
| https://github.com/jorgectf |
| Fix Mongoengine test | https://github.com/github/codeql/pull/5612/commits/5a1dc48e481f5a6da1c7b40e0709a0caafa0e641 |
| 5a1dc48 | https://github.com/github/codeql/pull/5612/commits/5a1dc48e481f5a6da1c7b40e0709a0caafa0e641 |
|
| https://github.com/jorgectf |
| Remove unused class variables | https://github.com/github/codeql/pull/5612/commits/017a826b30954e266173d972ae584ce0cf5351ab |
| 017a826 | https://github.com/github/codeql/pull/5612/commits/017a826b30954e266173d972ae584ce0cf5351ab |
|
| https://github.com/jorgectf |
| Polish up configs | https://github.com/github/codeql/pull/5612/commits/f0a50eb67a9672cf656e6ce9b40c026a524a6e69 |
| f0a50eb | https://github.com/github/codeql/pull/5612/commits/f0a50eb67a9672cf656e6ce9b40c026a524a6e69 |
|
| https://github.com/jorgectf |
| Attempt to apply TaintTracking2 | https://github.com/github/codeql/pull/5612/commits/3a47a45e47c698be906bb77856d1a09dfd54847c |
| 3a47a45 | https://github.com/github/codeql/pull/5612/commits/3a47a45e47c698be906bb77856d1a09dfd54847c |
|
| https://github.com/jorgectf |
| Update naming | https://github.com/github/codeql/pull/5612/commits/c8740a2031d5aa5ee5f58d65c3133e2ed6bd4c42 |
| c8740a2 | https://github.com/github/codeql/pull/5612/commits/c8740a2031d5aa5ee5f58d65c3133e2ed6bd4c42 |
|
| https://github.com/jorgectf |
| Fix taint configs | https://github.com/github/codeql/pull/5612/commits/f980d0694be7c8d3dd1ee1a6c58e416daa909cec |
| f980d06 | https://github.com/github/codeql/pull/5612/commits/f980d0694be7c8d3dd1ee1a6c58e416daa909cec |
|
| https://github.com/jorgectf |
| Polish query select | https://github.com/github/codeql/pull/5612/commits/15e176a3b859690e91e605149ef1d190a539d8a7 |
| 15e176a | https://github.com/github/codeql/pull/5612/commits/15e176a3b859690e91e605149ef1d190a539d8a7 |
| Update qhelp file | https://github.com/github/codeql/pull/5612/commits/9072d19cda809124dd57731067221392fc0c6201 |
| 9072d19 | https://github.com/github/codeql/pull/5612/commits/9072d19cda809124dd57731067221392fc0c6201 |
| Add relevant PyMongo sink methods | https://github.com/github/codeql/pull/5612/commits/be9a3a95b1ed111c5e0943cef47d5b0f12307467 |
| be9a3a9 | https://github.com/github/codeql/pull/5612/commits/be9a3a95b1ed111c5e0943cef47d5b0f12307467 |
| Rename classes | https://github.com/github/codeql/pull/5612/commits/80216f697441d575adcf5f1512532db8041a70ac |
| 80216f6 | https://github.com/github/codeql/pull/5612/commits/80216f697441d575adcf5f1512532db8041a70ac |
|
| https://github.com/mrthankyou |
| Add required __raw__ keyword | https://github.com/github/codeql/pull/5612/commits/3f0c758622803c7df82b83535a03284aa3d1085f |
| 3f0c758 | https://github.com/github/codeql/pull/5612/commits/3f0c758622803c7df82b83535a03284aa3d1085f |
| http://docs.mongoengine.org/guide/querying.html?highlight=inc__#raw-queries | http://docs.mongoengine.org/guide/querying.html?highlight=inc__#raw-queries |
|
| https://github.com/mrthankyou |
| Update query to search for more pymongo sink methods | https://github.com/github/codeql/pull/5612/commits/759fa2cd014aab97889d2ef17a42382856d777e1 |
| 759fa2c | https://github.com/github/codeql/pull/5612/commits/759fa2cd014aab97889d2ef17a42382856d777e1 |
|
| https://github.com/mrthankyou |
| Add check for mongoengine raw queries | https://github.com/github/codeql/pull/5612/commits/6ade1209834ee2bfc5d6bd69db17d87b8215a832 |
| 6ade120 | https://github.com/github/codeql/pull/5612/commits/6ade1209834ee2bfc5d6bd69db17d87b8215a832 |
| http://docs.mongoengine.org/guide/querying.html?highlight=inc__#raw-queries | http://docs.mongoengine.org/guide/querying.html?highlight=inc__#raw-queries |
|
| https://github.com/mrthankyou |
| Made grammar changes | https://github.com/github/codeql/pull/5612/commits/ac31260fed107935e2a0fbb1675ca8361be9803f |
| ac31260 | https://github.com/github/codeql/pull/5612/commits/ac31260fed107935e2a0fbb1675ca8361be9803f |
