mirror of
https://github.com/github/codeql.git
synced 2026-04-29 02:35:15 +02:00
Python: Replace type tracking with global data-flow
This takes care of most of the false negatives from the preceding commit. Additionally, we add models for some known wrappers of `socket.socket` from the `gevent` and `eventlet` packages.
This commit is contained in:
@@ -48,7 +48,7 @@ module KindValidation<KindValidationConfigSig Config> {
|
||||
// CPP-only currently
|
||||
"remote-sink",
|
||||
// Python-only currently, but may be shared in the future
|
||||
"prompt-injection"
|
||||
"bind-socket-all-interfaces", "prompt-injection"
|
||||
]
|
||||
or
|
||||
this.matches([
|
||||
|
||||
Reference in New Issue
Block a user