Rasmus Wriedt Larsen
|
1e5eeb8009
|
Python: Move lxml.etree library stub to reduce clutter
|
2020-06-25 12:07:41 +02:00 |
|
Rasmus Wriedt Larsen
|
3cc566f703
|
Merge branch 'master' into python-3521-revived
|
2020-06-25 12:02:21 +02:00 |
|
Rasmus Wriedt Larsen
|
e60af68b29
|
Python: Move lxml.etree library stub (so merge is easy)
|
2020-06-25 11:54:34 +02:00 |
|
Rasmus Wriedt Larsen
|
994db060c7
|
Python: Use CWE-091 for XSLT
As indicated here https://www.zaproxy.org/docs/alerts/90017/
|
2020-06-25 11:53:12 +02:00 |
|
Rasmus Wriedt Larsen
|
b36c23ef63
|
Merge pull request #3500 from yoff/UnmatchableDollar
Python: Regexp: Handle repetions {n} (with no ,)
|
2020-06-25 11:26:52 +02:00 |
|
Rasmus Wriedt Larsen
|
0b36cd44b8
|
Merge pull request #3522 from porcupineyhairs/pythonXpath
Python : Add Xpath injection query
|
2020-06-25 11:21:45 +02:00 |
|
Rasmus Lerchedahl Petersen
|
415e0c4aac
|
Python: add suggestion for test cases
|
2020-06-25 10:46:33 +02:00 |
|
Rasmus Lerchedahl Petersen
|
5973fe8411
|
Python: scaffold for testing data flow coverage
|
2020-06-25 10:32:10 +02:00 |
|
Rasmus Wriedt Larsen
|
155bbbdec9
|
Python: Add annotated call-graph tests
See the added README for in-depth details
|
2020-06-24 22:15:39 +02:00 |
|
Rasmus Lerchedahl Petersen
|
f6c59abcd9
|
Merge branch 'master' of github.com:github/codeql into UnmatchableDollar
to make CodeScan happy
|
2020-06-24 11:04:07 +02:00 |
|
Rasmus Lerchedahl Petersen
|
6e9c48bba7
|
Python: test zero iterations
|
2020-06-24 11:01:27 +02:00 |
|
Rasmus Lerchedahl Petersen
|
c70cf6d780
|
Python: better (if imperfect) handling of phi node
|
2020-06-23 17:25:33 +02:00 |
|
Rasmus Lerchedahl Petersen
|
b759b71ac8
|
Python: explain the regression test
|
2020-06-23 11:02:33 +02:00 |
|
Rasmus Lerchedahl Petersen
|
a55b4660d4
|
Python: support for with-definitions
|
2020-06-23 07:45:30 +02:00 |
|
Rasmus Lerchedahl Petersen
|
e8289d6fa1
|
Python: add regression tests and organise tests
|
2020-06-22 16:36:19 +02:00 |
|
Rasmus Lerchedahl Petersen
|
656c76558a
|
Merge branch 'master' of github.com:github/codeql into SharedDataflow
To sync dataflow files
|
2020-06-22 14:55:04 +02:00 |
|
Rasmus Lerchedahl Petersen
|
13bb971b05
|
Python: sort out some enclosing callable confusion
|
2020-06-22 14:26:25 +02:00 |
|
Rasmus Lerchedahl Petersen
|
94a828aca2
|
Merge branch 'master' of github.com:github/codeql into SharedDataflow
To avoid CodeScan check failing
|
2020-06-22 11:29:00 +02:00 |
|
Rasmus Lerchedahl Petersen
|
b65e6fba9e
|
Python: attempt at capturing maximal flows
(this is what used to be "all flows")
|
2020-06-22 11:28:28 +02:00 |
|
Rasmus Lerchedahl Petersen
|
47819bbcda
|
Python: obtain remaining expected flows
- implement encosing callable for more nodes
- implement extra flow for ESSA global variables
|
2020-06-22 07:36:09 +02:00 |
|
Porcupiney Hairs
|
a519132407
|
add support for libxml2
|
2020-06-22 02:01:07 +05:30 |
|
Taus Brock-Nannestad
|
410f4781b3
|
Python: Fix one last reference.
