Rasmus Wriedt Larsen
6e168ff7d8
Python: Only interested in StrConst
2023-08-14 11:46:21 +02:00
Rasmus Wriedt Larsen
0fba38c6d8
Merge branch 'main' into amammad-python-WebAppsConstatntSecretKeys
2023-08-14 11:29:56 +02:00
Rasmus Wriedt Larsen
eeefdc5dcd
Python: Fix formatting
2023-08-14 11:29:38 +02:00
yoff
d2a0b9a66c
Update python/ql/lib/change-notes/2023-08-10-fix-alias-locations.md
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-08-14 10:55:00 +02:00
yoff
307f44339c
Update python/ql/lib/change-notes/2023-08-08-relax-module-resolution.md
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-08-14 10:23:47 +02:00
Henry Mercer
1213eba630
Merge branch 'main' into post-release-prep/codeql-cli-2.14.2
2023-08-11 13:54:55 +01:00
Rasmus Wriedt Larsen
ca93f4d223
Python: Accept .expected changes
2023-08-11 10:36:05 +02:00
Rasmus Lerchedahl Petersen
3457f23db5
Python: Add change note
2023-08-10 20:53:43 +02:00
Rasmus Lerchedahl Petersen
e5cd3e8f64
Python: nice locations for import aliases
...
These were computed wrongly before.
2023-08-10 20:27:06 +02:00
Rasmus Lerchedahl Petersen
eac44e89d9
Python: test nice locations
...
there are errors both on lines 2 and 3 due to
locations being computed wrongly.
2023-08-10 14:21:16 +02:00
Rasmus Wriedt Larsen
46af77c1af
Python: Include all assignments in data flow paths
...
Like Ruby did in https://github.com/github/codeql/pull/12566
2023-08-10 11:45:29 +02:00
Rasmus Wriedt Larsen
9bd5694c3f
Python: Add tests of path-graph for dataflow/taint-tracking
...
Although this is actually using taint-tracking (so we can use the +=
statement), I would personally forget to check under the
dataflow/tainttracking folder to look for such a test, so I'm opting to
keep it under the dataflow/ folder.
2023-08-10 11:44:17 +02:00
Rasmus Lerchedahl Petersen
dbc60140e0
Python: move tests to data extensions
...
For these tests, we cannot use the same mechanism, as we want the
data extensions to be available for both tests.
Instead, we create a ql-pack for the test directory and point to
the data entensions from there. This makes the extensions
available for all tests in the directory.
2023-08-10 09:17:34 +02:00
Rasmus Lerchedahl Petersen
168a1e01a4
Python: move test to data extensions
...
For this test, we can simply use the convention,
that a file called `[ql-file-stem].ext.yml` will be used
as data extensions exactly for the test represented by `ql-file`.
2023-08-09 21:22:17 +02:00
github-actions[bot]
432c21d4fb
Post-release preparation for codeql-cli-2.14.2
2023-08-09 18:45:18 +00:00
Rasmus Wriedt Larsen
51a05286fa
Merge pull request #13731 from pwntester/py/aiohttp_improvements
...
Python: Aiohttp improvements
2023-08-09 16:37:20 +02:00
Rasmus Lerchedahl Petersen
885e25ff2d
Python: use file-name-convention of *.model.yml
2023-08-09 14:25:33 +02:00
Rasmus Lerchedahl Petersen
e47e77c438
Python: add change note
2023-08-08 12:17:23 +02:00
Rasmus Lerchedahl Petersen
f33aff42ad
Python: missing result was fixed
2023-08-08 12:14:57 +02:00
Rasmus Lerchedahl Petersen
f865fa3050
Python: simplify using getSubscript
2023-08-08 11:16:35 +02:00
Rasmus Wriedt Larsen
4f47461f60
Python: Add requested test
2023-08-08 10:44:48 +02:00
erik-krogh
92db7b047c
escape unicode chars in the output for the ReDoS queries
2023-08-08 00:15:54 +02:00
github-actions[bot]
79c90fa36a
Release preparation for version 2.14.2
2023-08-07 18:08:52 +00:00
Jeroen Ketema
8b6a7985db
Refactor the traint-tracking library to follow the dataflow library refactoring
2023-08-07 15:23:15 +02:00
Jeroen Ketema
5d2984b7a5
Merge branch 'main' into shared-taint-tracking
2023-08-07 15:22:29 +02:00
Rasmus Lerchedahl Petersen
957c0d6387
Python: move change note
2023-08-07 14:28:53 +02:00
Rasmus Lerchedahl Petersen
2f9172046b
Python: change-note
2023-08-07 11:50:13 +02:00
Tom Hvitved
6c989b9c6b
Python: Adjust to data flow refactor
2023-08-07 11:35:23 +02:00
Rasmus Lerchedahl Petersen
4dbaed9ec2
Python: add qldoc
2023-08-07 11:31:22 +02:00
Jeroen Ketema
747cd1745a
Update all languages to use the shared taint-tracking library
2023-08-04 22:53:25 +02:00
Mathias Vorreiter Pedersen
abe3a816ce
Merge pull request #13851 from MathiasVP/sink-without-states
...
DataFlow: Support stateless `isSink` in `StateConfigSig`s
2023-08-04 18:01:42 +02:00
Asger F
c38cbe859d
Merge pull request #13737 from asgerf/dynamic/fuzzy-models
...
Dynamic: add Fuzzy token
2023-08-03 09:58:24 +02:00
Mathias Vorreiter Pedersen
3007fdab5e
Sync identical files.
2023-08-02 14:33:33 +02:00
Anders Schack-Mulligen
b27a3a81bc
Python: Adjust to use the qlpack data-flow api.
2023-08-01 14:02:33 +02:00
Maiky
6274dfafdc
typo
...
Co-authored-by: Jorge <46056498+jorgectf@users.noreply.github.com >
2023-07-27 23:43:48 +02:00
Maiky
49aa3eb92b
Update change note
...
Co-authored-by: Jorge <46056498+jorgectf@users.noreply.github.com >
2023-07-27 23:43:39 +02:00
Owen Mansel-Chan
9b2b58a823
Sync files
2023-07-26 21:48:10 +01:00
amammad
bee8e6ff0d
remove unused saniter
2023-07-27 01:41:31 +10:00
amammad
591d81b5f9
remove saniter which was responsible for a defensive technique
2023-07-26 02:39:10 +10:00
Rasmus Lerchedahl Petersen
b2688bba7d
Python: Relax module resolution
...
Do not require modules to reside in a package
2023-07-25 17:24:04 +02:00
jorgectf
8f8c064632
Modify test
2023-07-24 17:50:22 +02:00
amammad
1e1d42fa35
fix a mistake :(
2023-07-25 00:11:23 +10:00
amammad
7aff0079f5
better safe Flask example
2023-07-25 00:08:51 +10:00
amammad
0e8f83460c
a little bit change on flask example
2023-07-24 21:41:54 +10:00
amammad
bbba906ff1
a little bit change on flask example
2023-07-24 21:41:44 +10:00
amammad
6f8ec118df
fix qlhelp and qldoc bugs
2023-07-24 17:15:43 +10:00
amammad
c704158150
remove sources which are contained from environment variables, fix some bugs thanks to @yoff
2023-07-24 17:06:27 +10:00
github-actions[bot]
f91b7a9342
Post-release preparation for codeql-cli-2.14.1
2023-07-21 16:16:25 +00:00
github-actions[bot]
c936a920b0
Release preparation for version 2.14.1
2023-07-20 16:32:27 +00:00
jorgectf
3ac94c33b2
Add change note
2023-07-20 15:47:18 +02:00
