Rebecca Valentine
cc53b15a5d
Python: ObjectAPI to ValueAPI: ReturnValueIgnored: Reorganizes predicates
2020-04-01 14:41:49 -07:00
Rebecca Valentine
09349f1957
Python: ObjectAPI to ValueAPI: ReturnValueIgnored: Autoformats
2020-04-01 12:54:42 -07:00
Rebecca Valentine
28319ee0f7
Python: ObjectAPI to ValueAPI: SignatureOverriddenMethod: Autoformats
2020-04-01 12:32:21 -07:00
Rebecca Valentine
838e37ca98
Python: ObjectAPI to ValueAPI: ReturnValueIgnore: Moves getAnInferredType to CallableObjectInternal
2020-04-01 08:45:27 -07:00
Rebecca Valentine
97b4077162
Merge branch 'master' into python-objectapi-to-valueapi-signatureoverriddenmethod
2020-04-01 07:42:10 -07:00
Rebecca Valentine
12377badf9
Merge branch 'master' into python-objectapi-to-valueapi-returnvalueignored
2020-04-01 07:37:17 -07:00
Rasmus Wriedt Larsen
f8f51109d0
Python: Add missing ` in qldoc
2020-04-01 12:07:19 +02:00
Rebecca Valentine
093eb71433
Python: ObjectAPI to ValueAPI: ReturnValueIgnored: Adds getAReturnType
2020-04-01 00:17:12 -07:00
Rebecca Valentine
eb4a567a34
Merge branch 'master' into python-objectapi-to-valueapi-signatureoverriddenmethod
2020-03-31 23:36:15 -07:00
Rebecca Valentine
0256eb15bf
Merge branch 'master' into python-objectapi-to-valueapi-wrongnumberargumentsincall
2020-03-31 22:58:11 -07:00
Rebecca Valentine
741317bd05
Python: ObjectAPI to ValueAPI: Makes isAbstract a predicate in CallArgs
2020-03-31 22:56:44 -07:00
Rebecca Valentine
0b2db56051
Python: ObjectAPI to ValueAPI: ObjectAPI.qll: Fixes error in isIterator
2020-03-31 22:15:21 -07:00
Rebecca Valentine
42388b0d97
Python: ObjectAPI to ValueAPI: ReturnValueIgnored: Adds prototype version of getAnInferredReturnType
2020-03-31 22:11:58 -07:00
Rasmus Wriedt Larsen
0b4bfed726
Merge pull request #3156 from tausbn/python-autoformat-all-ql-files
...
Python: Autoformat all `.ql` files.
2020-03-30 16:24:18 +02:00
Taus Brock-Nannestad
2229e34466
Python: Fix outdated link in ImportFailure.qhelp.
2020-03-30 13:14:37 +02:00
Taus Brock-Nannestad
ab4cef53c2
Python: Autoformat one final straggler.
2020-03-30 12:36:43 +02:00
Taus Brock-Nannestad
727cde31c9
Python: Autoformat a few final stragglers.
2020-03-30 12:30:14 +02:00
Taus Brock-Nannestad
6eb9c6f84d
Merge branch 'master' into python-autoformat-almost-everything
2020-03-30 12:24:01 +02:00
Taus Brock-Nannestad
87a9f51c78
Python: Autoformat all .ql files.
2020-03-30 11:59:10 +02:00
Robert Brignull
90fad6f762
add code scanning suites
2020-03-27 17:03:23 +00:00
Rasmus Wriedt Larsen
d55acc38df
Python: Constrain execution paths for taint_at_depth
...
Thanks Taus!
2020-03-27 16:20:08 +01:00
Rasmus Wriedt Larsen
96d1fc8c0b
Python: Fix iterable-unpacking taint CP
...
When running ql/python/ql/src/Security/CWE-079/ReflectedXss.ql against the
database for flask.
Iitially there were 10 million result-tuples for iterable_unpacking_descent.
With this change, we're down to roughly 2100,
2020-03-26 16:42:48 +01:00
semmle-qlci
ac7c74dcee
Merge pull request #3111 from RasmusWL/python-fabric-command-injection
...
Approved by BekaValentine
2020-03-25 10:07:33 +00:00
Taus
fe00d1cbf4
Merge pull request #2888 from RasmusWL/python-tarslip-sanitizer
...
