Rasmus Wriedt Larsen
|
bbe93f43d3
|
Python: Only comparison with constant will clear taint
tainted = SOURCE
if tainted == tainted:
SINK(tainted) # unsafe
before, in the body of the if statement, `tainted` was not tainted
|
2020-01-21 15:25:57 +01:00 |
|
Rasmus Wriedt Larsen
|
1498145415
|
Python: Highlight that any comparison will clear taint
|
2020-01-21 15:24:56 +01:00 |
|
Mark Shannon
|
c7ec5690a5
|
Python taint-tracking: make sure all features of legacy extensions are supported.
|
2019-08-29 10:31:50 +01:00 |
|
Mark Shannon
|
e8190d9a7b
|
Python: Track taint through 'yield' expressions.
|
2019-06-18 16:39:52 +01:00 |
|
Mark Shannon
|
e2a3d91a7d
|
Python taint-tracking: If taint has no class allow it flow through both branches of isinstance test.
|
2019-04-04 14:29:34 +01:00 |
|
Mark Shannon
|
ebd9bc3cb5
|
Python: Improve taint tracking to account for truthiness of the taint kind.
|
2019-03-01 11:24:07 +00:00 |
|
Mark Shannon
|
05b69a1c0f
|
QL tests for Python queries and libraries.
|
2018-11-19 15:15:54 +00:00 |
|