René's URL Explorer Experiment


Title: Python: Port and extend XXE modeling by jorgectf · Pull Request #6112 · github/codeql · GitHub

Open Graph Title: Python: Port and extend XXE modeling by jorgectf · Pull Request #6112 · github/codeql

X Title: Python: Port and extend XXE modeling by jorgectf · Pull Request #6112 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Python: Port and extend XXE modeling by jorgectf · Pull Request #6112 · github/codeql

Open Graph Description: This PR introduces the modeling of the following XML parsing-related libraries and specific methods: XML Parsers: xml.etree.ElementTree.XMLParser() - not extends entities anymore lxml.etree.XML...

X Description: This PR introduces the modeling of the following XML parsing-related libraries and specific methods: XML Parsers: xml.etree.ElementTree.XMLParser() - not extends entities anymore lxml.etree.XML...

Opengraph URL: https://github.com/github/codeql/pull/6112

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:b2dba0ee-ad07-a92a-5018-1132e9898924
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idA00A:2C0E24:13D97B8:1AE37C8:6A4D717F
html-safe-nonce7a1c888b3930e5ba2fa449d7b02bd47ea9c15d31534fb1af370b24777e05292a
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBMDBBOjJDMEUyNDoxM0Q5N0I4OjFBRTM3Qzg6NkE0RDcxN0YiLCJ2aXNpdG9yX2lkIjoiNzA3Njc1NTk1MjU1NzE5MTU1MSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacc38ba247c58a388c0c99e58ebdcbb6e03bf446514eb750ed0f214cd93e6110e7
hovercard-subject-tagpull_request:673908408
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/6112/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/4eb89f5625e49137be15b22644c2f289a30f32ca13e2ca445e60f65b26378e16/github/codeql/pull/6112
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/4eb89f5625e49137be15b22644c2f289a30f32ca13e2ca445e60f65b26378e16/github/codeql/pull/6112
og:image:altThis PR introduces the modeling of the following XML parsing-related libraries and specific methods: XML Parsers: xml.etree.ElementTree.XMLParser() - not extends entities anymore lxml.etree.XML...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamejorgectf
hostnamegithub.com
expected-hostnamegithub.com
Nonec78260c7b3f4ac4b0356c8208537f05406a3a2d46a9ec3f735b372dcc519c39e
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release399fff412f48461d435721c009efc17ea44be72f
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/6112#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F6112
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F6112
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/6112
Reloadhttps://github.com/github/codeql/pull/6112
Reloadhttps://github.com/github/codeql/pull/6112
Please reload this pagehttps://github.com/github/codeql/pull/6112
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 425 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
RasmusWLhttps://github.com/RasmusWL
github:mainhttps://github.com/github/codeql/tree/main
jorgectf:jorgectf/python/deserializationhttps://github.com/jorgectf/codeql/tree/jorgectf/python/deserialization
Conversationhttps://github.com/github/codeql/pull/6112
Commits91 (91)https://github.com/github/codeql/pull/6112/commits
Checkshttps://github.com/github/codeql/pull/6112/checks
Files changedhttps://github.com/github/codeql/pull/6112/files
Python: Port and extend XXE modelinghttps://github.com/github/codeql/pull/6112#top
RasmusWLhttps://github.com/RasmusWL
