forked from github/codeql
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathpython-security-and-quality.qls.expected
More file actions
174 lines (174 loc) · 9.25 KB
/
python-security-and-quality.qls.expected
File metadata and controls
174 lines (174 loc) · 9.25 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
ql/python/ql/src/Classes/CallsToInitDel/MissingCallToDel.ql
ql/python/ql/src/Classes/CallsToInitDel/MissingCallToInit.ql
ql/python/ql/src/Classes/CallsToInitDel/SuperclassDelCalledMultipleTimes.ql
ql/python/ql/src/Classes/CallsToInitDel/SuperclassInitCalledMultipleTimes.ql
ql/python/ql/src/Classes/Comparisons/EqualsOrHash.ql
ql/python/ql/src/Classes/Comparisons/EqualsOrNotEquals.ql
ql/python/ql/src/Classes/Comparisons/IncompleteOrdering.ql
ql/python/ql/src/Classes/ConflictingAttributesInBaseClasses.ql
ql/python/ql/src/Classes/DefineEqualsWhenAddingAttributes.ql
ql/python/ql/src/Classes/InconsistentMRO.ql
ql/python/ql/src/Classes/InitCallsSubclass/InitCallsSubclassMethod.ql
ql/python/ql/src/Classes/MutatingDescriptor.ql
ql/python/ql/src/Classes/OverwritingAttributeInSuperClass.ql
ql/python/ql/src/Classes/PropertyInOldStyleClass.ql
ql/python/ql/src/Classes/SlotsInOldStyleClass.ql
ql/python/ql/src/Classes/SubclassShadowing/SubclassShadowing.ql
ql/python/ql/src/Classes/SuperInOldStyleClass.ql
ql/python/ql/src/Classes/WrongNameForArgumentInClassInstantiation.ql
ql/python/ql/src/Classes/WrongNumberArgumentsInClassInstantiation.ql
ql/python/ql/src/Diagnostics/ExtractedFiles.ql
ql/python/ql/src/Diagnostics/ExtractionWarnings.ql
ql/python/ql/src/Exceptions/CatchingBaseException.ql
ql/python/ql/src/Exceptions/EmptyExcept.ql
ql/python/ql/src/Exceptions/IllegalExceptionHandlerType.ql
ql/python/ql/src/Exceptions/IllegalRaise.ql
ql/python/ql/src/Exceptions/IncorrectExceptOrder.ql
ql/python/ql/src/Exceptions/NotImplementedIsNotAnException.ql
ql/python/ql/src/Exceptions/RaisingTuple.ql
ql/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
ql/python/ql/src/Expressions/CallToSuperWrongClass.ql
ql/python/ql/src/Expressions/CompareConstants.ql
ql/python/ql/src/Expressions/CompareIdenticalValues.ql
ql/python/ql/src/Expressions/CompareIdenticalValuesMissingSelf.ql
ql/python/ql/src/Expressions/Comparisons/UselessComparisonTest.ql
ql/python/ql/src/Expressions/ContainsNonContainer.ql
ql/python/ql/src/Expressions/DuplicateKeyInDictionaryLiteral.ql
ql/python/ql/src/Expressions/EqualsNone.ql
ql/python/ql/src/Expressions/ExpectedMappingForFormatString.ql
ql/python/ql/src/Expressions/ExplicitCallToDel.ql
ql/python/ql/src/Expressions/Formatting/MixedExplicitImplicitIn3101Format.ql
ql/python/ql/src/Expressions/Formatting/UnusedArgumentIn3101Format.ql
ql/python/ql/src/Expressions/Formatting/UnusedNamedArgumentIn3101Format.ql
ql/python/ql/src/Expressions/Formatting/WrongNameInArgumentsFor3101Format.ql
ql/python/ql/src/Expressions/Formatting/WrongNumberArgumentsFor3101Format.ql
ql/python/ql/src/Expressions/HashedButNoHash.ql
ql/python/ql/src/Expressions/IncorrectComparisonUsingIs.ql
ql/python/ql/src/Expressions/NonCallableCalled.ql
ql/python/ql/src/Expressions/Regex/BackspaceEscape.ql
ql/python/ql/src/Expressions/Regex/DuplicateCharacterInSet.ql
ql/python/ql/src/Expressions/Regex/MissingPartSpecialGroup.ql
