Taus
4a448f445e
Merge pull request #15715 from am0o0/am0o0-python-codeExec
...
Python: New command execution sinks
2024-06-21 14:26:33 +02:00
Rasmus Lerchedahl Petersen
5cb37f5c4c
python: Document MaD format
...
- add a few tests reflecting the documentation
- make the mentioned sink-kinds have an effect on relevant queries
2024-06-19 17:00:15 +02:00
Paolo Tranquilli
b7a2ea8981
CI: accept other diagnostic format related test changes
2024-06-19 11:33:50 +02:00
am0o0
8a7fdfa6fe
fix conflict
2024-06-18 17:18:59 +02:00
Joe Farebrother
2db1fbc713
Merge branch 'main' into python-flask-session-interface
2024-05-22 21:48:01 +01:00
yoff
358c7410c8
Merge pull request #16490 from yoff/python/rich-type-column-MaD
...
Python: Rich `type` column in MaD
2024-05-21 11:55:41 +02:00
Joe Farebrother
7727e465f4
Model Flask SessionInterface request parameter
2024-05-20 09:46:54 +01:00
Rasmus Lerchedahl Petersen
a568873a8e
Python: update test expectations
2024-05-17 10:59:49 +02:00
Rasmus Lerchedahl Petersen
d4d6b48f98
python: add test for subclass instance method
2024-05-17 00:03:01 +02:00
Rasmus Lerchedahl Petersen
3d0c42f44d
python: rewrite text models to use rich paths
2024-05-17 00:03:01 +02:00
yoff
ea3cc51286
Merge pull request #16194 from yoff/python/test-constructor-MaD-path
...
Python: test the MaD path for constructor calls
2024-05-16 13:52:30 +02:00
yoff
5076b1a214
Merge pull request #16135 from sylwia-budzynska/gradio-model
...
Python: Add Gradio models
2024-05-16 09:00:50 +02:00
yoff
538d556465
Merge branch 'main' into python/test-constructor-MaD-path
2024-05-14 21:30:58 +02:00
yoff
04c0475251
Merge pull request #16483 from yoff/python/MaD-instance-follow-subclass
...
Python: The MaD token `Instance` now follows subclasses
2024-05-14 21:30:43 +02:00
Rasmus Lerchedahl Petersen
49ffa8bf07
Merge branch 'main' of https://github.com/github/codeql into python/test-constructor-MaD-path
2024-05-14 14:30:18 +02:00
Joe Farebrother
027e5e7291
Merge pull request #16300 from joefarebrother/python-pyramid
...
Python: Model the Pyramid framework
2024-05-14 13:24:19 +01:00
Sylwia Budzynska
34c447939e
Update test results
2024-05-14 14:23:36 +02:00
Sylwia Budzynska
f72afdc7cb
Merge branch 'main' into gradio-model
2024-05-14 12:41:00 +02:00
Rasmus Lerchedahl Petersen
52717f8500
python: The MaD token Instance now follows subclasses
2024-05-14 08:40:19 +02:00
Sylwia Budzynska
d6acea1d0c
Fix tests
2024-05-10 12:41:47 +02:00
Sylwia Budzynska
52ceb7fb89
Apply suggestions from code review
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2024-05-10 12:07:32 +02:00
Joe Farebrother
ab23d0ad23
Merge branch 'main' into python-promote-header-injection
2024-05-08 13:49:00 +01:00
amammad
0a765cc94a
add jsonpickle and pexpect libs in case of unsafe decoding and secondary command execution, add proper test cases
2024-05-06 14:36:10 +02:00
amammad
4df73f9975
continue to convert paramiko query to a more general query,
...
the proxy command is not a secondary command execution
so we can add proxy command to SystemCommandExecution::Range, update QLDocs,
add a proper Paramiko test case
fix a typo
2024-05-06 14:36:10 +02:00
amammad
6520e2fdfb
update Fabric models, add new sink to Fabric, add proper test cases
2024-05-06 14:36:10 +02:00
amammad
2708e57e4b
add pyTorch :) code execution sinks, add proper tests
2024-05-06 14:36:10 +02:00
amammad
cffdc5b452
add panas code execution sinks, add proper tests
2024-05-06 14:36:10 +02:00
Joe Farebrother
4f22b91e73
Add tests for cases not yet supported
2024-04-30 15:20:09 +01:00
Joe Farebrother
ba054bd428
Manually specify subclasses for redirect models
2024-04-30 14:33:46 +01:00
Joe Farebrother
7df8b1ba51
Don't rely on specific parameter names, add qldoc
2024-04-30 09:45:11 +01:00
Rasmus Lerchedahl Petersen
3716b8c6a0
Python: update test to reflect correct behaviour
...
also add comments
2024-04-26 14:21:15 +02:00
Rasmus Lerchedahl Petersen
9f7edf378e
Python: fix tests
...
The way to expose the `self` arguemnt
is to call an instance method on the class,
not on the instance...
2024-04-26 14:21:15 +02:00
Rasmus Lerchedahl Petersen
4f46ce1133
Python: add test for Argument[0, self, self:] for instance methods
2024-04-26 14:21:15 +02:00
Rasmus Lerchedahl Petersen
862942f3d8
python: extra test
...
suggested by @RasmusWL
2024-04-26 14:19:10 +02:00
Rasmus Lerchedahl Petersen
adc82b553b
Python: more realistic summaries
2024-04-26 14:19:10 +02:00
Rasmus Lerchedahl Petersen
c2252e12ac
python: sync files
2024-04-26 14:19:09 +02:00
Rasmus Lerchedahl Petersen
bab6ecf3bb
Python: test the MaD path for constructor calls
2024-04-26 14:19:09 +02:00
Joe Farebrother
2a0459838b
Add models for responses
2024-04-25 15:55:59 +01:00
Joe Farebrother
86d1e5b646
Add additional type tracking for request attributes
2024-04-25 13:58:36 +01:00
Joe Farebrother
8fb2faa89b
Add additional info to concept tests
2024-04-24 14:05:41 +01:00
Joe Farebrother
2b935e575a
Add concept tests + fix typo
2024-04-24 14:05:41 +01:00
Rasmus Wriedt Larsen
1bc085c8f7
Python: Fixup for callGraphConfig
2024-04-23 09:42:35 +02:00
Rasmus Wriedt Larsen
bb00d6919a
Python: Move dataflow TestUtil to importable location
2024-04-23 09:40:59 +02:00
Rasmus Wriedt Larsen
e0e405bb31
Python: replace dataflow-test location in files
2024-04-23 09:40:59 +02:00
Rasmus Wriedt Larsen
ce711f7d2f
Python: Move dataflow tests out of experimental
2024-04-23 09:40:44 +02:00
Joe Farebrother
f85ee38e04
Add instance taint steps for requests
2024-04-22 16:03:39 +01:00
Joe Farebrother
88e3227ed0
Add pyramid models
2024-04-22 13:27:18 +01:00
Taus
58eaddf627
Python: Update all .expected files
...
I'm beginning to realise why I didn't do the `toString` overriding way
back when. Thankfully, now that all of our tests are in the same place,
this is actually not a terrible ordeal.
2024-04-22 12:00:09 +00:00
Taus
1c68c987b0
Python: Change all remaining occurrences of StrConst
...
Done using
```
git grep StrConst | xargs sed -i 's/StrConst/StringLiteral/g'
```
2024-04-22 12:00:09 +00:00
Tom Hvitved
ceb5b4c56e
Python: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