This one got lost in the big renaming somehow.
|
2020-06-19 20:15:01 +02:00 |
|
Taus Brock-Nannestad
|
48e3e9c0b4
|
Python: Do all the renames.
|
2020-06-19 17:02:47 +02:00 |
|
Taus Brock-Nannestad
|
06d6913a20
|
Python: Change "sanity" to "consistency".
|
2020-06-19 16:55:59 +02:00 |
|
Taus Brock-Nannestad
|
01fb1e3786
|
Python: Get rid of deprecated terms in code and .qhelp.
|
2020-06-19 16:51:09 +02:00 |
|
Rasmus Lerchedahl Petersen
|
426b1da552
|
Python: update sources and sinks
|
2020-06-19 11:38:15 +02:00 |
|
Rasmus Lerchedahl Petersen
|
9e078da963
|
Python: Better definition of all flows
does not become too big, when we filter out 0-step flows
|
2020-06-19 11:25:34 +02:00 |
|
Rasmus Lerchedahl Petersen
|
5ca6391f15
|
Python: update call graph test
we also have flow into functions!
|
2020-06-19 07:49:47 +02:00 |
|
Rasmus Lerchedahl Petersen
|
5a864aab87
|
Python: override genEnclosingCallable
achieved flow out of functions!
|
2020-06-19 07:29:46 +02:00 |
|
Rasmus Lerchedahl Petersen
|
9669a6a4dc
|
Python: test for getASuccessor
also align test names
|
2020-06-18 15:10:45 +02:00 |
|
Rasmus Lerchedahl Petersen
|
03b26f7ebe
|
Python: Remove excessive type pruning
|
2020-06-18 13:58:47 +02:00 |
|
Rasmus Lerchedahl Petersen
|
d283919b92
|
Python: implemented ParameterNode, updated test
|
2020-06-18 07:45:16 +02:00 |
|
Rasmus Lerchedahl Petersen
|
c20219c2b9
|
Python: more local flow and more tests
|
2020-06-17 20:48:06 +02:00 |
|
Rasmus Lerchedahl Petersen
|
ce57a28c8f
|
Python: Use CallableValue and improve tests
|
2020-06-17 19:12:10 +02:00 |
|
Rasmus Lerchedahl Petersen
|
a45b5a7d3c
|
Python: Implemented return node
but I think they receive no flow
|
2020-06-17 17:41:43 +02:00 |
|
Rasmus Lerchedahl Petersen
|
8e51b2fed8
|
Python: refactor test for global flow
|
2020-06-17 16:43:11 +02:00 |
|
Rasmus Lerchedahl Petersen
|
71f364eef3
|
Python: Implement OutNode
Also, fix test for local flow
|
2020-06-17 16:24:44 +02:00 |
|
Rasmus Lerchedahl Petersen
|
52898f16f5
|
Python: update paths after move
|
2020-06-17 08:34:45 +02:00 |
|
Rasmus Lerchedahl Petersen
|
e192b66116
|
Python: move shared dataflow to experimental
|
2020-06-17 06:46:46 +02:00 |
|
Rasmus Lerchedahl Petersen
|
f3e879a5ab
|
Python: small test of local flow
|
2020-06-16 14:31:22 +02:00 |
|
Rasmus Wriedt Larsen
|
c0043eb9db
|
Python: Don't treat re.escape(...) as a regex
Fixes https://github.com/github/codeql/issues/3712
|
2020-06-15 11:54:14 +02:00 |
|
Rasmus Wriedt Larsen
|
7601bd497e
|
Python: Add tests for re.escape FP
|
2020-06-15 11:34:42 +02:00 |
|
Rasmus Lerchedahl Petersen
|
b5703cd3f6
|
Python: link to FP report in test file
|
2020-06-11 07:14:48 +02:00 |
|
semmle-qlci
|
4cdb3c13df
|
Merge pull request #3658 from RasmusWL/python-3.8-dict-ismapping
Approved by tausbn
|
2020-06-10 17:19:49 +01:00 |
|
semmle-qlci
|
f7c6b1364b
|
Merge pull request #3640 from RasmusWL/python-handle-3.8-enum-convert
Approved by tausbn
|
2020-06-10 17:19:22 +01:00 |
|
Rasmus Wriedt Larsen
|
48b2d2cc5c
|
Python: Make isSequence() and isMapping() tests version specific
Since unicode/bytes difference, output can't match between Python 2 and Python 3.
|
2020-06-10 16:43:56 +02:00 |
|
Taus
|
5b0d92d72b
|
Merge pull request #3464 from yoff/UnicodeEscape
Python: Handle more escapes in regexes
|
2020-06-10 15:47:09 +02:00 |
|
Rasmus Wriedt Larsen
|
bacd491875
|
Python: Fix isSequence() and isMapping()
|
2020-06-09 14:21:02 +02:00 |
|
Rasmus Wriedt Larsen
|
846101d295
|
Python: Extend isSequence/isMapping test with custom classes
|
2020-06-09 14:04:14 +02:00 |
|
Rasmus Wriedt Larsen
|
65ce6d27ff
|
Python: Update isSequence() and isMapping() for Python 3.8
|
2020-06-09 11:57:00 +02:00 |
|