github:mainhttps://github.com/github/codeql/tree/main
jorgectf:jorgectf/python/deserializationhttps://github.com/jorgectf/codeql/tree/jorgectf/python/deserialization
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
Jun 19, 2021https://github.com/github/codeql/pull/6112#issue-925433296
Please reload this pagehttps://github.com/github/codeql/pull/6112
Please reload this pagehttps://github.com/github/codeql/pull/6112
https://github.com/jorgectf
Empty commithttps://github.com/github/codeql/pull/6112/commits/0e615586440ca11393a9f81ae9c5c5e7dbbf6372
0e61558https://github.com/github/codeql/pull/6112/commits/0e615586440ca11393a9f81ae9c5c5e7dbbf6372
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
Jun 19, 2021https://github.com/github/codeql/pull/6112#event-4912660104
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
Jun 19, 2021https://github.com/github/codeql/pull/6112#issuecomment-864472384
Please reload this pagehttps://github.com/github/codeql/pull/6112
codeql/python/ql/src/semmle/python/Concepts.qllhttps://github.com/github/codeql/blob/26a04d665970a6882777ab8cbedf3c4c28541598/python/ql/src/semmle/python/Concepts.qll#L112-L140
26a04d6https://github.com/github/codeql/commit/26a04d665970a6882777ab8cbedf3c4c28541598
treat XXE as a deserializationhttps://github.com/github/codeql/blob/26a04d665970a6882777ab8cbedf3c4c28541598/python/ql/src/semmle/python/security/injection/Xml.qll#L57
Please reload this pagehttps://github.com/github/codeql/pull/6112
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
Jun 19, 2021https://github.com/github/codeql/pull/6112#event-4912871048
jorgectfhttps://github.com/jorgectf
June 22, 2021 16:41https://github.com/github/codeql/pull/6112#commits-pushed-78deec8
https://github.com/jorgectf
Upload main structure and initial testshttps://github.com/github/codeql/pull/6112/commits/78deec84fc8ebd17e4aed6d108455e9aa3c58fce
78deec8https://github.com/github/codeql/pull/6112/commits/78deec84fc8ebd17e4aed6d108455e9aa3c58fce
https://github.com/jorgectf
Move tests to test/https://github.com/github/codeql/pull/6112/commits/b9fa57f518a0eb81ec4be5a4fdb2b56d5c4017be
b9fa57fhttps://github.com/github/codeql/pull/6112/commits/b9fa57f518a0eb81ec4be5a4fdb2b56d5c4017be
https://github.com/jorgectf
Add XMLParser concepthttps://github.com/github/codeql/pull/6112/commits/c3b3bde35ded8d80caf0df5ce7c200374e4b7a13
c3b3bdehttps://github.com/github/codeql/pull/6112/commits/c3b3bde35ded8d80caf0df5ce7c200374e4b7a13
https://github.com/jorgectf
Add partial modelinghttps://github.com/github/codeql/pull/6112/commits/d475d52c76aee9eaa82e0f34b470eed8e5212d76
d475d52https://github.com/github/codeql/pull/6112/commits/d475d52c76aee9eaa82e0f34b470eed8e5212d76
https://github.com/jorgectf
Format testshttps://github.com/github/codeql/pull/6112/commits/11f4c1cc8e74ff9403b75a732b7153fe8d8b6457
11f4c1chttps://github.com/github/codeql/pull/6112/commits/11f4c1cc8e74ff9403b75a732b7153fe8d8b6457
https://github.com/jorgectf
Write (String|Bytes)IO additional taint stephttps://github.com/github/codeql/pull/6112/commits/b5e10b6c426e5516a304d23e7dc8fe48754080a7
b5e10b6https://github.com/github/codeql/pull/6112/commits/b5e10b6c426e5516a304d23e7dc8fe48754080a7
https://github.com/jorgectf
Finish modelinghttps://github.com/github/codeql/pull/6112/commits/068150b1ab28d3b9dd393f2a85a2cc4985e068a0
068150bhttps://github.com/github/codeql/pull/6112/commits/068150b1ab28d3b9dd393f2a85a2cc4985e068a0
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
