Taus Brock-Nannestad
554bb76746
Python: Fix up (hopefully) the last file that needs autoformatting.
2020-04-01 14:16:35 +02:00
Taus
e31143c9f8
Merge pull request #2889 from RasmusWL/python-add-custom-sanitizer-example
...
Python: Add example for how to write your own sanitizer
2020-03-30 22:59:56 +02:00
Rasmus Wriedt Larsen
6127d8b8f4
Python: Fixup comment alignment
2020-03-30 18:32:31 +02:00
Rasmus Wriedt Larsen
fad03e77cc
Python: Move helper predicate outside of class
...
otherwise the helper predicate can (and sometimes will) be evaluated once _per_
instance of that class.
2020-03-30 18:31:16 +02:00
Rasmus Wriedt Larsen
663dc24753
Python: Apply suggestion from Taus
...
rewrote the qldoc to explain it as well.
2020-03-30 18:29:08 +02:00
Rasmus Wriedt Larsen
0b4bfed726
Merge pull request #3156 from tausbn/python-autoformat-all-ql-files
...
Python: Autoformat all `.ql` files.
2020-03-30 16:24:18 +02:00
Taus Brock-Nannestad
b990fac97b
Python: Fix test failures.
...
How could the tests fail because of autoformatting, you may ask?
The answer is deprecation warnings. These specify the location of the deprecated
entity, and due to autoformatting these moved around.
2020-03-30 13:55:38 +02:00
Taus Brock-Nannestad
6eb9c6f84d
Merge branch 'master' into python-autoformat-almost-everything
2020-03-30 12:24:01 +02:00
Taus Brock-Nannestad
87a9f51c78
Python: Autoformat all .ql files.
2020-03-30 11:59:10 +02:00
Rasmus Wriedt Larsen
8aadb8bd06
Python: Fix iterable-unpacking tests
2020-03-27 11:42:37 +01:00
Rasmus Wriedt Larsen
dc9dbf3682
Python: Autoformat
2020-03-25 11:56:18 +01:00
Rasmus Wriedt Larsen
12c6997e7b
Python: Reduce result set in custom taint sanitizer
2020-03-25 11:55:29 +01:00
semmle-qlci
a413a3254b
Merge pull request #3114 from RasmusWL/python-add-fp-for-non-callable
...
Approved by tausbn
2020-03-25 10:34:50 +00:00
Rasmus Wriedt Larsen
05ecfc83f7
Python: Add test-case with swapped decorator order
2020-03-24 14:18:46 +01:00
Rasmus Wriedt Larsen
3ed48aae4c
Python: remove leftover arg in test code
2020-03-24 11:49:08 +01:00
Rasmus Wriedt Larsen
5ec0716cb0
Python: Add points-to regression when using @classmethod decorators
...
Specifically a problem when using a second decorator
2020-03-24 11:39:08 +01:00
Rasmus Wriedt Larsen
b567205579
Python: Model fabric v1.x command injection sinks
2020-03-23 17:49:56 +01:00
Rasmus Wriedt Larsen
a57eadaeb6
Python: Model fabric/invoke command injection sinks
2020-03-23 17:33:41 +01:00
semmle-qlci
2c7af72f14
Merge pull request #2858 from RasmusWL/python-support-django2
...
Approved by tausbn
2020-03-23 09:35:46 +00:00
Taus Brock-Nannestad
165dcd37a1
Python: Autoformat library-tests.
2020-03-20 16:35:37 +01:00
Taus
ae1268f241
Merge branch 'master' into python-add-points-to-for-missing-builtin-return-types
2020-03-18 17:59:17 +01:00
Rasmus Wriedt Larsen
290e33a912
Merge pull request #2922 from tausbn/python-fix-multi-assign-points-to
...
Python: Fix bug in `multi_assignment_points_to`.
2020-03-18 17:50:37 +01:00
Rebecca Valentine
f351916418
Merge branch 'master' into testmerge
2020-03-17 12:32:45 -07:00
Taus
ca26feefbf
Merge pull request #2978 from BekaValentine/python-objectapi-to-valueapi-illegalexceptionhandlertype
...
Python: ObjectAPI to ValueAPI: IllegalExceptionHandlerType
2020-03-17 17:56:34 +01:00
Taus Brock-Nannestad
c724b17368
Python: Fix up regression comment.
2020-03-16 16:01:05 +01:00
Taus Brock-Nannestad
5579dfb976
Python: Fix comment based on review.
2020-03-16 12:49:46 +01:00
Taus Brock-Nannestad
81f6877727
Python: Fix up tests.
