9260 Commits

Author	SHA1	Message	Date
Joe Farebrother	c7f9095739	Apply similar changes to httponly	2024-07-29 10:29:59 +01:00
Joe Farebrother	1127b08635	Merge branch 'main' into python-cookie-concept-promote	2024-07-29 10:26:03 +01:00
Joe Farebrother	d997eee6e6	Code review suggestions - make definitions clearer ... Co-authored-by: yoff <lerchedahl@gmail.com>	2024-07-29 10:22:33 +01:00
Joe Farebrother	58689c90fb	Merge pull request #16893 from joefarebrother/python-cookie-injectio-promote ... Python: Promote cookie injection query from experimental	2024-07-29 10:17:01 +01:00
yoff	d23d138e7d	Merge pull request #16923 from RasmusWL/impossible-isinstance ... Python: Add test for impossible isinstance flow	2024-07-29 09:33:30 +02:00
Sylwia Budzynska	a05266c236	Formatting	2024-07-26 14:55:58 +02:00
Sylwia Budzynska	358a1b3a20	Fix tests	2024-07-26 14:19:06 +02:00
Sylwia Budzynska	6d1c00742f	Add tests and change note	2024-07-26 14:15:43 +02:00
Sylwia Budzynska	221c18934c	Add models	2024-07-26 13:23:39 +02:00
Joe Farebrother	ebeb187fd9	Remove unneeded experimental file	2024-07-25 23:16:48 +01:00
Anders Schack-Mulligen	7a48fe1102	Dataflow: Replace ppReprType with DataFlowType.toString.	2024-07-25 13:08:47 +02:00
Joe Farebrother	8f714c631f	Code reveiw suggestions. correction in changenote + style in example ... Co-authored-by: yoff <lerchedahl@gmail.com>	2024-07-24 21:37:12 +01:00
Joe Farebrother	db27fd934a	Add tests for tornado and twisted	2024-07-23 13:21:37 +01:00
Joe Farebrother	44271813a5	Add change note	2024-07-23 10:15:28 +01:00
Joe Farebrother	93f70b3ad9	Add unit tests	2024-07-23 10:15:23 +01:00
Joe Farebrother	b28d79960b	Update ConceptsTests and make a fix	2024-07-23 10:15:09 +01:00
Joe Farebrother	be87eb50d4	Add cookie models to each framework	2024-07-23 10:15:02 +01:00
Joe Farebrother	a73d675e6e	Remove experimental query versions	2024-07-23 10:14:55 +01:00
Joe Farebrother	226e4eb8a5	Use a 3-valued newtype for hasSameSiteAttribute	2024-07-23 10:14:45 +01:00
Joe Farebrother	df5569fda9	Add documentation	2024-07-23 10:14:40 +01:00
Joe Farebrother	32fbe52f0f	Model cookie attributes for Django and Flask	2024-07-23 10:14:33 +01:00
Joe Farebrother	6a7bdaf284	Fix experimental query compilation	2024-07-23 10:14:29 +01:00
Joe Farebrother	033dd9f8a6	Promote insecure cookie query	2024-07-23 10:14:22 +01:00
Joe Farebrother	9ad6c8c5eb	Implement cookie attributes for cases in which a raw header is set	2024-07-23 10:14:16 +01:00
Joe Farebrother	2df09f6194	Change flag predicates to boolean parameters rather than boolean results	2024-07-23 10:14:08 +01:00
Joe Farebrother	6f7b2a2d20	Add cookie flags to cookie write concept, and alter experimental queries to use them	2024-07-23 10:14:00 +01:00
github-actions[bot]	49cc8f8ff8	Post-release preparation for codeql-cli-2.18.1	2024-07-22 22:00:48 +00:00
Chuan-kai Lin	a5fe3f4d9c	Minor changelog improvements	2024-07-22 14:34:56 -07:00
github-actions[bot]	368bcb684a	Release preparation for version 2.18.1	2024-07-22 21:30:50 +00:00
Chuan-kai Lin	23320b6e5e	Revert "Release preparation for version 2.18.1"	2024-07-22 13:22:49 -07:00
Chuan-kai Lin	cda4339056	Minor changelog improvements	2024-07-22 09:42:31 -07:00
Rasmus Lerchedahl Petersen	3434c38da7	Python: update test expectations ... This is MaD...	2024-07-22 17:03:29 +02:00
github-actions[bot]	55935fc123	Release preparation for version 2.18.1	2024-07-22 14:56:15 +00:00
Rasmus Lerchedahl Petersen	e30f725e71	Python: Remove questionable model for multiprocessing.connection.Listener	2024-07-22 15:43:06 +02:00
Joe Farebrother	661a4126ac	Add change note	2024-07-19 09:23:33 +01:00
Joe Farebrother	baf51334e4	Update documentation	2024-07-19 09:13:30 +01:00
Joe Farebrother	070d67816d	Remove experimental version	2024-07-16 16:50:10 +01:00
Joe Farebrother	8d93c3a852	Move to cwe-20	2024-07-16 16:50:08 +01:00
Joe Farebrother	e885f1f8c4	Add documentation	2024-07-16 16:50:05 +01:00
Joe Farebrother	983bdb92a1	Add test cases + remove redundant import	2024-07-16 16:50:00 +01:00
Joe Farebrother	123214cb2b	Promoto cookie injection query	2024-07-16 16:49:56 +01:00
Anders Schack-Mulligen	da5abc8321	Dataflow: Replace MakeSets with QlBuiltins::InternSets.	2024-07-15 13:35:57 +02:00
Rasmus Wriedt Larsen	efcd4e297e	Add change-note	2024-07-12 15:21:51 +02:00
Rasmus Wriedt Larsen	db8a5306cf	Python: Add MaD support for DictionaryElement/DictionaryElementAny for sources	2024-07-12 15:19:40 +02:00
Rasmus Wriedt Larsen	eed8b3e87b	Python: Add more tests for MaD sources	2024-07-12 15:10:23 +02:00
Rasmus Wriedt Larsen	1de2943a9b	Merge pull request #16940 from RasmusWL/rasmuswl/BuiltinModuleExtractable ... Python: Handle diagnostics writing for `BuiltinModuleExtractable`	2024-07-12 14:46:30 +02:00
Rasmus Wriedt Larsen	354394d4c2	Python: Don't use fake locations in diagnostics ... Some of the internal tooling would not be too happy about this :D	2024-07-12 13:36:41 +02:00
Rasmus Wriedt Larsen	f41d2a896c	Merge pull request #16771 from porcupineyhairs/js2py ... Python : Arbitrary code execution due to Js2Py	2024-07-11 15:31:57 +02:00
Joe Farebrother	8152ec7472	Merge pull request #16696 from joefarebrother/python-cookie-write-headers ... Python: Model CookieWrites from HeaderWrites	2024-07-11 14:25:54 +01:00
Rasmus Wriedt Larsen	5ecde387af	Python: Fix .expected	2024-07-11 14:42:26 +02:00