July 22, 2021 17:35https://github.com/github/codeql/pull/6112#event-5057040858
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
code ownerhttps://github.com/github/codeql/blob/5c917b4a23f4197b7d42e981262008a69edac21d/CODEOWNERS#L12
July 22, 2021 17:35https://github.com/github/codeql/pull/6112#event-5057040887
jorgectfhttps://github.com/jorgectf
July 24, 2021 01:23https://github.com/github/codeql/pull/6112#commits-pushed-0d2646f
https://github.com/jorgectf
Polish documentationhttps://github.com/github/codeql/pull/6112/commits/0d2646fd3dade349586b362fb610830867249322
0d2646fhttps://github.com/github/codeql/pull/6112/commits/0d2646fd3dade349586b362fb610830867249322
https://github.com/jorgectf
Polish testshttps://github.com/github/codeql/pull/6112/commits/61e873d725e41b942d1121a64786d30d5f228ca0
61e873dhttps://github.com/github/codeql/pull/6112/commits/61e873d725e41b942d1121a64786d30d5f228ca0
https://github.com/jorgectf
Write qldocshttps://github.com/github/codeql/pull/6112/commits/b83b31cc7a9aa8e299f02381437a7ab17cc9d4cf
b83b31chttps://github.com/github/codeql/pull/6112/commits/b83b31cc7a9aa8e299f02381437a7ab17cc9d4cf
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
Jul 24, 2021https://github.com/github/codeql/pull/6112#issuecomment-885974534
Please reload this pagehttps://github.com/github/codeql/pull/6112
jorgectfhttps://github.com/jorgectf
July 25, 2021 01:51https://github.com/github/codeql/pull/6112#commits-pushed-1dd77f1
https://github.com/jorgectf
Fix undetected testshttps://github.com/github/codeql/pull/6112/commits/1dd77f167a9554663b16fac66b4d3c1a3bbcf2fd
1dd77f1https://github.com/github/codeql/pull/6112/commits/1dd77f167a9554663b16fac66b4d3c1a3bbcf2fd
https://github.com/jorgectf
Add .expectedhttps://github.com/github/codeql/pull/6112/commits/93c8529fc9214125547529ca4a6fbe7dd27f7340
93c8529https://github.com/github/codeql/pull/6112/commits/93c8529fc9214125547529ca4a6fbe7dd27f7340
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Aug 25, 2021https://github.com/github/codeql/pull/6112#event-5206951035
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
August 25, 2021 14:14https://github.com/github/codeql/pull/6112#event-5207084752
https://github.com/jorgectf
Fix references' link anchorhttps://github.com/github/codeql/pull/6112/commits/48bca5beb8a63b24e824c19fccaf5c9ddbc4d977
48bca5bhttps://github.com/github/codeql/pull/6112/commits/48bca5beb8a63b24e824c19fccaf5c9ddbc4d977
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
Aug 25, 2021 https://github.com/github/codeql/pull/6112#ref-issue-979292610
[Python]: CWE-611: XXE github/securitylab#424 https://github.com/github/securitylab/issues/424
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
August 25, 2021 15:18https://github.com/github/codeql/pull/6112#event-5207544307
https://github.com/m-y-mo
m-y-mohttps://github.com/m-y-mo
Aug 26, 2021 https://github.com/github/codeql/pull/6112#pullrequestreview-739254321
View reviewed changes https://github.com/github/codeql/pull/6112/files/48bca5beb8a63b24e824c19fccaf5c9ddbc4d977
python/ql/src/experimental/Security/CWE-611/XXE.qlrefhttps://github.com/github/codeql/pull/6112/files/48bca5beb8a63b24e824c19fccaf5c9ddbc4d977#diff-cfe8ba3ac395e31b817255fb4305caf6c26b3b0c1a13707cb77ba76528c7b10f
Please reload this pagehttps://github.com/github/codeql/pull/6112
https://github.com/m-y-mo
m-y-mohttps://github.com/m-y-mo
Aug 26, 2021 https://github.com/github/codeql/pull/6112#pullrequestreview-739262300