|
| https://github.com/mrthankyou |
| Remove unnecessary example code | https://github.com/github/codeql/pull/5612/commits/520e65e3c3837a8e010386dec6649e6de870c956 |
| 520e65e | https://github.com/github/codeql/pull/5612/commits/520e65e3c3837a8e010386dec6649e6de870c956 |
|
| https://github.com/mrthankyou |
| Improve sentence structure and grammar | https://github.com/github/codeql/pull/5612/commits/dc274ecf36a3a9f4261d9a8df1ef36e63974e5a0 |
| dc274ec | https://github.com/github/codeql/pull/5612/commits/dc274ecf36a3a9f4261d9a8df1ef36e63974e5a0 |
|
| https://github.com/mrthankyou |
| Remove comment | https://github.com/github/codeql/pull/5612/commits/4e98348411a3c6b97b38aae287c2985518fb67d5 |
| 4e98348 | https://github.com/github/codeql/pull/5612/commits/4e98348411a3c6b97b38aae287c2985518fb67d5 |
| https://github.com/mrthankyou |
| mrthankyou | https://github.com/mrthankyou |
| code owner | https://github.com/github/codeql/blob/9a41c80626b4fb3263b5c35df32b464335d212bf/CODEOWNERS#L12 |
| April 6, 2021 18:13 | https://github.com/github/codeql/pull/5612#event-4558359655 |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
|
documentation
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation |
|
Python
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython |
| Apr 6, 2021 | https://github.com/github/codeql/pull/5612#event-4558360963 |
| https://github.com/jorgectf |
| jorgectf | https://github.com/jorgectf |
| Apr 6, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-814336241 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| Apr 7, 2021 | https://github.com/github/codeql/pull/5612#event-4563325933 |
|
| https://github.com/RasmusWL |
| Python: Don't rely on d = d.getOutput() for Decoding | https://github.com/github/codeql/pull/5612/commits/318694ccc86bc2251493e06b4b0e1a7dac6e206e |
| 318694c | https://github.com/github/codeql/pull/5612/commits/318694ccc86bc2251493e06b4b0e1a7dac6e206e |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jun 28, 2021
| https://github.com/github/codeql/pull/5612#pullrequestreview-693836782 |
|
View reviewed changes
| https://github.com/github/codeql/pull/5612/files/eb16018446340ff1b8d6fae7e72af345f93d31dc |
| RasmusWL | https://github.com/RasmusWL |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/github/codeql/pull/5612#pullrequestreview-693836782 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| jty-team#5 | https://github.com/jty-team/codeql/pull/5 |
| these comments | https://github.com/github/codeql/pull/5612#issuecomment-818618094 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| python/ql/src/experimental/semmle/python/frameworks/NoSQL.qll | https://github.com/github/codeql/pull/5612/files/eb16018446340ff1b8d6fae7e72af345f93d31dc#diff-ca1baaa83ce64bcb0c8f0dca86c8be11cef6a77a6bc422ee1584f1eadf17cc12 |
| RasmusWL | https://github.com/RasmusWL |
| Jun 28, 2021 | https://github.com/github/codeql/pull/5612#discussion_r659696939 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| #5612 (comment) | https://github.com/github/codeql/pull/5612#discussion_r626641064 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| jorgectf | https://github.com/jorgectf |
| Jun 28, 2021 | https://github.com/github/codeql/pull/5612#discussion_r660041675 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @mrthankyou | https://github.com/mrthankyou |
| 68c6831#diff-ca1baaa83ce64bcb0c8f0dca86c8be11cef6a77a6bc422ee1584f1eadf17cc12R141 | https://github.com/github/codeql/commit/68c683189a902d403f3f6801e3ce283314528e8a#diff-ca1baaa83ce64bcb0c8f0dca86c8be11cef6a77a6bc422ee1584f1eadf17cc12R141 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jun 28, 2021
| https://github.com/github/codeql/pull/5612#pullrequestreview-693849802 |
|
View reviewed changes
