René's URL Explorer Experiment


Title: Python: CWE-943 - Add NoSQL injection query by mrthankyou · Pull Request #5612 · github/codeql · GitHub

Open Graph Title: Python: CWE-943 - Add NoSQL injection query by mrthankyou · Pull Request #5612 · github/codeql

X Title: Python: CWE-943 - Add NoSQL injection query by mrthankyou · Pull Request #5612 · github/codeql

Description: This PR introduces a new query that searches for NoSQL injections. This query specifically looks for vulnerabilities that utilize any one of these three major Python MongoDB libraries: PyMonogo Flask-PyMongo MongoEngine Flask MongoEngine The most common scenario this query looks for is for a Python application to accept user input from a HTTP request, convert that HTTP request to a Python object, and then inject that object directly into a sink method provided by one of the three libraries above. This query is also only currently testing for find related methods as well as MongoEngine's objects method. PS: Please note that both @mrthankyou and @jorgectf wrote this query. If accepted as a bug bounty we would like to split the bounty 50/50. This will be re-iterated in the bug bounty submission but I thought it would be a good idea to mention here. Any review edits will be done by @mrthankyou.

Open Graph Description: This PR introduces a new query that searches for NoSQL injections. This query specifically looks for vulnerabilities that utilize any one of these three major Python MongoDB libraries: PyMonogo Fl...

X Description: This PR introduces a new query that searches for NoSQL injections. This query specifically looks for vulnerabilities that utilize any one of these three major Python MongoDB libraries: PyMonogo Fl...

Opengraph URL: https://github.com/github/codeql/pull/5612

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:d8e90fab-0880-39c9-1c54-648cf4032450
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idC19C:3D21AE:6C0838:91A239:6A4D42B7
html-safe-nonce5415f9f34a791adbbf2d0288ef77e25a9d61ada84a5ddfa998cff9e79a7e2806
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDMTlDOjNEMjFBRTo2QzA4Mzg6OTFBMjM5OjZBNEQ0MkI3IiwidmlzaXRvcl9pZCI6IjMyNTQzNDM0ODEyNzE1OTk3OTkiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmacd193f53d7e7c356fed8450497cfb17af8eb196e218e3f1bfeabf9113f9ad76ea
hovercard-subject-tagpull_request:610066438
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/5612/files
twitter:imagehttps://avatars.githubusercontent.com/u/52643283?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/52643283?s=400&v=4
og:image:altThis PR introduces a new query that searches for NoSQL injections. This query specifically looks for vulnerabilities that utilize any one of these three major Python MongoDB libraries: PyMonogo Fl...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None92571a8944142227b7e19cd10918b1ddd06e5066c1ad5bc7e4769cf6140a87e6
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release56fc8347865a14e2ec811533d68f929cf4e0ec19
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/5612/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F5612%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F5612%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/5612/files
Reloadhttps://github.com/github/codeql/pull/5612/files
Reloadhttps://github.com/github/codeql/pull/5612/files
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
RasmusWLhttps://github.com/RasmusWL
github:mainhttps://github.com/github/codeql/tree/main
jty-team:jty/python/nosqlInjectionhttps://github.com/jty-team/codeql/tree/jty/python/nosqlInjection
Conversation 89 https://github.com/github/codeql/pull/5612
Findings https://github.com/github/codeql/pull/5612/findings
Commits 81 https://github.com/github/codeql/pull/5612/commits
Checks 0 https://github.com/github/codeql/pull/5612/checks
