yoff
|
2e981e330b
|
Merge pull request #14059 from RasmusWL/fix-loginjection-tests
Python: Fix stdlib sinks in LogInjection query
|
2023-08-28 14:44:51 +02:00 |
|
yoff
|
6e05246daa
|
Merge pull request #13935 from yoff/python/mad-on-externals
Python: MaD on externals
|
2023-08-28 14:04:54 +02:00 |
|
Rasmus Wriedt Larsen
|
c807ab4216
|
Python: Apply suggestions from code review
Co-authored-by: yoff <lerchedahl@gmail.com>
|
2023-08-28 14:04:22 +02:00 |
|
Rasmus Wriedt Larsen
|
bf9a0dab2a
|
Python: Fix stdlib sinks in LogInjection query
|
2023-08-25 17:04:48 +02:00 |
|
Rasmus Lerchedahl Petersen
|
137f9e7234
|
Python: Adress review comments
- make qldoc accurate
- fix ql4ql alert
|
2023-08-24 21:28:07 +02:00 |
|
Rasmus Lerchedahl Petersen
|
7ad1a21c2d
|
Python: make mode characters not be characters
They are simply considered part of the group start.
|
2023-08-24 21:21:49 +02:00 |
|
yoff
|
a834703195
|
Merge pull request #13779 from geoffw0/pythonparsemode
Python: Understand multiple parse mode flags specified in a regular expression string
|
2023-08-24 21:20:45 +02:00 |
|
yoff
|
00c0ebe9e4
|
Merge pull request #13738 from RasmusWL/path-steps
Python: Include all assignments in data flow paths
|
2023-08-22 11:58:11 +02:00 |
|
Michael Nebel
|
ce6fd8ac5f
|
Merge pull request #13432 from michaelnebel/updateissupported
Java/C#: Update telemetry queries to report callables with sink/source neutrals as being supported.
|
2023-08-22 08:39:38 +02:00 |
|
Jeroen Ketema
|
2d0f73d7c2
|
Merge pull request #13881 from jketema/shared-taint-tracking
Introduce shared taint tracking library
|
2023-08-21 12:45:49 +02:00 |
|
Rasmus Wriedt Larsen
|
c8c69aac9b
|
Merge pull request #13561 from amammad/amammad-python-WebAppsConstatntSecretKeys
Python: Flask & Django Constant Secret Key initialization
|
2023-08-21 11:39:19 +02:00 |
|
Michael Nebel
|
106ba11e10
|
Address review comments.
|
2023-08-21 09:59:02 +02:00 |
|
Michael Nebel
|
d66fe08661
|
Add QLDoc for the getKind predicate.
|
2023-08-21 09:59:02 +02:00 |
|
Michael Nebel
|
42c7006378
|
Python: Sync files and make manual changes.
|
2023-08-21 09:59:01 +02:00 |
|
github-actions[bot]
|
098dfb4242
|
Release preparation for version 2.14.3
|
2023-08-18 14:48:15 +00:00 |
|
Jeroen Ketema
|
33e8310625
|
Merge branch 'main' into shared-taint-tracking
|
2023-08-17 00:14:25 +02:00 |
|
yoff
|
7f2f6f14e7
|
Merge pull request #13729 from yoff/python/model-aws-lambdas
Python/JavaScript: Shared module for serverless functions
|
2023-08-16 15:14:08 +02:00 |
|
Rasmus Wriedt Larsen
|
0443057608
|
Merge branch 'main' into amammad-python-WebAppsConstatntSecretKeys
|
2023-08-16 15:06:08 +02:00 |
|
yoff
|
b2988e5516
|
Update python/ql/lib/change-notes/2023-08-07-serverless-sources.md
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2023-08-16 12:56:39 +02:00 |
|
Rasmus Wriedt Larsen
|
c55b0982f7
|
Merge pull request #13819 from yoff/python/relax-module-resolution
Python: Relax module resolution
|
2023-08-16 12:04:49 +02:00 |
|
Rasmus Lerchedahl Petersen
|
6614e037ae
|
Python: format
|
2023-08-15 21:40:20 +02:00 |
|
yoff
|
7eb41140ab
|
Update python/ql/lib/semmle/python/Module.qll
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2023-08-15 15:47:00 +02:00 |
|
Rasmus Lerchedahl Petersen
|
8f70c9f950
|
Python: add comment about namespace packages
|
2023-08-15 12:02:02 +02:00 |
|
Rasmus Wriedt Larsen
|
d12743d7c3
|
Merge pull request #13941 from yoff/python/test-nice-location
Python: fix nice locations for import aliases
|
2023-08-14 21:37:23 +02:00 |
|
Rasmus Wriedt Larsen
|
794d04e4c0
|
Python: Model os.getenv[b]
|
2023-08-14 11:55:00 +02:00 |
|
yoff
|
d2a0b9a66c
|
Update python/ql/lib/change-notes/2023-08-10-fix-alias-locations.md
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2023-08-14 10:55:00 +02:00 |
|
yoff
|
307f44339c
|
Update python/ql/lib/change-notes/2023-08-08-relax-module-resolution.md
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2023-08-14 10:23:47 +02:00 |
|
Henry Mercer
|
1213eba630
|
Merge branch 'main' into post-release-prep/codeql-cli-2.14.2
|
2023-08-11 13:54:55 +01:00 |
|
Rasmus Lerchedahl Petersen
|
3457f23db5
|
Python: Add change note
|
2023-08-10 20:53:43 +02:00 |
|
Rasmus Lerchedahl Petersen
|
e5cd3e8f64
|
Python: nice locations for import aliases
These were computed wrongly before.
