hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add changenote

Browse Source
This commit is contained in:
Joe Farebrother
2025-11-26 11:21:05 +00:00
parent eb7fe71557
commit 6207137ef0
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/lib/change-notes/2025-11-26-socketio.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* Remote flow sources for the `python-socketio` package have been modeled.

5
python/ql/lib/semmle/python/frameworks/Socketio.qll
View File

@@ -1,10 +1,9 @@
/** /**
* Provides definitions and modelling for the `python-socketio` PyPI package. * Provides definitions and modeling for the `python-socketio` PyPI package.
* See https://python-socketio.readthedocs.io/en/stable/. * See https://python-socketio.readthedocs.io/en/stable/.
*/ */
private import python private import python
private import semmle.python.dataflow.new.DataFlow
private import semmle.python.dataflow.new.TaintTracking private import semmle.python.dataflow.new.TaintTracking
private import semmle.python.dataflow.new.RemoteFlowSources private import semmle.python.dataflow.new.RemoteFlowSources
private import semmle.python.Concepts private import semmle.python.Concepts
@@ -79,7 +78,7 @@ module SocketIO {
} }
} }
/** Provides modelling for socketio server Namespace/AsyncNamespace classes. */ /** Provides modeling for socketio server Namespace/AsyncNamespace classes. */
module Namespace { module Namespace {
/** Gets a reference to the `socketio.Namespace` or `socketio.AsyncNamespace` classes or any subclass. */ /** Gets a reference to the `socketio.Namespace` or `socketio.AsyncNamespace` classes or any subclass. */
API::Node subclassRef() { API::Node subclassRef() {