Files changed https://github.com/github/codeql/pull/5612/files
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
Python: CWE-943 - Add NoSQL injection query https://github.com/github/codeql/pull/5612/files#top
Show all changes 81 commits https://github.com/github/codeql/pull/5612/files
517a920 PR init jorgectf Mar 30, 2021 https://github.com/github/codeql/pull/5612/commits/517a9202ce9a9d79dabb080b6c1d057ebf67dce9
aea7546 Add Concepts jorgectf Mar 30, 2021 https://github.com/github/codeql/pull/5612/commits/aea7546cf91f955564b031d2d297f950a12ce793
bd5ff01 PyMongo and Mongoengine sinks jorgectf Mar 30, 2021 https://github.com/github/codeql/pull/5612/commits/bd5ff01ebbef8e04083a7e5efb76bb18d79236c1
d856f16 Adapt query configs and custom classes jorgectf Mar 30, 2021 https://github.com/github/codeql/pull/5612/commits/d856f160c8572b1c7d3de2a41283acc242f76599
4579132 Add left tests jorgectf Mar 30, 2021 https://github.com/github/codeql/pull/5612/commits/4579132f22a3d5e73962ad3e5c7ac18cb1b416e1
ccd57be Fix imports jorgectf Mar 30, 2021 https://github.com/github/codeql/pull/5612/commits/ccd57bea7a25976ad1ae46ce42b5ffb007986a37
01f9d4a Fix MongoEngine Sink jorgectf Mar 31, 2021 https://github.com/github/codeql/pull/5612/commits/01f9d4a1b099a5e42e06aac682cfbbebc13f08fb
7a4dc46 Fix Sinks jorgectf Mar 31, 2021 https://github.com/github/codeql/pull/5612/commits/7a4dc46341bf98c67c3210e5eb2afa7177379755
5a1dc48 Fix Mongoengine test jorgectf Mar 31, 2021 https://github.com/github/codeql/pull/5612/commits/5a1dc48e481f5a6da1c7b40e0709a0caafa0e641
017a826 Remove unused class variables jorgectf Mar 31, 2021 https://github.com/github/codeql/pull/5612/commits/017a826b30954e266173d972ae584ce0cf5351ab
f0a50eb Polish up configs jorgectf Mar 31, 2021 https://github.com/github/codeql/pull/5612/commits/f0a50eb67a9672cf656e6ce9b40c026a524a6e69
3a47a45 Attempt to apply TaintTracking2 jorgectf Mar 31, 2021 https://github.com/github/codeql/pull/5612/commits/3a47a45e47c698be906bb77856d1a09dfd54847c
c8740a2 Update naming jorgectf Apr 1, 2021 https://github.com/github/codeql/pull/5612/commits/c8740a2031d5aa5ee5f58d65c3133e2ed6bd4c42
f980d06 Fix taint configs jorgectf Apr 1, 2021 https://github.com/github/codeql/pull/5612/commits/f980d0694be7c8d3dd1ee1a6c58e416daa909cec
15e176a Polish query select jorgectf Apr 1, 2021 https://github.com/github/codeql/pull/5612/commits/15e176a3b859690e91e605149ef1d190a539d8a7
9072d19 Update qhelp file Apr 5, 2021 https://github.com/github/codeql/pull/5612/commits/9072d19cda809124dd57731067221392fc0c6201
be9a3a9 Add relevant PyMongo sink methods Apr 5, 2021 https://github.com/github/codeql/pull/5612/commits/be9a3a95b1ed111c5e0943cef47d5b0f12307467
80216f6 Rename classes Apr 5, 2021 https://github.com/github/codeql/pull/5612/commits/80216f697441d575adcf5f1512532db8041a70ac
3f0c758 Add required __raw__ keyword mrthankyou Apr 5, 2021 https://github.com/github/codeql/pull/5612/commits/3f0c758622803c7df82b83535a03284aa3d1085f
759fa2c Update query to search for more pymongo sink methods mrthankyou Apr 6, 2021 https://github.com/github/codeql/pull/5612/commits/759fa2cd014aab97889d2ef17a42382856d777e1
6ade120 Add check for mongoengine raw queries mrthankyou Apr 6, 2021 https://github.com/github/codeql/pull/5612/commits/6ade1209834ee2bfc5d6bd69db17d87b8215a832
ac31260 Made grammar changes mrthankyou Apr 6, 2021 https://github.com/github/codeql/pull/5612/commits/ac31260fed107935e2a0fbb1675ca8361be9803f
520e65e Remove unnecessary example code mrthankyou Apr 6, 2021 https://github.com/github/codeql/pull/5612/commits/520e65e3c3837a8e010386dec6649e6de870c956
dc274ec Improve sentence structure and grammar mrthankyou Apr 6, 2021 https://github.com/github/codeql/pull/5612/commits/dc274ecf36a3a9f4261d9a8df1ef36e63974e5a0
