Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AIK-3613 Protect against code via eval()/exec() injection #195

Draft
wants to merge 22 commits into
base: main
Choose a base branch
from
Draft

AIK-3613 Protect against code via eval()/exec() injection #195

wants to merge 22 commits into from

Conversation

bitterpanda63
Copy link
Member

Wout Feys and others added 21 commits September 16, 2024 17:29
Create a token_is_possibly dangerous function with empty test file
98a24f8
Create detect_code_injection function with an empty test file
9dc19af
Create an __init__.py file for code_injection vulnerability
71fc9e3
Create a check_context_for_code_injection function with empty test file
164f3e2
Add code_injection vulnerability to errors file and run function
7d52adc
Add actual tests to token_is_possibly_dangerous
2009f16
Add in unit tests for indents and comments for detect_code_injection
7417531
Allow True and False and add unit test to check regression
dd52948
Add tests for mathematics, small payloads and userinput thats not in inj
85fa694
Wrap eval() and exec() function in builtins file
c2902f8
exec function should use op builtins.exec, bugfix
020bc30
Add sink tests ffor code injection
ac4e8c1
Add some more maths unit tests for detect_code_injection
75a8174
Add /code_exec route to flask-mysql
1b99356
In run_vulnerability_scan, pass along entire argument to check func
7a53713
Add extra "is_injection" tests
c17312b
Add extra tests and also wrap compile function for code_injection
d95de47
Merge remote-tracking branch 'origin/main' into AIK-3613
9c72efe
@bitterpanda63
Merge branch 'main' into AIK-3613
953c5c7
Merge branch 'main' into AIK-3613
b053565
Fix broken psycopg unit test
80a4130
@willem-delbare willem-delbare changed the title AIK-3613 Protect against code injection AIK-3613 Protect against code via eval()/exec() injection Oct 3, 2024
@kapyteinaikido kapyteinaikido self-requested a review October 9, 2024 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kapyteinaikido kapyteinaikido Awaiting requested review from kapyteinaikido

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@bitterpanda63