View reviewed changes https://github.com/github/codeql/pull/6112/files/48bca5beb8a63b24e824c19fccaf5c9ddbc4d977
python/ql/src/experimental/Security/CWE-611/XXE.qlrefhttps://github.com/github/codeql/pull/6112/files/48bca5beb8a63b24e824c19fccaf5c9ddbc4d977#diff-cfe8ba3ac395e31b817255fb4305caf6c26b3b0c1a13707cb77ba76528c7b10f
Please reload this pagehttps://github.com/github/codeql/pull/6112
https://github.com/jorgectf
Update .qlrefhttps://github.com/github/codeql/pull/6112/commits/21da603d8188a6cd751e4a17357d572520db4c05
21da603https://github.com/github/codeql/pull/6112/commits/21da603d8188a6cd751e4a17357d572520db4c05
https://github.com/m-y-mo
m-y-mohttps://github.com/m-y-mo
Sep 8, 2021 https://github.com/github/codeql/pull/6112#pullrequestreview-749049807
View reviewed changes https://github.com/github/codeql/pull/6112/files/21da603d8188a6cd751e4a17357d572520db4c05
python/ql/src/experimental/Security/CWE-611/XXE.qlrefhttps://github.com/github/codeql/pull/6112/files/21da603d8188a6cd751e4a17357d572520db4c05#diff-cfe8ba3ac395e31b817255fb4305caf6c26b3b0c1a13707cb77ba76528c7b10f
Please reload this pagehttps://github.com/github/codeql/pull/6112
jorgectfhttps://github.com/jorgectf
September 9, 2021 19:06https://github.com/github/codeql/pull/6112#commits-pushed-61a81b6
https://github.com/jorgectf
Extend .qlrefhttps://github.com/github/codeql/pull/6112/commits/61a81b60e8ff56e2af69271edf0bb662322627bb
61a81b6https://github.com/github/codeql/pull/6112/commits/61a81b60e8ff56e2af69271edf0bb662322627bb
https://github.com/RasmusWL
Merge branch 'main' into jorgectf/python/deserializationhttps://github.com/github/codeql/pull/6112/commits/67fddda6d206fc214c1a4f1d9c922991e8133ff1
67fdddahttps://github.com/github/codeql/pull/6112/commits/67fddda6d206fc214c1a4f1d9c922991e8133ff1
RasmusWLhttps://github.com/RasmusWL
March 3, 2022 21:18https://github.com/github/codeql/pull/6112#commits-pushed-3278793
https://github.com/RasmusWL
Python: Handle more functions and kw-argshttps://github.com/github/codeql/pull/6112/commits/32787939721e9478e4075b6c7d2f10a96b2a2cb1
3278793https://github.com/github/codeql/pull/6112/commits/32787939721e9478e4075b6c7d2f10a96b2a2cb1
https://github.com/RasmusWL
Python: Update XmlEntityInjection.expectedhttps://github.com/github/codeql/pull/6112/commits/f72f673e7ee82e5fd4156d2d6a5a4e8144d371d7
f72f673https://github.com/github/codeql/pull/6112/commits/f72f673e7ee82e5fd4156d2d6a5a4e8144d371d7
https://github.com/RasmusWL
Python: Support feed method of lxml/xml.etree Parsershttps://github.com/github/codeql/pull/6112/commits/33ebcdf43715f10d1deafc493e9fd568f7b78bea
33ebcdfhttps://github.com/github/codeql/pull/6112/commits/33ebcdf43715f10d1deafc493e9fd568f7b78bea
https://github.com/RasmusWL
Python: Add test for XMLPullParserhttps://github.com/github/codeql/pull/6112/commits/46238d5ea049e5b51f99f4b66366957852a649c8
46238d5https://github.com/github/codeql/pull/6112/commits/46238d5ea049e5b51f99f4b66366957852a649c8
https://github.com/RasmusWL
Python: Restructure overall XML modelinghttps://github.com/github/codeql/pull/6112/commits/de0e67f327de078af5c6574445e82f7574f52984
de0e67fhttps://github.com/github/codeql/pull/6112/commits/de0e67f327de078af5c6574445e82f7574f52984
https://github.com/RasmusWL
Python: Align QLdocs of XML modelinghttps://github.com/github/codeql/pull/6112/commits/a033b71eaf16dce055696ca7f1485c7f079ad2ed
a033b71https://github.com/github/codeql/pull/6112/commits/a033b71eaf16dce055696ca7f1485c7f079ad2ed