| https://github.com/github/codeql/pull/5612/files/eb16018446340ff1b8d6fae7e72af345f93d31dc |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/5612#pullrequestreview-693849802 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| python/ql/src/experimental/semmle/python/frameworks/Stdlib.qll | https://github.com/github/codeql/pull/5612/files/eb16018446340ff1b8d6fae7e72af345f93d31dc#diff-0334e5539ad0424307e82c6dacb174720d092210696406357f6520de3c86e892 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| python/ql/src/experimental/semmle/python/frameworks/Stdlib.qll | https://github.com/github/codeql/pull/5612/files/eb16018446340ff1b8d6fae7e72af345f93d31dc#diff-0334e5539ad0424307e82c6dacb174720d092210696406357f6520de3c86e892 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| jorgectf | https://github.com/jorgectf |
| June 28, 2021 14:23 | https://github.com/github/codeql/pull/5612#commits-pushed-a5009ef |
|
| https://github.com/jorgectf |
| Merge pull request | https://github.com/github/codeql/pull/5612/commits/a5009efb4ba5eec8ba76a88910314e4f93c6263a |
| #5 | https://github.com/jty-team/codeql/pull/5 |
| from RasmusWL/nosql-fixes | https://github.com/github/codeql/pull/5612/commits/a5009efb4ba5eec8ba76a88910314e4f93c6263a |
| a5009ef | https://github.com/github/codeql/pull/5612/commits/a5009efb4ba5eec8ba76a88910314e4f93c6263a |
|
| https://github.com/jorgectf |
| Merge tests and update .expected | https://github.com/github/codeql/pull/5612/commits/0ca4f240d907a8d1f74fc6f6bf578d23bacebcd8 |
| 0ca4f24 | https://github.com/github/codeql/pull/5612/commits/0ca4f240d907a8d1f74fc6f6bf578d23bacebcd8 |
|
| https://github.com/jorgectf |
| Delete trivial tests | https://github.com/github/codeql/pull/5612/commits/3fd11298958ee4d8bb18806faebcacd59433818e |
| 3fd1129 | https://github.com/github/codeql/pull/5612/commits/3fd11298958ee4d8bb18806faebcacd59433818e |
|
| https://github.com/jorgectf |
| Polish documentation, mongoCollectionMethod() and update .expected | https://github.com/github/codeql/pull/5612/commits/68c683189a902d403f3f6801e3ce283314528e8a |
|
| https://github.com/github/codeql/commit/68c683189a902d403f3f6801e3ce283314528e8a#comments |
| 68c6831 | https://github.com/github/codeql/pull/5612/commits/68c683189a902d403f3f6801e3ce283314528e8a |
|
| https://github.com/jorgectf |
|
| https://github.com/RasmusWL |
| Apply suggestions from code review | https://github.com/github/codeql/pull/5612/commits/350440897c753a3a948a8a4e10171d413997a435 |
| 3504408 | https://github.com/github/codeql/pull/5612/commits/350440897c753a3a948a8a4e10171d413997a435 |
|
| https://github.com/jorgectf |
| Move xmltodict to its own file under frameworks/ | https://github.com/github/codeql/pull/5612/commits/51395d155f68b99c1210689c675e80c2389fa0e1 |
| 51395d1 | https://github.com/github/codeql/pull/5612/commits/51395d155f68b99c1210689c675e80c2389fa0e1 |
| https://github.com/jorgectf |
| jorgectf | https://github.com/jorgectf |
| Jun 28, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-869963574 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| @RasmusWL | https://github.com/RasmusWL |
| 0ca4f24 | https://github.com/github/codeql/commit/0ca4f240d907a8d1f74fc6f6bf578d23bacebcd8 |
| 3fd1129 | https://github.com/github/codeql/commit/3fd11298958ee4d8bb18806faebcacd59433818e |
| 68c6831 | https://github.com/github/codeql/commit/68c683189a902d403f3f6801e3ce283314528e8a |
| 51395d1 | https://github.com/github/codeql/commit/51395d155f68b99c1210689c675e80c2389fa0e1 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jun 29, 2021
| https://github.com/github/codeql/pull/5612#pullrequestreview-694802315 |
|
View reviewed changes
| https://github.com/github/codeql/pull/5612/files/3fd11298958ee4d8bb18806faebcacd59433818e |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/5612#pullrequestreview-694802315 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| python/ql/test/experimental/query-tests/Security/CWE-943/mongoengine_bad.py | https://github.com/github/codeql/pull/5612/files/0ca4f240d907a8d1f74fc6f6bf578d23bacebcd8..3fd11298958ee4d8bb18806faebcacd59433818e#diff-d7948af4f4301d42b0edceaa7cb5d4f4e34bf3310e0e55854e19854a5ec40326 |