2020-03-16 12:48:41 +01:00
Taus Brock-Nannestad
5c90becc1c
Python: Use TUnknown instead of TUnknownInstance.
2020-03-12 19:21:11 +01:00
Taus Brock-Nannestad
115bbf619d
Merge branch 'master' into python-fix-multi-assign-points-to
2020-03-12 18:50:10 +01:00
Taus Brock-Nannestad
4b5a20d21b
Merge branch 'master' into python-add-points-to-for-missing-builtin-return-types
2020-03-12 11:31:29 +01:00
Rasmus Wriedt Larsen
6d72e77cdf
Python: Django: Handle Class-based views
2020-03-11 14:44:14 +01:00
Rasmus Wriedt Larsen
2da1503942
Merge branch 'master' into python-support-django2
2020-03-11 11:21:47 +01:00
Rasmus Wriedt Larsen
b1d1974a0f
Merge branch 'master' into python-modernise-statements
2020-03-10 14:53:44 +01:00
Taus
e3160f966f
Merge pull request #2932 from RasmusWL/python-re.compile-missing-points-to
...
Python: Add example of re.compile missing points-to
2020-03-10 11:55:23 +01:00
Rebecca Valentine
c9c469b201
Python: Modernizes queries
2020-03-09 12:52:33 -07:00
Rebecca Valentine
6d10c47cba
Python: Moves predicates over to suffixed form
2020-03-09 11:56:57 -07:00
Rebecca Valentine
a0cf2cbb13
Python: Moves old predicates to suffixed form
2020-03-03 16:53:56 -08:00
Taus Brock-Nannestad
48a47e1b54
Python: Fix broken test output.
2020-03-03 19:45:13 +01:00
Taus Brock-Nannestad
eecace788f
Python: Fix or disable CPs introduced by #2700 and #2875 .
2020-03-03 18:18:03 +01:00
Rasmus Wriedt Larsen
ee4190e0d9
Python: Add example if urlsplit(url).path: => missing points-to
...
I wanted to highlight that it's not the call to `urlsplit` that is a problem, so
that's why I inserted a `check` in-between.
2020-02-28 13:43:10 +01:00
Rasmus Wriedt Larsen
8dd19ca6cd
Python: Add example of re.compile missing points-to
2020-02-28 13:41:26 +01:00
Taus Brock-Nannestad
10bacfe8fd
Python: Use subscriptUnknown instead of instance check.
...
Also adds a test for decomposing the unknown value of `a`.
2020-02-28 13:38:54 +01:00
Taus Brock-Nannestad
5bbf93241b
Python: Add test for tuple unpacking with "complicated" value.
2020-02-27 17:34:32 +01:00
Taus
0da554c701
Merge pull request #2914 from RasmusWL/python-remove-optimize-true-directive
...
Python: Remove `--optimize: true` from options files
2020-02-27 13:16:59 +01:00
Taus
8bd3063d2b
Merge pull request #2875 from RasmusWL/python-taint-urlsplit
...
Python: Add taint for urlsplit
2020-02-27 13:13:47 +01:00
Taus Brock-Nannestad
5c3109a324
Python: Fix bug in multi_assignment_points_to.
...
This turned out to be a fairly simple but easy to make bug. When we want to
figure out the value pointed-to in a multi-assignment, we look at the left hand
side to see what value from the right hand side we should assign. Unfortunately,
we accidentally attempted to look up this information in the _left hand side_ of
the assignment, resulting in no points-to information at all. The only thing
needed to fix this was to properly link up the left and right hand sides: using
the left hand side to figure out what index to look at, and then looking up the
points-to information for the corresponding place in the right hand side.
2020-02-26 16:11:43 +01:00
Rasmus Wriedt Larsen
771dfecf6d
Python: Add sanitized edges for urlsplit test
2020-02-26 14:10:30 +01:00
Rasmus Wriedt Larsen
0b31cb1716
Python: Show that we have initial taint in urlsplit test
2020-02-26 14:09:02 +01:00
Rasmus Wriedt Larsen
4330d4e289
Python: Remove unused import in test
2020-02-26 10:26:30 +01:00
Rasmus Wriedt Larsen
b213db03fd
Python: Consolidate stdlib http client tests
...
Move the stdlib tests from test/{2,3}/library-tests/ into /test/library-tests/,
and deal with version by using sys.version_info (results should be the same for
both versions).
six tests were moved from /library-tests/web/client/stdlib => /library-tests/web/client/six
2020-02-26 10:26:30 +01:00