|
2023-08-10 20:27:06 +02:00 |
|
Rasmus Wriedt Larsen
|
46af77c1af
|
Python: Include all assignments in data flow paths
Like Ruby did in https://github.com/github/codeql/pull/12566
|
2023-08-10 11:45:29 +02:00 |
|
github-actions[bot]
|
432c21d4fb
|
Post-release preparation for codeql-cli-2.14.2
|
2023-08-09 18:45:18 +00:00 |
|
Rasmus Wriedt Larsen
|
51a05286fa
|
Merge pull request #13731 from pwntester/py/aiohttp_improvements
Python: Aiohttp improvements
|
2023-08-09 16:37:20 +02:00 |
|
Rasmus Lerchedahl Petersen
|
885e25ff2d
|
Python: use file-name-convention of *.model.yml
|
2023-08-09 14:25:33 +02:00 |
|
Rasmus Lerchedahl Petersen
|
e47e77c438
|
Python: add change note
|
2023-08-08 12:17:23 +02:00 |
|
Rasmus Lerchedahl Petersen
|
f865fa3050
|
Python: simplify using getSubscript
|
2023-08-08 11:16:35 +02:00 |
|
github-actions[bot]
|
79c90fa36a
|
Release preparation for version 2.14.2
|
2023-08-07 18:08:52 +00:00 |
|
Jeroen Ketema
|
8b6a7985db
|
Refactor the traint-tracking library to follow the dataflow library refactoring
|
2023-08-07 15:23:15 +02:00 |
|
Jeroen Ketema
|
5d2984b7a5
|
Merge branch 'main' into shared-taint-tracking
|
2023-08-07 15:22:29 +02:00 |
|
Rasmus Lerchedahl Petersen
|
957c0d6387
|
Python: move change note
|
2023-08-07 14:28:53 +02:00 |
|
Rasmus Lerchedahl Petersen
|
2f9172046b
|
Python: change-note
|
2023-08-07 11:50:13 +02:00 |
|
Tom Hvitved
|
6c989b9c6b
|
Python: Adjust to data flow refactor
|
2023-08-07 11:35:23 +02:00 |
|
Rasmus Lerchedahl Petersen
|
4dbaed9ec2
|
Python: add qldoc
|
2023-08-07 11:31:22 +02:00 |
|
Jeroen Ketema
|
747cd1745a
|
Update all languages to use the shared taint-tracking library
|
2023-08-04 22:53:25 +02:00 |
|
Mathias Vorreiter Pedersen
|
abe3a816ce
|
Merge pull request #13851 from MathiasVP/sink-without-states
DataFlow: Support stateless `isSink` in `StateConfigSig`s
|
2023-08-04 18:01:42 +02:00 |
|
Asger F
|
c38cbe859d
|
Merge pull request #13737 from asgerf/dynamic/fuzzy-models
Dynamic: add Fuzzy token
|
2023-08-03 09:58:24 +02:00 |
|
Mathias Vorreiter Pedersen
|
3007fdab5e
|
Sync identical files.
|
2023-08-02 14:33:33 +02:00 |
|
Anders Schack-Mulligen
|
b27a3a81bc
|
Python: Adjust to use the qlpack data-flow api.
|
2023-08-01 14:02:33 +02:00 |
|
Maiky
|
6274dfafdc
|
typo
Co-authored-by: Jorge <46056498+jorgectf@users.noreply.github.com>
|
2023-07-27 23:43:48 +02:00 |
|
Maiky
|
49aa3eb92b
|
Update change note
Co-authored-by: Jorge <46056498+jorgectf@users.noreply.github.com>
|
2023-07-27 23:43:39 +02:00 |
|