| RasmusWL | https://github.com/RasmusWL |
| Jun 29, 2021 | https://github.com/github/codeql/pull/5612#discussion_r660443023 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| jorgectf | https://github.com/jorgectf |
| Jun 29, 2021 | https://github.com/github/codeql/pull/5612#discussion_r660697368 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| RasmusWL | https://github.com/RasmusWL |
| Jun 29, 2021 | https://github.com/github/codeql/pull/5612#discussion_r660770771 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| jorgectf | https://github.com/jorgectf |
| Jun 29, 2021 | https://github.com/github/codeql/pull/5612#discussion_r660959966 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| jorgectf | https://github.com/jorgectf |
| June 29, 2021 16:53 | https://github.com/github/codeql/pull/5612#commits-pushed-0819090 |
|
| https://github.com/jorgectf |
| Fix qldocs typo | https://github.com/github/codeql/pull/5612/commits/0819090fcbc78c0487370d0683d9449a2ad8f183 |
| 0819090 | https://github.com/github/codeql/pull/5612/commits/0819090fcbc78c0487370d0683d9449a2ad8f183 |
|
| https://github.com/jorgectf |
| Take back non-trivial tests | https://github.com/github/codeql/pull/5612/commits/9a8d1f8e0f7327aeb61faa14d28dea5e0e5a2d1b |
| 9a8d1f8 | https://github.com/github/codeql/pull/5612/commits/9a8d1f8e0f7327aeb61faa14d28dea5e0e5a2d1b |
|
| https://github.com/jorgectf |
| Update .expected | https://github.com/github/codeql/pull/5612/commits/621a810b7b83a6af0adef87e2940007fd3735e99 |
| 621a810 | https://github.com/github/codeql/pull/5612/commits/621a810b7b83a6af0adef87e2940007fd3735e99 |
|
| https://github.com/jorgectf |
| Delete trivial *_good.py tests | https://github.com/github/codeql/pull/5612/commits/e02a63a27a5309312653593c7a62fe3e5a1055f6 |
| e02a63a | https://github.com/github/codeql/pull/5612/commits/e02a63a27a5309312653593c7a62fe3e5a1055f6 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jun 30, 2021
| https://github.com/github/codeql/pull/5612#pullrequestreview-696511754 |
|
View reviewed changes
| https://github.com/github/codeql/pull/5612/files/e02a63a27a5309312653593c7a62fe3e5a1055f6 |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/5612#pullrequestreview-696511754 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/mrthankyou |
| mrthankyou | https://github.com/mrthankyou |
| Jul 11, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-877806081 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Jul 12, 2021
| https://github.com/github/codeql/pull/5612#pullrequestreview-704062193 |
|
View reviewed changes
| https://github.com/github/codeql/pull/5612/files/e02a63a27a5309312653593c7a62fe3e5a1055f6 |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/5612#pullrequestreview-704062193 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| e02a63a | https://github.com/github/codeql/commit/e02a63a27a5309312653593c7a62fe3e5a1055f6 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| python/ql/test/experimental/query-tests/Security/CWE-943/mongoengine_good.py | https://github.com/github/codeql/pull/5612/files/e02a63a27a5309312653593c7a62fe3e5a1055f6#diff-b2b8a7dcf905369d833b6f054e180a11ba04617735ce7db4fe7ab9006c88f9d4 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
|
| https://github.com/mrthankyou |
|
| https://github.com/RasmusWL |
| Change variable name to correct sanitized input variable | https://github.com/github/codeql/pull/5612/commits/51a614025806756b33b0c9764fd91b3e2405570b |
| 51a6140 | https://github.com/github/codeql/pull/5612/commits/51a614025806756b33b0c9764fd91b3e2405570b |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| Jul 14, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-879729239 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
