Merge branch 'main' into flask-clean-models

python/ql/src/Security/CWE-327/BrokenCryptoAlgorithm.qhelp

@@ -36,7 +36,7 @@
                example uses AES, which is a stronger modern algorithm.
           </p>
 
-          <sample src="examples/weak_crypto_algorithm.py" />
+          <sample src="examples/broken_crypto.py" />
 
           <p>
                WARNING: Although the second example above is more robust,

python/ql/src/semmle/python/dataflow/new/TypeTracker.qll

@@ -180,7 +180,7 @@ private newtype TTypeTracker = MkTypeTracker(Boolean hasCall, OptionalAttributeN
  * It is recommended that all uses of this type are written in the following form,
  * for tracking some type `myType`:
  * ```
- * DataFlow::Node myType(DataFlow::TypeTracker t) {
+ * DataFlow::LocalSourceNode myType(DataFlow::TypeTracker t) {
  *   t.start() and
  *   result = < source of myType >
  *   or
@@ -189,7 +189,7 @@ private newtype TTypeTracker = MkTypeTracker(Boolean hasCall, OptionalAttributeN
  *   )
  * }
  *
- * DataFlow::Node myType() { result = myType(DataFlow::TypeTracker::end()) }
+ * DataFlow::Node myType() { myType(DataFlow::TypeTracker::end()).flowsTo(result) }
  * ```
  *
  * Instead of `result = myType(t2).track(t2, t)`, you can also use the equivalent