hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Release preparation for version 2.20.1

Browse Source
This commit is contained in:
github-actions[bot]
2025-01-07 17:20:13 +00:00
parent de2460e8b1
commit fbf9f2fff8
168 changed files with 447 additions and 197 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
python/ql/lib/change-notes/2024-12-18-fastapi-request-modeling.md
View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.

11
python/ql/lib/change-notes/2024-11-26-parameter-annotation-api-graph-support.md → python/ql/lib/change-notes/released/3.1.0.md
View File

@@ -1,5 +1,10 @@
---
category: feature
---
## 3.1.0
### New Features
- Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.
### Minor Analysis Improvements
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.