|
| https://github.com/jorgectf |
| Update .expected | https://github.com/github/codeql/pull/5612/commits/6f09b95019b2ac2b9980d4fdadb1c0706366d4dd |
| 6f09b95 | https://github.com/github/codeql/pull/5612/commits/6f09b95019b2ac2b9980d4fdadb1c0706366d4dd |
| https://github.com/mrthankyou |
| mrthankyou | https://github.com/mrthankyou |
| Jul 19, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-882532736 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| Jul 19, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-882630836 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/mrthankyou |
| mrthankyou | https://github.com/mrthankyou |
| Jul 19, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-882637054 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/mrthankyou |
| mrthankyou | https://github.com/mrthankyou |
| Aug 6, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-894479833 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| @RasmusSemmle | https://github.com/RasmusSemmle |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/yoff |
| yoff | https://github.com/yoff |
| Aug 9, 2021 | https://github.com/github/codeql/pull/5612#issuecomment-895527978 |
| @RasmusSemmle | https://github.com/RasmusSemmle |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
|
| https://github.com/jorgectf |
| Merge remote-tracking branch 'origin/main' into jty/python/nosqlInjec… | https://github.com/github/codeql/pull/5612/commits/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf |
| e6ce10b | https://github.com/github/codeql/pull/5612/commits/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
|
Aug 24, 2021
| https://github.com/github/codeql/pull/5612#pullrequestreview-736985468 |
|
View reviewed changes
| https://github.com/github/codeql/pull/5612/files/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf |
| RasmusWL | https://github.com/RasmusWL |
| https://github.com/github/codeql/pull/5612#pullrequestreview-736985468 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| here | https://github.com/github/codeql/pull/5612#pullrequestreview-693836782 |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
| https://github.com/RasmusWL |
| RasmusWL | https://github.com/RasmusWL |
| ca341bd | https://github.com/github/codeql/commit/ca341bde087545f05a57280fdcaaa0e92d796ac6 |
| Aug 24, 2021 | https://github.com/github/codeql/pull/5612#event-5199448157 |
| https://github.com/yoff |
| yoff | https://github.com/yoff |
|
Sep 11, 2023
| https://github.com/github/codeql/pull/5612#ref-pullrequest-1869737637 |
|
Python: promote nosql query
#14070
| https://github.com/github/codeql/pull/14070 |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F5612 |
|
| https://github.com/RasmusWL |
|
RasmusWL
| https://github.com/RasmusWL |
|
| https://github.com/github/codeql/pull/5612/files/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf |
|
| https://github.com/jorgectf |
|
jorgectf
| https://github.com/jorgectf |
|
| https://github.com/github/codeql/pull/5612/files/621a810b7b83a6af0adef87e2940007fd3735e99 |
|
| https://github.com/intrigus-lgtm |
|
intrigus-lgtm
| https://github.com/intrigus-lgtm |
|
| https://github.com/github/codeql/pull/5612/files/4e98348411a3c6b97b38aae287c2985518fb67d5 |
|
| https://github.com/RasmusWL |
|
RasmusWL
| https://github.com/RasmusWL |
|
documentation
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation |
|
Python
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython |
| Please reload this page | https://github.com/github/codeql/pull/5612 |
|
| https://github.com/mrthankyou |
|
| https://github.com/jorgectf |
|
| https://github.com/RasmusWL |
|
| https://github.com/yoff |
|
| https://github.com/intrigus-lgtm |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |