GitHub / python-security/pyt / commits
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| f4ec9e12 | :mortar_board: Add mention of Pysa tutorial |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 6 years ago | |
| 093a077b | merge :arrow_right_hook: Merge pull request #204 from bchurchill/master |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 7 years ago | |
| b51dd7f3 | adding eval, exec sinks | Berkeley Churchill <b****y@b****m> | about 7 years ago | |
| 72bfb7d4 | merge :arrow_right_hook: Merge pull request #203 from bchurchill/master |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 7 years ago | |
| e9dc6839 | Update README.rst |
Berkeley Churchill <b****l@u****m>
Committed by: GitHub <n****y@g****m> |
about 7 years ago | |
| efc0cfb7 | merge :arrow_right_hook: Merge pull request #200 from wchresta/180_add_shell_inject... |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 98a7b6bd | merge :arrow_right_hook: Merge pull request #198 from wchresta/177_support_from_imp... |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 9d2a6070 | Add fully qualified shell injection sinks. | wchresta <3****a@u****m> | over 7 years ago | |
| a7bb0b27 | Implement suggestions from code-review. | wchresta <3****a@u****m> | over 7 years ago | |
| 61f04085 | Remove blank line at end of file. | wchresta <3****a@u****m> | over 7 years ago | |
| 36bd520c | Use import_alias_mapping for blackbox and built-in aliases, as well | wchresta <3****a@u****m> | over 7 years ago | |
| 022476a0 | Update README.rst |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 1ff3901b | [grammar] is -> are |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 21e6027e | Bold important text |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 57448a0c | :wave: Add `no longer maintained` section |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 40c1f248 | Resolve aliases for black box and built-in function calls. | wchresta <3****a@u****m> | over 7 years ago | |
| 3b344a33 | merge Merge pull request #190 from adrianbn/128_dont_ask_me_anymore |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 54df18e8 | merge Merge pull request #193 from bcaller/py37 |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
over 7 years ago | |
| 1332b7aa | Test running pyt in a python 3.7 env |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
over 7 years ago | |
| 986532af | 128: Stop asking for all chains | Adrian Bravo <a****n@g****m> | over 7 years ago | |
| c0ef6750 | 128: Allow the user to cancel interactive mode | Adrian Bravo <a****n@g****m> | over 7 years ago | |
| af23fb07 | merge Merge pull request #188 from python-security/FixE128 |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 1b61080c | :bug: Fix E128 |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 95e2ac3b | Added older `0.39` version details |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 52cac9d3 | Added most recent PR details |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 66410784 | Added links |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| aff6b6c1 | [spelling] constaint -> constraint | Kevin Hock <k****l@g****m> | almost 8 years ago | |
| 4b495ad5 | merge Merge pull request #186 from adrianbn/133_while_test_with_func |
bcaller <b****r@u****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 9cb0b567 | 133: Avoid mutating node.test.comparators | Adrian Bravo <a****n@g****m> | almost 8 years ago | |
| 6d25eae6 | 133: Finished tests | Adrian Bravo <a****n@g****m> | almost 8 years ago | |
| b52a8707 | 133: Fix style and complexity issues for Travis.ci | Adrian Bravo <a****n@g****m> | almost 8 years ago | |
| effd8724 | 133: Support for LHS functions and no comparison while tests | Adrian Bravo <a****n@g****m> | almost 8 years ago | |
| e704c211 | 133: Visit functions in while test | Adrian Bravo <a****n@g****m> | almost 8 years ago | |
| ce56a207 | Fix link for PRs Welcome Badge |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| e10f850b | Add link to AMF |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 974e8426 | [version] Bump 0.42 | bcaller <b****r@u****m> | almost 8 years ago | |
| 3b885ec7 | [version] Bump to 0.41 | bcaller <b****r@u****m> | almost 8 years ago | |
| 33dedd40 | merge Merge pull request #182 from bcaller/simplifydefinitions |
bcaller <b****r@u****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 79d39d8a | merge Merge pull request #181 from bcaller/appendaddextendinsert |
bcaller <b****r@u****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 23c186fb | Simplify trigger file for sink argument propagation |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| 7847d01a | list is tainted by calling list.append(TAINT) |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| 0932cc92 | merge Merge pull request #179 from bcaller/ifexp |
bcaller <b****r@u****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 2e4f8c9c | Better handling of IfExp (ternary) |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| 5d7a94b4 | [version] Bump to 0.40 | Kevin Hock <k****k@y****m> | almost 8 years ago | |
