mirror of
https://github.com/github/codeql.git
synced 2026-05-05 05:35:13 +02:00
Catch up with recent change notes
This commit is contained in:
@@ -0,0 +1,5 @@
|
||||
---
|
||||
category: majorAnalysis
|
||||
tags: [lgtm,codescanning]
|
||||
---
|
||||
* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
|
||||
5
python/ql/lib/change-notes/2021-11-16-os-stat.md
Normal file
5
python/ql/lib/change-notes/2021-11-16-os-stat.md
Normal file
@@ -0,0 +1,5 @@
|
||||
---
|
||||
category: majorAnalysis
|
||||
tags: [lgtm,codescanning]
|
||||
---
|
||||
* Added modeling of `os.stat`, `os.lstat`, `os.statvfs`, `os.fstat`, and `os.fstatvfs`, which are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
|
||||
5
python/ql/lib/change-notes/2021-11-16-posixpath.md
Normal file
5
python/ql/lib/change-notes/2021-11-16-posixpath.md
Normal file
@@ -0,0 +1,5 @@
|
||||
---
|
||||
category: majorAnalysis
|
||||
tags: [lgtm,codescanning]
|
||||
---
|
||||
* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
|
||||
Reference in New Issue
Block a user