ql/python/ql/src/Expressions/Regex/UnmatchableCaret.ql
ql/python/ql/src/Expressions/Regex/UnmatchableDollar.ql
ql/python/ql/src/Expressions/TruncatedDivision.ql
ql/python/ql/src/Expressions/UnintentionalImplicitStringConcatenation.ql
ql/python/ql/src/Expressions/UnnecessaryLambda.ql
ql/python/ql/src/Expressions/UnsupportedFormatCharacter.ql
ql/python/ql/src/Expressions/UseofApply.ql
ql/python/ql/src/Expressions/UseofInput.ql
ql/python/ql/src/Expressions/WrongNameForArgumentInCall.ql
ql/python/ql/src/Expressions/WrongNumberArgumentsForFormat.ql
ql/python/ql/src/Expressions/WrongNumberArgumentsInCall.ql
ql/python/ql/src/Functions/ConsistentReturns.ql
ql/python/ql/src/Functions/DeprecatedSliceMethod.ql
ql/python/ql/src/Functions/ExplicitReturnInInit.ql
ql/python/ql/src/Functions/IncorrectRaiseInSpecialMethod.ql
ql/python/ql/src/Functions/IncorrectlyOverriddenMethod.ql
ql/python/ql/src/Functions/IncorrectlySpecifiedOverriddenMethod.ql
ql/python/ql/src/Functions/InitIsGenerator.ql
ql/python/ql/src/Functions/IterReturnsNonIterator.ql
ql/python/ql/src/Functions/IterReturnsNonSelf.ql
ql/python/ql/src/Functions/ModificationOfParameterWithDefault.ql
ql/python/ql/src/Functions/NonCls.ql
ql/python/ql/src/Functions/NonSelf.ql
ql/python/ql/src/Functions/OverlyComplexDelMethod.ql
ql/python/ql/src/Functions/ReturnConsistentTupleSizes.ql
ql/python/ql/src/Functions/SignatureOverriddenMethod.ql
ql/python/ql/src/Functions/SignatureSpecialMethods.ql
ql/python/ql/src/Functions/UseImplicitNoneReturnValue.ql
ql/python/ql/src/Imports/CyclicImport.ql
ql/python/ql/src/Imports/DeprecatedModule.ql
ql/python/ql/src/Imports/EncodingError.ql
ql/python/ql/src/Imports/FromImportOfMutableAttribute.ql
ql/python/ql/src/Imports/ImportandImportFrom.ql
ql/python/ql/src/Imports/ModuleImportsItself.ql
ql/python/ql/src/Imports/ModuleLevelCyclicImport.ql
ql/python/ql/src/Imports/MultipleImports.ql
ql/python/ql/src/Imports/SyntaxError.ql
ql/python/ql/src/Imports/UnintentionalImport.ql
ql/python/ql/src/Imports/UnusedImport.ql
ql/python/ql/src/Lexical/CommentedOutCode.ql
ql/python/ql/src/Lexical/OldOctalLiteral.ql
ql/python/ql/src/Numerics/Pythagorean.ql
ql/python/ql/src/Resources/FileNotAlwaysClosed.ql
ql/python/ql/src/Security/CVE-2018-1281/BindToAllInterfaces.ql
ql/python/ql/src/Security/CWE-020/CookieInjection.ql
ql/python/ql/src/Security/CWE-020/IncompleteHostnameRegExp.ql
ql/python/ql/src/Security/CWE-020/IncompleteUrlSubstringSanitization.ql
ql/python/ql/src/Security/CWE-020/OverlyLargeRange.ql
ql/python/ql/src/Security/CWE-022/PathInjection.ql
ql/python/ql/src/Security/CWE-022/TarSlip.ql
ql/python/ql/src/Security/CWE-074/TemplateInjection.ql
ql/python/ql/src/Security/CWE-078/CommandInjection.ql
ql/python/ql/src/Security/CWE-078/UnsafeShellCommandConstruction.ql
ql/python/ql/src/Security/CWE-079/Jinja2WithoutEscaping.ql
ql/python/ql/src/Security/CWE-079/ReflectedXss.ql
ql/python/ql/src/Security/CWE-089/SqlInjection.ql
ql/python/ql/src/Security/CWE-090/LdapInjection.ql
ql/python/ql/src/Security/CWE-094/CodeInjection.ql
ql/python/ql/src/Security/CWE-1004/NonHttpOnlyCookie.ql
ql/python/ql/src/Security/CWE-113/HeaderInjection.ql
ql/python/ql/src/Security/CWE-116/BadTagFilter.ql
ql/python/ql/src/Security/CWE-117/LogInjection.ql