Python: Improve tarslip sanitizer
2020-03-24 12:59:20 +01:00
Rasmus Wriedt Larsen
4b8020b98d
Python: Autoformat Command.qll
2020-03-24 10:11:57 +01:00
Rasmus Wriedt Larsen
b567205579
Python: Model fabric v1.x command injection sinks
2020-03-23 17:49:56 +01:00
Rasmus Wriedt Larsen
a57eadaeb6
Python: Model fabric/invoke command injection sinks
2020-03-23 17:33:41 +01:00
Rasmus Wriedt Larsen
d475bb998e
Python: Add abstract class CommandSink
...
I'm going to add more in a sec, and listing *all* of them in CommandInjection.ql
started to be silly
2020-03-23 17:04:08 +01:00
semmle-qlci
2c7af72f14
Merge pull request #2858 from RasmusWL/python-support-django2
...
Approved by tausbn
2020-03-23 09:35:46 +00:00
Taus Brock-Nannestad
a3bd46d4fe
Python: Autoformat remaining .qll.
2020-03-20 16:43:10 +01:00
Taus Brock-Nannestad
6904898a8b
Python: Autoformat query-local libs.
2020-03-20 16:42:46 +01:00
Taus Brock-Nannestad
9044ff6959
Python: Autoformat rest of semmle/python.
2020-03-20 16:42:22 +01:00
Taus Brock-Nannestad
810e91ea00
Python: Autoformat semmle/python top-level.
2020-03-20 16:41:45 +01:00
Taus Brock-Nannestad
f406a45ce0
Python: Autoformat web.
2020-03-20 16:38:27 +01:00
Taus Brock-Nannestad
5b121b7723
Python: Autoformat values.
2020-03-20 16:37:06 +01:00
Taus Brock-Nannestad
51f1cf020c
Python: Autoformat security.
2020-03-20 16:36:48 +01:00
Taus Brock-Nannestad
4852bb7355
Python: Autoformat pointsto.
2020-03-20 16:36:25 +01:00
Taus Brock-Nannestad
d8b942f922
Python: Autoformat objects.
2020-03-20 16:36:07 +01:00
semmle-qlci
2821b01017
Merge pull request #2915 from tausbn/python-add-points-to-for-missing-builtin-return-types
...
Approved by RasmusWL
2020-03-19 11:02:46 +00:00
Rasmus Wriedt Larsen
f4e5079dd3
Merge pull request #2991 from BekaValentine/python-objectapi-to-valueapi-unguardednextingenerator
...
Python: ObjectAPI to ValueAPI: UnguardedNextInGenerator
2020-03-19 10:33:32 +01:00
Rebecca Valentine
06f0947318
Update python/ql/src/Exceptions/UnguardedNextInGenerator.ql
...
Co-Authored-By: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2020-03-18 14:16:00 -07:00
Rasmus Wriedt Larsen
9a0b2b1843
Merge pull request #2989 from BekaValentine/python-objectapi-to-valueapi-incorrectexceptorder
...
Python: ObjectAPI to ValueAPI: IncorrectExceptOrder
2020-03-18 18:03:25 +01:00
Taus
ae1268f241
Merge branch 'master' into python-add-points-to-for-missing-builtin-return-types
2020-03-18 17:59:17 +01:00
Rasmus Wriedt Larsen
290e33a912
Merge pull request #2922 from tausbn/python-fix-multi-assign-points-to
...
Python: Fix bug in `multi_assignment_points_to`.
2020-03-18 17:50:37 +01:00
Rasmus Wriedt Larsen
b0303158a5
Merge pull request #3088 from tausbn/python-prepare-autoformatting
...
Python: Prepare for autoformatting.
2020-03-18 17:48:46 +01:00
Taus Brock-Nannestad
57af7b84aa
Python: Prepare for autoformatting.
...
Mostly fixes up a bunch of comments that were made wonky by the autoformatter.
2020-03-18 13:59:38 +01:00
Taus
ca26feefbf
Merge pull request #2978 from BekaValentine/python-objectapi-to-valueapi-illegalexceptionhandlertype
...
Python: ObjectAPI to ValueAPI: IllegalExceptionHandlerType
2020-03-17 17:56:34 +01:00
Rebecca Valentine
a7a64952e2
Python: ObjectAPI.qll: Fixes docstring
2020-03-17 09:48:54 -07:00
Rebecca Valentine
ff6e0ce35c
Python: UnguardedNextInGenerator.ql: Excludes next with default value
2020-03-16 17:08:06 -07:00
Rebecca Valentine
68c455cd97
Python: IncorrectExceptOrder.ql: Autoformats w/ new QL indentation
2020-03-16 16:52:48 -07:00