https://github.com/RasmusWL
Python: Restructure modeling of xml.etree parsershttps://github.com/github/codeql/pull/6112/commits/c0a2c25f5a712967ea5d067907e7c5be7b71a144
c0a2c25https://github.com/github/codeql/pull/6112/commits/c0a2c25f5a712967ea5d067907e7c5be7b71a144
https://github.com/RasmusWL
Python: Restructure lxml modelinghttps://github.com/github/codeql/pull/6112/commits/c0a6f9f3fdcd7d3b52d4da7fb5657ad839686322
c0a6f9fhttps://github.com/github/codeql/pull/6112/commits/c0a6f9f3fdcd7d3b52d4da7fb5657ad839686322
https://github.com/RasmusWL
Python: Minor fixup of qldochttps://github.com/github/codeql/pull/6112/commits/df8e0fce68c1ea11bacaf789caebfbd7e5391376
df8e0fchttps://github.com/github/codeql/pull/6112/commits/df8e0fce68c1ea11bacaf789caebfbd7e5391376
https://github.com/RasmusWL
Python: Remove XMLParser concepthttps://github.com/github/codeql/pull/6112/commits/837daaae3b5f2fba2e405f8cf7900a9c51999769
837daaahttps://github.com/github/codeql/pull/6112/commits/837daaae3b5f2fba2e405f8cf7900a9c51999769
https://github.com/RasmusWL
Python: Minor qldoc improvementhttps://github.com/github/codeql/pull/6112/commits/0d69dc854c47df55eddb11d500b8cbe9b04f1d75
0d69dc8https://github.com/github/codeql/pull/6112/commits/0d69dc854c47df55eddb11d500b8cbe9b04f1d75
https://github.com/RasmusWL
Python: Rename vulnerable predicate => vulnerableTohttps://github.com/github/codeql/pull/6112/commits/3f6c55e8aeb3c930d730bb719b778811ffa6dbf1
3f6c55ehttps://github.com/github/codeql/pull/6112/commits/3f6c55e8aeb3c930d730bb719b778811ffa6dbf1
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022 https://github.com/github/codeql/pull/6112#ref-pullrequest-1158910825
XXE: Changes for review jorgectf/codeql#9 https://github.com/jorgectf/codeql/pull/9
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022 https://github.com/github/codeql/pull/6112#pullrequestreview-898959413
View reviewed changes https://github.com/github/codeql/pull/6112/files/518e2aeebf5bfc2124208255a6d341f057dc553a
RasmusWLhttps://github.com/RasmusWL
https://github.com/github/codeql/pull/6112#pullrequestreview-898959413
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
jorgectf#9https://github.com/jorgectf/codeql/pull/9
Please reload this pagehttps://github.com/github/codeql/pull/6112
python/ql/test/experimental/query-tests/Security/CWE-611/xml_etree.pyhttps://github.com/github/codeql/pull/6112/files/518e2aeebf5bfc2124208255a6d341f057dc553a#diff-0797a37d37e2dfc6db82d8c6bdc98f4b2339ebe195b8dec47e1facdc2f0f43f7
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022https://github.com/github/codeql/pull/6112#discussion_r818682488
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/6112
jorgectfhttps://github.com/jorgectf
Mar 3, 2022https://github.com/github/codeql/pull/6112#discussion_r819101393
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/6112
python/ql/src/experimental/semmle/python/frameworks/Xml.qllhttps://github.com/github/codeql/pull/6112/files/8f9cd168067a4c4d56d12d20a9e926bb05142f19#diff-9627c1fb9a1cc77fb93e6b7e31af1a4fa908f2a60362cfb34377d24debb97398
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022https://github.com/github/codeql/pull/6112#discussion_r818683626
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/6112
python/ql/src/experimental/semmle/python/frameworks/Xml.qllhttps://github.com/github/codeql/pull/6112/files/8f9cd168067a4c4d56d12d20a9e926bb05142f19#diff-9627c1fb9a1cc77fb93e6b7e31af1a4fa908f2a60362cfb34377d24debb97398
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022https://github.com/github/codeql/pull/6112#discussion_r818683799
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/6112
python/ql/src/experimental/semmle/python/frameworks/Xml.qllhttps://github.com/github/codeql/pull/6112/files/8f9cd168067a4c4d56d12d20a9e926bb05142f19#diff-9627c1fb9a1cc77fb93e6b7e31af1a4fa908f2a60362cfb34377d24debb97398
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022https://github.com/github/codeql/pull/6112#discussion_r818684001
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/6112
python/ql/src/experimental/semmle/python/security/dataflow/XmlInjection.qllhttps://github.com/github/codeql/pull/6112/files/8f9cd168067a4c4d56d12d20a9e926bb05142f19#diff-2ef5d7a776e7b06cfa199700611755f0bf8381cfb55bbdef0cbfa1d904d70f08
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022https://github.com/github/codeql/pull/6112#discussion_r818684690
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/6112
python/ql/src/experimental/semmle/python/frameworks/Xml.qllhttps://github.com/github/codeql/pull/6112/files/8f9cd168067a4c4d56d12d20a9e926bb05142f19#diff-9627c1fb9a1cc77fb93e6b7e31af1a4fa908f2a60362cfb34377d24debb97398
RasmusWLhttps://github.com/RasmusWL
Mar 3, 2022https://github.com/github/codeql/pull/6112#discussion_r818956384
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/6112
jorgectfhttps://github.com/jorgectf
March 4, 2022 01:02https://github.com/github/codeql/pull/6112#commits-pushed-683c2fa
https://github.com/jorgectf
Apply suggestions from code reviewhttps://github.com/github/codeql/pull/6112/commits/683c2fa8254ebd56ec04a8e0fadb7bdb129c29e7
683c2fahttps://github.com/github/codeql/pull/6112/commits/683c2fa8254ebd56ec04a8e0fadb7bdb129c29e7
https://github.com/RasmusWL
https://github.com/jorgectf
Python: Apply suggestions from code reviewhttps://github.com/github/codeql/pull/6112/commits/3cd165d5b757be7651f6f9ade20bca773b27e582
3cd165dhttps://github.com/github/codeql/pull/6112/commits/3cd165d5b757be7651f6f9ade20bca773b27e582
https://github.com/RasmusWL
Python: huge_tree tests were wronghttps://github.com/github/codeql/pull/6112/commits/d6cbfec43435204bb5e7350d26d9c636073b6652
d6cbfechttps://github.com/github/codeql/pull/6112/commits/d6cbfec43435204bb5e7350d26d9c636073b6652
@jorgectfhttps://github.com/jorgectf
https://github.com/RasmusWL
Python: Fix huge_tree modelinghttps://github.com/github/codeql/pull/6112/commits/f0131afc5449459f1562862c557ed537b0ab3a4c
f0131afhttps://github.com/github/codeql/pull/6112/commits/f0131afc5449459f1562862c557ed537b0ab3a4c
https://github.com/RasmusWL
Python: Add conditional assignment check for sax parserhttps://github.com/github/codeql/pull/6112/commits/1a9620a87a4aa9ae406774681431bb2e3274cc88
1a9620ahttps://github.com/github/codeql/pull/6112/commits/1a9620a87a4aa9ae406774681431bb2e3274cc88
https://github.com/RasmusWL
Python: Fix typo in set_default_parserhttps://github.com/github/codeql/pull/6112/commits/ef045a6789cd4c7cbe04fba0e15b40461ba9ea75
ef045a6https://github.com/github/codeql/pull/6112/commits/ef045a6789cd4c7cbe04fba0e15b40461ba9ea75
https://github.com/jorgectf
Merge pull requesthttps://github.com/github/codeql/pull/6112/commits/5552834e0f83d54bcbed595234c30feae5b159ab
#9https://github.com/jorgectf/codeql/pull/9
from RasmusWL/WIPhttps://github.com/github/codeql/pull/6112/commits/5552834e0f83d54bcbed595234c30feae5b159ab
