hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #19797 from d10c/d10c/python/diff-informed-2

Browse Source 
Python: mass enable diff-informed data flow `none()` location overrides
This commit is contained in:
Nora Dimitrijević
2025-06-19 10:55:07 +02:00
committed by GitHub
parent 687e8d21a1 b79ce6d30b
commit 438b92b995
4 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/experimental/Security/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
View File

@@ -147,6 +147,8 @@ private module AzureBlobClientConfig implements DataFlow::StateConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
module AzureBlobClientFlow = DataFlow::GlobalWithState<AzureBlobClientConfig>;

2
python/ql/src/experimental/Security/CWE-346/CorsBypass.ql
View File

@@ -81,6 +81,8 @@ module CorsBypassConfig implements DataFlow::ConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
module CorsFlow = TaintTracking::Global<CorsBypassConfig>;

2
python/ql/src/experimental/Security/UnsafeUnpackQuery.qll
View File

@@ -210,6 +210,8 @@ module UnsafeUnpackConfig implements DataFlow::ConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
/** Global taint-tracking for detecting "UnsafeUnpacking" vulnerabilities. */

2
python/ql/src/experimental/semmle/python/security/LdapInsecureAuth.qll
View File

@@ -103,6 +103,8 @@ private module LdapInsecureAuthConfig implements DataFlow::ConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
/** Global taint-tracking for detecting "LDAP insecure authentications" vulnerabilities. */