Visitar URL original
Azure python sdk url summary upstream by bdrodes · Pull Request #20563 · github/codeql · GitHub
Skip to content

Azure python sdk url summary upstream #20563

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
yoff merged 15 commits into from
Feb 9, 2026
Merged

Azure python sdk url summary upstream #20563

Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
47fac88
Azure SDK models for SSRF analysis.
bdrodes Sep 26, 2025
d27d4fd
Updating comments.
bdrodes Sep 30, 2025
704e296
Adding azure sdk test cases and updated test expected file.
bdrodes Sep 30, 2025
341f553
Added change logs.
bdrodes Sep 30, 2025
5ca9ff2
Update python/ql/lib/semmle/python/frameworks/SSRFSink.qll
bdrodes Sep 30, 2025
fab96d9
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestF…
bdrodes Sep 30, 2025
d790c6d
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestF…
bdrodes Sep 30, 2025
acddb2c
Moved change log to correct location.
bdrodes Sep 30, 2025
a660eab
Adding docs.
bdrodes Sep 30, 2025
26b8a39
Adjusting acryonym for SSRF for casing standards.
bdrodes Sep 30, 2025
7ddfa80
Merge branch 'main' into azure_python_sdk_url_summary_upstream
bdrodes Feb 2, 2026
cd73dcf
Merge branch 'main' into azure_python_sdk_url_summary_upstream
bdrodes Feb 4, 2026
0a88425
Python: Altering SSRF MaD to use 'request-forgery' tag. Update to tes…
bdrodes Feb 4, 2026
ac1987f
Update python/ql/lib/change-notes/2025-09-30-azure_ssrf_models.md
bdrodes Feb 5, 2026
8459eec
Moving the SsrfSink concept into Concepts.qll, and renaming to HttpCl…
bdrodes Feb 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestF… 
…orgery/test_azure_client.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
  • Loading branch information
@bdrodes
bdrodes and Copilot authored Sep 30, 2025
commit fab96d9539752a5a2db9639369a7cbba508f4f80
1 change: 0 additions & 1 deletion python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_azure_client.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,6 @@ def azure_sdk_test(credential, output_path):
c = ContainerClient.from_container_url(container_url=url, credential=credential) # NOT OK -- user only controlled fragment
c = ContainerClient.from_container_url(container_url=full_url, credential=credential) # NOT OK -- user has full control


download_blob_from_url(
blob_url=url, # NOT OK -- user only controlled fragment
output=output_path,
Expand Down
Loading