5552834https://github.com/github/codeql/pull/6112/commits/5552834e0f83d54bcbed595234c30feae5b159ab
github#6112https://github.com/github/codeql/pull/6112
github#6112 (review)https://github.com/github/codeql/pull/6112#pullrequestreview-898959413
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
RasmusWLhttps://github.com/RasmusWL
March 4, 2022 16:22https://github.com/github/codeql/pull/6112#event-6186241110
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Mar 4, 2022https://github.com/github/codeql/pull/6112#issuecomment-1059312284
Please reload this pagehttps://github.com/github/codeql/pull/6112
RasmusWLhttps://github.com/RasmusWL
March 8, 2022 11:15https://github.com/github/codeql/pull/6112#commits-pushed-6b14c1d
https://github.com/RasmusWL
Merge branch 'main' into jorgectf/python/deserializationhttps://github.com/github/codeql/pull/6112/commits/6b14c1d6b93191063a2b4f97e02da6e62664ef4f
6b14c1dhttps://github.com/github/codeql/pull/6112/commits/6b14c1d6b93191063a2b4f97e02da6e62664ef4f
https://github.com/RasmusWL
Python: Resolve name conflict over XML modulehttps://github.com/github/codeql/pull/6112/commits/0e9da4aadb420f1b327403f991e7891bb962bfb6
0e9da4ahttps://github.com/github/codeql/pull/6112/commits/0e9da4aadb420f1b327403f991e7891bb962bfb6
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
force-pushedhttps://github.com/github/codeql/compare/44c9443b148fbd02947ac95f23472c2803cb08f3..0e9da4aadb420f1b327403f991e7891bb962bfb6
44c9443https://github.com/github/codeql/commit/44c9443b148fbd02947ac95f23472c2803cb08f3
0e9da4ahttps://github.com/github/codeql/commit/0e9da4aadb420f1b327403f991e7891bb962bfb6
Compare https://github.com/github/codeql/compare/44c9443b148fbd02947ac95f23472c2803cb08f3..0e9da4aadb420f1b327403f991e7891bb962bfb6
March 9, 2022 10:06https://github.com/github/codeql/pull/6112#event-6208741431
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
Mar 14, 2022 https://github.com/github/codeql/pull/6112#pullrequestreview-908612075
View reviewed changes https://github.com/github/codeql/pull/6112/files/0e9da4aadb420f1b327403f991e7891bb962bfb6
https://github.com/RasmusWL
RasmusWLhttps://github.com/RasmusWL
2f4a22chttps://github.com/github/codeql/commit/2f4a22c86cbfa9dadb1ad9c6e8b6e28e4fdb289b
Mar 14, 2022https://github.com/github/codeql/pull/6112#event-6234489262
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
Mar 14, 2022https://github.com/github/codeql/pull/6112#issuecomment-1066684624
@RasmusWLhttps://github.com/RasmusWL
Please reload this pagehttps://github.com/github/codeql/pull/6112
https://github.com/jorgectf
jorgectfhttps://github.com/jorgectf
March 14, 2022 11:41https://github.com/github/codeql/pull/6112#event-6234756673
https://github.co/hiddenchars
https://github.com/github/codeql/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F6112
https://github.com/RasmusWL
RasmusWL https://github.com/RasmusWL
https://github.com/github/codeql/pull/6112/files/0e9da4aadb420f1b327403f991e7891bb962bfb6
https://github.com/m-y-mo
m-y-mo https://github.com/m-y-mo
https://github.com/github/codeql/pull/6112/files/21da603d8188a6cd751e4a17357d572520db4c05
https://github.com/RasmusWL
RasmusWL https://github.com/RasmusWL
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
Please reload this pagehttps://github.com/github/codeql/pull/6112
https://github.com/jorgectf
https://github.com/RasmusWL
https://github.com/m-y-mo
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.