4e98348 Remove comment mrthankyou Apr 6, 2021 https://github.com/github/codeql/pull/5612/commits/4e98348411a3c6b97b38aae287c2985518fb67d5
719c30b Fix file name and adjust where the test points to mrthankyou Apr 7, 2021 https://github.com/github/codeql/pull/5612/commits/719c30bd92d00129451fec314595bdbcc988afab
83f28bf Catch any keyword argument passed to MongoEngine's objects method mrthankyou Apr 7, 2021 https://github.com/github/codeql/pull/5612/commits/83f28bfdda4c06bd92be184f3a10ed31d148cfe9
0e51dbe Polish tests jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/0e51dbec8615f1c2dc2767dea68370b69c8d0141
a6b3aef Add flask_mongoengine sink jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/a6b3aefb0bbbab4a3da1d30c078f8ef1a3cd456e
fa5869a Polish qhelp and examples jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/fa5869afe7021fc11895e694d6685fdf5600ecb4
983af32 Polish qhelp examples jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/983af32ab525b909ee6f9bf668c007f71af8c7ed
208b53e Polish query file jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/208b53e4d2d9d98b16ce955b2c6074489dd1c766
1663857 Polish Calls naming jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/166385755afacd7a069db68bcbcd62421ce44a47
4615927 Fix flask_mongoengine Call jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/4615927eeb2efc2c537278575fe254ba7ad73153
5d25a27 Add .expected jorgectf Apr 9, 2021 https://github.com/github/codeql/pull/5612/commits/5d25a27d62e07d00e00bed0e5e3f3701d9642c78
bbd3552 Rename predicate to getQuery mrthankyou Apr 20, 2021 https://github.com/github/codeql/pull/5612/commits/bbd3552392c5ab978fe8322e703b821389893878
7773c53 Replace any(string) with _ wildcard mrthankyou Apr 20, 2021 https://github.com/github/codeql/pull/5612/commits/7773c531248417e7d90c419b05971f1e36ba2792
62f3e8d Add sanitizer for ObjectId mrthankyou Apr 26, 2021 https://github.com/github/codeql/pull/5612/commits/62f3e8d64a4f75fc6fdf21dbeafaa66685f91e39
d85b1a2 Replace recursive getAMember*() method mrthankyou Apr 28, 2021 https://github.com/github/codeql/pull/5612/commits/d85b1a2d5fc2c8bf0d79c09c9bd353958ddfaa77
56dc4d8 Add comment on BsonObjectIdCall mrthankyou May 4, 2021 https://github.com/github/codeql/pull/5612/commits/56dc4d886e0b86dd69865a75ed95e4430a24fddd
c4a67e5 Rewrite query to take into account MongoClient and subscript expressions mrthankyou May 4, 2021 https://github.com/github/codeql/pull/5612/commits/c4a67e522cf6711e035a8b97cc640a7289d5b673
1d36aa6 Add additional querying for mongoengine Document subclassing mrthankyou May 7, 2021 https://github.com/github/codeql/pull/5612/commits/1d36aa6649b6ac3ed9a28e8649f893a5944478b9
7693d69 Add additional query tests mrthankyou May 7, 2021 https://github.com/github/codeql/pull/5612/commits/7693d696cc9f1c208cbcb39c2c3bde53253a329b
8f8eff2 Fix comment description of predicate mrthankyou May 7, 2021 https://github.com/github/codeql/pull/5612/commits/8f8eff231aa30e1741f6d659ad0e6ced56cd4d03
9a44020 Rename StdLib.qll file to NoSQL.qll file mrthankyou May 7, 2021 https://github.com/github/codeql/pull/5612/commits/9a44020af3ff8a979d6bcb24ad5fa9c1c0592d8d
83f0870 Update file path of module mrthankyou May 7, 2021 https://github.com/github/codeql/pull/5612/commits/83f087023130e34d80a8d3bdacace3c7e32010bb
aa24c68 Add back accidentally deleted StdLib.qll file mrthankyou May 7, 2021 https://github.com/github/codeql/pull/5612/commits/aa24c689bc71932800617bf2cfa695020e7f735a
65c6f19 Rename mongoengine-flask-db-document-subclass jorgectf May 7, 2021 https://github.com/github/codeql/pull/5612/commits/65c6f1976ae4040f206cdcc33764b708a52a5c50
e7bdc73 Update .expected jorgectf May 7, 2021 https://github.com/github/codeql/pull/5612/commits/e7bdc73420e3d6ead5bd5ce7087e2da3d30a8d11
0fc044d Checkout Stdlib.qll jorgectf May 7, 2021 https://github.com/github/codeql/pull/5612/commits/0fc044dfd574729cb447b4fadc5cece1cc1b5653