| f023eaaa | merge Merge pull request #173 from bcaller/recursion |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 093f506d | Add test for vulnerabilities in recursive functions |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| c223e13a | More logging |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| b2daf8b0 | Recursive function calls shouldn't raise RecursionError |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| c7b244dc | merge Merge pull request #172 from bcaller/formatter |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| bf492590 | Add basic python logging to pyt with -v -vv -vvv |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| 4f80f972 | Consistent spelling of sanitise |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| c07551db | Add --only-unsanitised flag to not print sanitised vulnerabilities |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| 2bc84138 | Add colourful formatter "screen" |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
almost 8 years ago | |
| f56e7612 | merge Merge pull request #171 from bcaller/chains |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
almost 8 years ago | |
| 2e91ce76 | Chained function calls separated into multiple assignments |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| 11567c42 | merge Merge pull request #169 from python-security/no_more_uimode |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 3fc8046f | [version] Bump to 0.39 | Kevin Hock <k****k@y****m> | about 8 years ago | |
| b14a2679 | Always define cfg_list | Kevin Hock <k****k@y****m> | about 8 years ago | |
| 12619b78 | Remove --trim option and UImode Enum | Kevin Hock <k****l@g****m> | about 8 years ago | |
| a2d76340 | merge Merge pull request #167 from bcaller/method-propagation |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| d2a81897 | Removed reference to UImode.NORMAL |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| d4d2e953 | merge Merge pull request #166 from bcaller/shorter-reassignments |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 88113437 | Taint propagates from methods of tainted objects |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| c4893e73 | Remove extraneous reassignments in output |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| c0e6acea | merge Merge pull request #165 from bcaller/determinism |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| d6ad59fe | Don't repeat get_modules call if we use a project root |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| fe058b04 | Deterministic file loading and vulnerability order |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| 7e7b9f14 | Update CHANGELOG.md |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| ca78b68b | merge Merge pull request #163 from bcaller/curry |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| b1da929c | merge Merge pull request #164 from bcaller/unpacking |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| b0c32c0d | Handle assignment unpacking `a, b, c = d` |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| 5b50922e | Iterate over args and kwargs with care |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| 70257a71 | Update README.rst |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 92fa3b71 | Update README.rst |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| e4e0805e | Update README.rst |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 7d35be38 | Update README.rst |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 4332e005 | Update README.rst |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 57225717 | Update README.rst |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 8e5e0a9f | Added `How To Use` section |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| b6129cf5 | Separated the important options from the rest |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 3126aae3 | Update README.rst |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 3d722eb5 | Added 0.38 Notes |
KevinHock <k****k@y****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| a58c7482 | [version] Bump to 0.38 | Kevin Hock <k****k@y****m> | about 8 years ago | |
| 0038b1e2 | Only write to blackbox mapping if in interactive mode | Kevin Hock <k****k@y****m> | about 8 years ago | |
| b80ce4e9 | merge Merge pull request #160 from polyzen/fix_mock_import |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| a3081c09 | mock is included in unittest since Python 3.3 | Daniel M. Capella <p****n@g****m> | about 8 years ago | |
| b1556a1d | Added more backticks |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| d626efc6 | Remove references to dependencies we no longer have |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 212e0598 | merge Merge pull request #158 from bcaller/await-transform |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| f2586395 | Don't crash on pathological case of f(g(a)(b)(c)) |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| de30591c | Transform all async ast nodes into sync nodes |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago | |
| 5b7d06b0 | Changed Unreleased to 0.37 |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| bc3200cc | [version] Bump to 0.37 | Kevin Hock <k****k@y****m> | about 8 years ago | |
| 76be3218 | Add __init_ files to pyt/analysis and pyt/core | Kevin Hock <k****k@y****m> | about 8 years ago | |
| 97f99a06 | [version] Bump to 0.36 | Kevin Hock <k****k@y****m> | about 8 years ago | |
| 794a42be | merge Merge pull request #155 from bcaller/yield |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| dec57bdb | [version] Bump to 0.35 | Kevin Hock <k****l@g****m> | about 8 years ago | |
| 66f486c5 | Add all CHANGELOG additions since version 0.34 |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| 992fc612 | merge Merge pull request #156 from bcaller/exit-code |
KevinHock <k****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 8 years ago | |
| d4cbde04 | Fix pyt console script |
bcaller <b****r@u****m>
Committed by: Ben Caller <b****r@s****m> |
about 8 years ago |