ql/python/ql/src/Security/CWE-1275/SameSiteNoneCookie.ql
ql/python/ql/src/Security/CWE-209/StackTraceExposure.ql
ql/python/ql/src/Security/CWE-215/FlaskDebug.ql
ql/python/ql/src/Security/CWE-285/PamAuthorization.ql
ql/python/ql/src/Security/CWE-295/MissingHostKeyValidation.ql
ql/python/ql/src/Security/CWE-295/RequestWithoutValidation.ql
ql/python/ql/src/Security/CWE-312/CleartextLogging.ql
ql/python/ql/src/Security/CWE-312/CleartextStorage.ql
ql/python/ql/src/Security/CWE-326/WeakCryptoKey.ql
ql/python/ql/src/Security/CWE-327/BrokenCryptoAlgorithm.ql
ql/python/ql/src/Security/CWE-327/InsecureDefaultProtocol.ql
ql/python/ql/src/Security/CWE-327/InsecureProtocol.ql
ql/python/ql/src/Security/CWE-327/WeakSensitiveDataHashing.ql
ql/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
ql/python/ql/src/Security/CWE-377/InsecureTemporaryFile.ql
ql/python/ql/src/Security/CWE-502/UnsafeDeserialization.ql
ql/python/ql/src/Security/CWE-601/UrlRedirect.ql
ql/python/ql/src/Security/CWE-611/Xxe.ql
ql/python/ql/src/Security/CWE-614/InsecureCookie.ql
ql/python/ql/src/Security/CWE-643/XpathInjection.ql
ql/python/ql/src/Security/CWE-730/PolynomialReDoS.ql
ql/python/ql/src/Security/CWE-730/ReDoS.ql
ql/python/ql/src/Security/CWE-730/RegexInjection.ql
ql/python/ql/src/Security/CWE-732/WeakFilePermissions.ql
ql/python/ql/src/Security/CWE-776/XmlBomb.ql
ql/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql
ql/python/ql/src/Security/CWE-918/PartialServerSideRequestForgery.ql
ql/python/ql/src/Security/CWE-943/NoSqlInjection.ql
ql/python/ql/src/Statements/AssertOnTuple.ql
ql/python/ql/src/Statements/BreakOrReturnInFinally.ql
ql/python/ql/src/Statements/ConstantInConditional.ql
ql/python/ql/src/Statements/IterableStringOrSequence.ql
ql/python/ql/src/Statements/MismatchInMultipleAssignment.ql
ql/python/ql/src/Statements/ModificationOfLocals.ql
ql/python/ql/src/Statements/NestedLoopsSameVariable.ql
ql/python/ql/src/Statements/NestedLoopsSameVariableWithReuse.ql
ql/python/ql/src/Statements/NonIteratorInForLoop.ql
ql/python/ql/src/Statements/RedundantAssignment.ql
ql/python/ql/src/Statements/ReturnOrYieldOutsideFunction.ql
ql/python/ql/src/Statements/ShouldUseWithStatement.ql
ql/python/ql/src/Statements/SideEffectInAssert.ql
ql/python/ql/src/Statements/StatementNoEffect.ql
ql/python/ql/src/Statements/TopLevelPrint.ql
ql/python/ql/src/Statements/UnnecessaryDelete.ql
ql/python/ql/src/Statements/UnnecessaryElseClause.ql
ql/python/ql/src/Statements/UnnecessaryPass.ql
ql/python/ql/src/Statements/UnreachableCode.ql
ql/python/ql/src/Statements/UnusedExceptionObject.ql
ql/python/ql/src/Statements/UseOfExit.ql
ql/python/ql/src/Summary/LinesOfCode.ql
ql/python/ql/src/Summary/LinesOfUserCode.ql
ql/python/ql/src/Testing/ImpreciseAssert.ql
ql/python/ql/src/Variables/GlobalAtModuleLevel.ql
ql/python/ql/src/Variables/LeakingListComprehension.ql
ql/python/ql/src/Variables/LoopVariableCapture/LoopVariableCapture.ql
ql/python/ql/src/Variables/MultiplyDefined.ql
ql/python/ql/src/Variables/SuspiciousUnusedLoopIterationVariable.ql
ql/python/ql/src/Variables/UndefinedExport.ql
ql/python/ql/src/Variables/UndefinedPlaceHolder.ql
ql/python/ql/src/Variables/UninitializedLocal.ql
ql/python/ql/src/Variables/UnusedLocalVariable.ql
ql/python/ql/src/Variables/UnusedModuleVariable.ql