67bc576 Delete StdLib.qll mrthankyou May 7, 2021 https://github.com/github/codeql/pull/5612/commits/67bc576e30c5029164a0511abeb7af78d5ead982
07c3e22 Fix method name to match flask_mongoengine library mrthankyou May 9, 2021 https://github.com/github/codeql/pull/5612/commits/07c3e224280046e26ee0c0c978fd71e2ff79c20c
0238e51 Add checks for EmbeddedDocument classes mrthankyou May 9, 2021 https://github.com/github/codeql/pull/5612/commits/0238e51c1067754ead8b5daaaa1820b59991decd
3e25b14 Update NoSQLInjection.expected mrthankyou May 12, 2021 https://github.com/github/codeql/pull/5612/commits/3e25b14a680b71ee994736dd11542ecbbe54be72
c948970 resolve merge conflicts jorgectf Jun 14, 2021 https://github.com/github/codeql/pull/5612/commits/c948970181e58b9045d2c01ce2b98b3123dfd3e3
6bed859 Match sanitizer inputs' naming jorgectf Jun 15, 2021 https://github.com/github/codeql/pull/5612/commits/6bed8594f23e7c1b72fa5722d9df0634c7763053
e61cf9a Simplify tests jorgectf Jun 15, 2021 https://github.com/github/codeql/pull/5612/commits/e61cf9a58d5a6a8a420e37479d2765490336b05d
5123b8f Update .expected jorgectf Jun 15, 2021 https://github.com/github/codeql/pull/5612/commits/5123b8f4e34e343e6a5d3ffb058ce854016069d3
81505fb Normalize tests jorgectf Jun 16, 2021 https://github.com/github/codeql/pull/5612/commits/81505fbd76d4add27d7fb6e2146473b3e77387f5
5c7229c Optimize Type Tracking stuff jorgectf Jun 16, 2021 https://github.com/github/codeql/pull/5612/commits/5c7229c715496d479104bdec8f957a52bf585159
8527ccc Update .expected jorgectf Jun 16, 2021 https://github.com/github/codeql/pull/5612/commits/8527ccc6d6f4aea5aa889b2e69847203c9b2d09d
b8e619a Extend qhelp references jorgectf Jun 17, 2021 https://github.com/github/codeql/pull/5612/commits/b8e619a60c1cb0d801797a40ebdc2b15a27667a0
8e3d5ff Rename mongoclient tests jorgectf Jun 17, 2021 https://github.com/github/codeql/pull/5612/commits/8e3d5ff3f9375f9f3a16cc039f85965e6279bae0
7e6032f Port to Decoding jorgectf Jun 17, 2021 https://github.com/github/codeql/pull/5612/commits/7e6032f5b4dd9c4b5d0a2a29aa892e74c58274e9
4e74003 Polish Concepts documentation jorgectf Jun 17, 2021 https://github.com/github/codeql/pull/5612/commits/4e74003cd5d70832477141e5696f16c1c30ae977
eb16018 Update .expected jorgectf Jun 17, 2021 https://github.com/github/codeql/pull/5612/commits/eb16018446340ff1b8d6fae7e72af345f93d31dc
5971142 Python: Fix qhelp for NoSQL injection RasmusWL Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/59711424bd88abf2caf7fb7459f471ea778baf9e
318694c Python: Don't rely on `d = d.getOutput()` for `Decoding` RasmusWL Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/318694ccc86bc2251493e06b4b0e1a7dac6e206e
a5009ef Merge pull request #5 from RasmusWL/nosql-fixes jorgectf Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/a5009efb4ba5eec8ba76a88910314e4f93c6263a
0ca4f24 Merge tests and update `.expected` jorgectf Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/0ca4f240d907a8d1f74fc6f6bf578d23bacebcd8
3fd1129 Delete trivial tests jorgectf Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/3fd11298958ee4d8bb18806faebcacd59433818e
68c6831 Polish documentation, `mongoCollectionMethod()` and update `.expected` jorgectf Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/68c683189a902d403f3f6801e3ce283314528e8a
3504408 Apply suggestions from code review jorgectf Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/350440897c753a3a948a8a4e10171d413997a435
51395d1 Move `xmltodict` to its own file under `frameworks/` jorgectf Jun 28, 2021 https://github.com/github/codeql/pull/5612/commits/51395d155f68b99c1210689c675e80c2389fa0e1
0819090 Fix qldocs typo jorgectf Jun 29, 2021 https://github.com/github/codeql/pull/5612/commits/0819090fcbc78c0487370d0683d9449a2ad8f183
