Python: auto model

Just the missing sinks suite.
2026-05-19 05:37:10 +02:00 · 2023-10-16 14:28:47 +00:00
parent e558ea796d
commit 85eb3fa460
27 changed files with 225 additions and 0 deletions
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-aiohttp_xmlrpc.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-aiohttp_xmlrpc.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - aiohttp_xmlrpc
+    - Member[client].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-bleach.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-bleach.model.yml
@@ -10,6 +10,9 @@ extensions:
  - - io.StringIO~Subclass
    - bleach
    - Member[_vendor].Member[html5lib].Member[_inputstream].Member[StringIO]
+  - - lxml.etree~Alias
+    - bleach
+    - Member[_vendor].Member[html5lib].Member[treewalkers].Member[etree_lxml].Member[etree]
  - - xml.etree.ElementTree~Subclass
    - bleach
    - Member[_vendor].Member[html5lib].Member[_utils].Member[default_etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-boto.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-boto.model.yml
@@ -40,3 +40,6 @@ extensions:
  - - io.StringIO~Subclass
    - boto
    - Member[vendored].Member[six].Member[StringIO]
+  - - lxml.etree~Alias
+    - boto
+    - Member[mturk].Member[question].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-defusedxml.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-defusedxml.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - defusedxml
+    - Member[lxml].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-docx.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-docx.model.yml
@@ -13,3 +13,12 @@ extensions:
  - - io.StringIO~Subclass
    - docx
    - Member[image].Member[jpeg].Member[BytesIO]
+  - - lxml.etree~Alias
+    - docx
+    - Member[opc].Member[oxml].Member[etree]
+  - - lxml.etree~Alias
+    - docx
+    - Member[oxml].Member[etree]
+  - - lxml.etree~Alias
+    - docx
+    - Member[oxml].Member[xmlchemy].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-docxtpl.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-docxtpl.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - docxtpl
+    - Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-feedgen.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-feedgen.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - feedgen
+    - Member[feed].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-flask_apscheduler.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-flask_apscheduler.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - flask.Response~Subclass
+    - flask_apscheduler
+    - Member[api].Member[Response]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-geocoder.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-geocoder.model.yml
@@ -0,0 +1,21 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - io.StringIO~Subclass
+    - geocoder
+    - Member[base].Member[StringIO]
+  - - io.StringIO~Subclass
+    - geocoder
+    - Member[bing_batch].Member[csv_io]
+  - - io.StringIO~Subclass
+    - geocoder
+    - Member[bing_batch_forward].Member[csv_io]
+  - - io.StringIO~Subclass
+    - geocoder
+    - Member[bing_batch_reverse].Member[csv_io]
+  - - io.StringIO~Subclass
+    - geocoder
+    - Member[uscensus_batch].Member[csv_io]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-gpxpy.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-gpxpy.model.yml
@@ -4,6 +4,9 @@ extensions:
    extensible: typeModel
    pack: codeql/python-all
  data:
+  - - lxml.etree~Alias
+    - gpxpy
+    - Member[parser].Member[mod_etree]
  - - xml.etree.ElementTree~Subclass
    - gpxpy
    - Member[parser].Member[mod_etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-gvm.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-gvm.model.yml
@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - gvm
+    - Member[connections].Member[etree]
+  - - lxml.etree~Alias
+    - gvm
+    - Member[transforms].Member[etree]
+  - - lxml.etree~Alias
+    - gvm
+    - Member[utils].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-html5lib.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-html5lib.model.yml
@@ -10,6 +10,9 @@ extensions:
  - - io.StringIO~Subclass
    - html5lib
    - Member[_inputstream].Member[StringIO]
+  - - lxml.etree~Alias
+    - html5lib
+    - Member[treewalkers].Member[etree_lxml].Member[etree]
  - - xml.etree.ElementTree~Subclass
    - html5lib
    - Member[_utils].Member[default_etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-label_studio_converter.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-label_studio_converter.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - label_studio_converter
+    - Member[utils].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-label_studio_tools.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-label_studio_tools.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - label_studio_tools
+    - Member[core].Member[label_config].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-lxml.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-lxml.model.yml
@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - lxml
+    - Member[ElementInclude].Member[etree]
+  - - lxml.etree~Alias
+    - lxml
+    - Member[html].Member[html5parser].Member[etree]
+  - - lxml.etree~Alias
+    - lxml
+    - Member[sax].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-mffpy.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-mffpy.model.yml
@@ -7,3 +7,9 @@ extensions:
  - - io.StringIO~Subclass
    - mffpy
    - Member[bin_writer].Member[BytesIO]
