hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Model C-based loaders for PyYAML

Browse Source 
Not really that important. But easy to do while I was working on this library.
This commit is contained in:
Rasmus Wriedt Larsen
2021-03-18 11:55:01 +01:00
parent 54e6f51512
commit 42b2c3ed52
3 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/change-notes/2021-03-18-yaml-handle-C-based-loaders.md Normal file
View File

@@ -0,0 +1,2 @@
lgtm,codescanning
* Improved modeling of the `PyYAML` PyPI package, so we now correctly treat `CSafeLoader` and `CBaseLoader` as being safe loaders that can not lead to code execution.