9a8d1f8 Take back non-trivial tests jorgectf Jun 29, 2021 https://github.com/github/codeql/pull/5612/commits/9a8d1f8e0f7327aeb61faa14d28dea5e0e5a2d1b
621a810 Update `.expected` jorgectf Jun 29, 2021 https://github.com/github/codeql/pull/5612/commits/621a810b7b83a6af0adef87e2940007fd3735e99
e02a63a Delete trivial `*_good.py` tests jorgectf Jun 29, 2021 https://github.com/github/codeql/pull/5612/commits/e02a63a27a5309312653593c7a62fe3e5a1055f6
51a6140 Change variable name to correct sanitized input variable mrthankyou Jul 13, 2021 https://github.com/github/codeql/pull/5612/commits/51a614025806756b33b0c9764fd91b3e2405570b
6f09b95 Update `.expected` jorgectf Jul 15, 2021 https://github.com/github/codeql/pull/5612/commits/6f09b95019b2ac2b9980d4fdadb1c0706366d4dd
e6ce10b Merge remote-tracking branch 'origin/main' into jty/python/nosqlInjec… jorgectf Aug 10, 2021 https://github.com/github/codeql/pull/5612/commits/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf
Clear filters https://github.com/github/codeql/pull/5612/files
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
NoSQLInjection.qhelp https://github.com/github/codeql/pull/5612/files#diff-6d0b6ebc3539cde59f3e67ee69f9fe54926ecdc18069bf363c13b1c58af8e03b
NoSQLInjection.ql https://github.com/github/codeql/pull/5612/files#diff-ea7dbd6c7d85d2f47474d0e9e864d9ac4cb8fa06c5a7112259018562381efae9
NoSQLInjection-bad.py https://github.com/github/codeql/pull/5612/files#diff-cf842eb3f64d75928a74b377e3079eaa926ece021f84005b863100215f850394
NoSQLInjection-good.py https://github.com/github/codeql/pull/5612/files#diff-e0bfb1a19bec85a07c6bbe50ba82c18c82da2f5eb65c6b2623564e50199d4cd1
Concepts.qll https://github.com/github/codeql/pull/5612/files#diff-07631b7f3489bbd6603ecbc9149f5919406181361b1bd04a53e048f531a4986a
Frameworks.qll https://github.com/github/codeql/pull/5612/files#diff-912ff00fff24c4b7e46c7e8d7e6179e1e4df2aa3d0f5e937a13bab60568e9ec8
NoSQL.qll https://github.com/github/codeql/pull/5612/files#diff-ca1baaa83ce64bcb0c8f0dca86c8be11cef6a77a6bc422ee1584f1eadf17cc12
Xmltodict.qll https://github.com/github/codeql/pull/5612/files#diff-8f79c7cd2be6f2a53efd7dc02d4baff0816cef2e121f2af38d92101085d68c74
NoSQLInjection.qll https://github.com/github/codeql/pull/5612/files#diff-1f3e59a6f3ee834574fd8e665e0a46f937cd00bac984d42a56be21e8df15c6ab
NoSQLInjection.expected https://github.com/github/codeql/pull/5612/files#diff-5c0a69878f69f2b2ff380185ab31015d2b64984847fe4f7fca26c5edf9c3b56c
NoSQLInjection.qlref https://github.com/github/codeql/pull/5612/files#diff-9298db1c2cdd88bf3ab90479a4a827b2f4d82bcd49c063681e4a56dea787c168
flask_mongoengine_bad.py https://github.com/github/codeql/pull/5612/files#diff-406f8f239affdf3ec3d33aef9af6081c57f4db7e91ce9681e36bc7fea79d42a2
flask_mongoengine_good.py https://github.com/github/codeql/pull/5612/files#diff-78473234cc9c350c94ead57c57182d27c5e1ec541401534cdee0a94a2fcae16c
flask_pymongo_bad.py https://github.com/github/codeql/pull/5612/files#diff-f03ae430ba193195d47016b34ad7d47e53d1556b743c96d95e807bfaa2a39351
flask_pymongo_good.py https://github.com/github/codeql/pull/5612/files#diff-b4e6466c2b5e1f57983aad40ea773a4b9ae33295811a799eb9599762107dc13e
mongoengine_bad.py https://github.com/github/codeql/pull/5612/files#diff-d7948af4f4301d42b0edceaa7cb5d4f4e34bf3310e0e55854e19854a5ec40326
mongoengine_good.py https://github.com/github/codeql/pull/5612/files#diff-b2b8a7dcf905369d833b6f054e180a11ba04617735ce7db4fe7ab9006c88f9d4
pymongo_bad.py https://github.com/github/codeql/pull/5612/files#diff-373767ea6a2c3092015b2f1dcdcab4fa679f8c647015516528e9cee48afe2a84
pymongo_good.py https://github.com/github/codeql/pull/5612/files#diff-435a54de36247bdb01070f95824f2313627c96cdb5b99c8981dd333742fbf7b6
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/src/experimental/Security/CWE-943/NoSQLInjection.qhelphttps://github.com/github/codeql/pull/5612/files#diff-6d0b6ebc3539cde59f3e67ee69f9fe54926ecdc18069bf363c13b1c58af8e03b
