From 6207137ef0aaff035cdd419423e8abe1a8f38e99 Mon Sep 17 00:00:00 2001 From: Joe Farebrother Date: Wed, 26 Nov 2025 11:21:05 +0000 Subject: [PATCH] Add changenote --- python/ql/lib/change-notes/2025-11-26-socketio.md | 4 ++++ python/ql/lib/semmle/python/frameworks/Socketio.qll | 5 ++--- 2 files changed, 6 insertions(+), 3 deletions(-) create mode 100644 python/ql/lib/change-notes/2025-11-26-socketio.md diff --git a/python/ql/lib/change-notes/2025-11-26-socketio.md b/python/ql/lib/change-notes/2025-11-26-socketio.md new file mode 100644 index 00000000000..e58bec0bbc1 --- /dev/null +++ b/python/ql/lib/change-notes/2025-11-26-socketio.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* Remote flow sources for the `python-socketio` package have been modeled. \ No newline at end of file diff --git a/python/ql/lib/semmle/python/frameworks/Socketio.qll b/python/ql/lib/semmle/python/frameworks/Socketio.qll index 3df1901a1dd..f1c73400183 100644 --- a/python/ql/lib/semmle/python/frameworks/Socketio.qll +++ b/python/ql/lib/semmle/python/frameworks/Socketio.qll @@ -1,10 +1,9 @@ /** - * Provides definitions and modelling for the `python-socketio` PyPI package. + * Provides definitions and modeling for the `python-socketio` PyPI package. * See https://python-socketio.readthedocs.io/en/stable/. */ private import python -private import semmle.python.dataflow.new.DataFlow private import semmle.python.dataflow.new.TaintTracking private import semmle.python.dataflow.new.RemoteFlowSources private import semmle.python.Concepts @@ -79,7 +78,7 @@ module SocketIO { } } - /** Provides modelling for socketio server Namespace/AsyncNamespace classes. */ + /** Provides modeling for socketio server Namespace/AsyncNamespace classes. */ module Namespace { /** Gets a reference to the `socketio.Namespace` or `socketio.AsyncNamespace` classes or any subclass. */ API::Node subclassRef() {