+  - - lxml.etree~Alias
+    - mffpy
+    - Member[xml_files].Member[ET]
+  - - lxml.etree~Alias
+    - mffpy
+    - Member[xml_files].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pandas.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pandas.model.yml
@@ -46,3 +46,6 @@ extensions:
  - - io.StringIO~Subclass
    - pandas
    - Member[io].Member[stata].Member[BytesIO]
+  - - lxml.etree~Alias
+    - pandas
+    - Member[io].Member[xml].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pikepdf.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pikepdf.model.yml
@@ -10,3 +10,6 @@ extensions:
  - - io.StringIO~Subclass
    - pikepdf
    - Member[models].Member[metadata].Member[BytesIO]
+  - - lxml.etree~Alias
+    - pikepdf
+    - Member[models].Member[metadata].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pip.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pip.model.yml
@@ -7,6 +7,9 @@ extensions:
  - - http.client.HTTPConnection~Subclass
    - pip
    - Member[_vendor].Member[distlib].Member[util].Member[HTTPSConnection]
+  - - http.client.HTTPResponse~Subclass
+    - pip
+    - Member[_vendor].Member[cachecontrol].Member[filewrapper].Member[HTTPResponse]
  - - io.StringIO~Subclass
    - pip
    - Member[_internal].Member[utils].Member[misc].Member[StreamWrapper]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pptx.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pptx.model.yml
@@ -19,3 +19,12 @@ extensions:
  - - io.StringIO~Subclass
    - pptx
    - Member[shapes].Member[shapetree].Member[BytesIO]
+  - - lxml.etree~Alias
+    - pptx
+    - Member[opc].Member[oxml].Member[etree]
+  - - lxml.etree~Alias
+    - pptx
+    - Member[oxml].Member[etree]
+  - - lxml.etree~Alias
+    - pptx
+    - Member[oxml].Member[xmlchemy].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-psutil.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-psutil.model.yml
@@ -7,3 +7,6 @@ extensions:
  - - xml.etree.ElementTree~Subclass
    - psutil
    - Member[_psbsd].Member[ET]
+  - - xml.etree.ElementTree~Subclass
+    - psutil
+    - Member[_psbsd].Member[ElementTree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pyquery.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pyquery.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - pyquery
+    - Member[pyquery].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-qrcode.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-qrcode.model.yml
@@ -4,6 +4,15 @@ extensions:
    extensible: typeModel
    pack: codeql/python-all
  data:
+  - - lxml.etree~Alias
+    - qrcode
+    - Member[compat].Member[etree].Member[ET]
+  - - lxml.etree~Alias
+    - qrcode
+    - Member[image].Member[styles].Member[moduledrawers].Member[svg].Member[ET]
+  - - lxml.etree~Alias
+    - qrcode
+    - Member[image].Member[svg].Member[ET]
  - - xml.etree.ElementTree~Subclass
    - qrcode
    - Member[compat].Member[etree].Member[ET]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-rdflib.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-rdflib.model.yml
@@ -4,6 +4,9 @@ extensions:
    extensible: typeModel
    pack: codeql/python-all
  data:
+  - - lxml.etree~Alias
+    - rdflib
+    - Member[compat].Member[etree]
  - - xml.etree.ElementTree~Subclass
    - rdflib
    - Member[compat].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-rest_framework_simplejwt.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-rest_framework_simplejwt.model.yml
@@ -25,6 +25,9 @@ extensions:
  - - Django.Views.View~Subclass
    - rest_framework_simplejwt
    - Member[views].Member[TokenViewBase]
+  - - Django.db.models.Model~Subclass
+    - rest_framework_simplejwt
+    - Member[authentication].Member[AbstractBaseUser]
  - - Django.db.models.Model~Subclass
    - rest_framework_simplejwt
    - Member[serializers].Member[BlacklistedToken]
@@ -34,6 +37,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - rest_framework_simplejwt
    - Member[token_blacklist].Member[models].Member[OutstandingToken]
+  - - Django.db.models.Model~Subclass
+    - rest_framework_simplejwt
+    - Member[tokens].Member[AbstractBaseUser]
  - - Django.db.models.Model~Subclass
    - rest_framework_simplejwt
    - Member[tokens].Member[BlacklistedToken]
@@ -61,6 +67,12 @@ extensions:
  - - rest_framework.exceptions.APIException~Subclass
    - rest_framework_simplejwt
    - Member[views].Member[InvalidToken]
+  - - rest_framework.request.Request~Subclass
+    - rest_framework_simplejwt
+    - Member[authentication].Member[Request]
+  - - rest_framework.request.Request~Subclass
+    - rest_framework_simplejwt
+    - Member[views].Member[Request]
  - - rest_framework.response.Response~Subclass
    - rest_framework_simplejwt
    - Member[views].Member[Response]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-svglib.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-svglib.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - svglib
+    - Member[svglib].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-xml2rfc.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-xml2rfc.model.yml
@@ -0,0 +1,21 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - lxml.etree~Alias
+    - xml2rfc
+    - Member[writers].Member[base].Member[etree]
+  - - lxml.etree~Alias
+    - xml2rfc
+    - Member[writers].Member[expand].Member[etree]
+  - - lxml.etree~Alias
+    - xml2rfc
+    - Member[writers].Member[preptool].Member[etree]
+  - - lxml.etree~Alias
+    - xml2rfc
+    - Member[writers].Member[text].Member[etree]
+  - - lxml.etree~Alias
+    - xml2rfc
+    - Member[writers].Member[unprep].Member[etree]