View file https://github.com/jty-team/codeql/blob/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf/python/ql/src/experimental/Security/CWE-943/NoSQLInjection.qhelp
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/5612/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/src/experimental/Security/CWE-943/NoSQLInjection.qlhttps://github.com/github/codeql/pull/5612/files#diff-ea7dbd6c7d85d2f47474d0e9e864d9ac4cb8fa06c5a7112259018562381efae9
View file https://github.com/jty-team/codeql/blob/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf/python/ql/src/experimental/Security/CWE-943/NoSQLInjection.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/5612/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/src/experimental/Security/CWE-943/examples/NoSQLInjection-bad.pyhttps://github.com/github/codeql/pull/5612/files#diff-cf842eb3f64d75928a74b377e3079eaa926ece021f84005b863100215f850394
View file https://github.com/jty-team/codeql/blob/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf/python/ql/src/experimental/Security/CWE-943/examples/NoSQLInjection-bad.py
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/5612/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/src/experimental/Security/CWE-943/examples/NoSQLInjection-good.pyhttps://github.com/github/codeql/pull/5612/files#diff-e0bfb1a19bec85a07c6bbe50ba82c18c82da2f5eb65c6b2623564e50199d4cd1
View file https://github.com/jty-team/codeql/blob/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf/python/ql/src/experimental/Security/CWE-943/examples/NoSQLInjection-good.py
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/5612/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/src/experimental/semmle/python/Concepts.qllhttps://github.com/github/codeql/pull/5612/files#diff-07631b7f3489bbd6603ecbc9149f5919406181361b1bd04a53e048f531a4986a
View file https://github.com/jty-team/codeql/blob/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf/python/ql/src/experimental/semmle/python/Concepts.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/5612/{{ revealButtonHref }}
https://github.com/github/codeql/pull/5612/files#diff-07631b7f3489bbd6603ecbc9149f5919406181361b1bd04a53e048f531a4986a
mrthankyouhttps://github.com/mrthankyou
Jun 16, 2021https://github.com/github/codeql/pull/5612/files#r652862647
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
jorgectfhttps://github.com/jorgectf
Jun 16, 2021https://github.com/github/codeql/pull/5612/files#r653058787
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
#5443 (review)https://github.com/github/codeql/pull/5443#pullrequestreview-654178832
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/src/experimental/semmle/python/Frameworks.qllhttps://github.com/github/codeql/pull/5612/files#diff-912ff00fff24c4b7e46c7e8d7e6179e1e4df2aa3d0f5e937a13bab60568e9ec8
View file https://github.com/jty-team/codeql/blob/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf/python/ql/src/experimental/semmle/python/Frameworks.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/5612/{{ revealButtonHref }}
https://github.com/github/codeql/pull/5612/files#diff-912ff00fff24c4b7e46c7e8d7e6179e1e4df2aa3d0f5e937a13bab60568e9ec8
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/src/experimental/semmle/python/frameworks/NoSQL.qllhttps://github.com/github/codeql/pull/5612/files#diff-ca1baaa83ce64bcb0c8f0dca86c8be11cef6a77a6bc422ee1584f1eadf17cc12
View file https://github.com/jty-team/codeql/blob/e6ce10b5c54cc929d22dac421d3bdd7b005f15cf/python/ql/src/experimental/semmle/python/frameworks/NoSQL.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/5612/{{ revealButtonHref }}
Please reload this pagehttps://github.com/github/codeql/pull/5612/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.