Release preparation for version 2.14.4

This commit is contained in:
github-actions[bot]
2023-09-05 16:56:14 +00:00
parent a2659eecfb
commit abf2b12b1c
142 changed files with 392 additions and 177 deletions

View File

@@ -1,3 +1,10 @@
## 0.10.4
### Minor Analysis Improvements
* Regular expressions containing multiple parse mode flags are now interpretted correctly. For example `"(?is)abc.*"` with both the `i` and `s` flags.
* Added `shlex.quote` as a sanitizer for the `py/shell-command-constructed-from-input` query.
## 0.10.3
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added `shlex.quote` as a sanitizer for the `py/shell-command-constructed-from-input` query.

View File

@@ -1,4 +1,6 @@
---
category: minorAnalysis
---
## 0.10.4
### Minor Analysis Improvements
* Regular expressions containing multiple parse mode flags are now interpretted correctly. For example `"(?is)abc.*"` with both the `i` and `s` flags.
* Added `shlex.quote` as a sanitizer for the `py/shell-command-constructed-from-input` query.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.10.3
lastReleaseVersion: 0.10.4

View File

@@ -1,5 +1,5 @@
name: codeql/python-all
version: 0.10.4-dev
version: 0.10.4
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

View File

@@ -1,3 +1,10 @@
## 0.8.4
### Minor Analysis Improvements
* Improved _Reflected server-side cross-site scripting_ (`py/reflective-xss`) query to not alert on data passed to `flask.jsonify`. Since these HTTP responses are returned with mime-type `application/json`, they do not pose a security risk for XSS.
* Updated path explanations for `@kind path-problem` queries to always include left hand side of assignments, making paths easier to understand.
## 0.8.3
No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Updated path explanations for `@kind path-problem` queries to always include left hand side of assignments, making paths easier to understand.

View File

@@ -1,4 +1,6 @@
---
category: minorAnalysis
---
## 0.8.4
### Minor Analysis Improvements
* Improved _Reflected server-side cross-site scripting_ (`py/reflective-xss`) query to not alert on data passed to `flask.jsonify`. Since these HTTP responses are returned with mime-type `application/json`, they do not pose a security risk for XSS.
* Updated path explanations for `@kind path-problem` queries to always include left hand side of assignments, making paths easier to understand.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries
version: 0.8.4-dev
version: 0.8.4
groups:
- python
- queries