Rasmus Lerchedahl Petersen
3388ca44ed
Python: sync dataflow library
2020-07-01 07:16:59 +02:00
Rasmus Lerchedahl Petersen
e259281821
Merge branch 'master' of github.com:github/codeql into SharedDataflow
...
to receive updates from data flow library
2020-07-01 07:15:32 +02:00
Taus Brock-Nannestad
7e97bd1d36
Python: Address review comments.
2020-06-30 11:36:26 +02:00
Taus Brock-Nannestad
b469d55d17
Python: Fix a few things in Stmts.qll.
2020-06-29 13:32:36 +02:00
Taus Brock-Nannestad
5744356dbc
Python: Add a bunch more toString docs.
2020-06-28 14:55:45 +02:00
Taus Brock-Nannestad
e72e662f68
Python: Autogenerate QLDoc for toString AST methods.
...
Only adds these for the methods that do not `override` other
methods (as these presumably have their own `toString` documentation).
2020-06-28 14:41:45 +02:00
Taus Brock-Nannestad
24daf2c4d1
Python: Document internal AST classes.
...
We already document these in the classes that override them, so I
simply added a pointer to this information.
2020-06-26 21:15:30 +02:00
Rasmus Wriedt Larsen
3f0975f5a1
Merge pull request #3770 from tausbn/python-add-a-bunch-of-documentation
...
Python: Add a bunch of documentation.
2020-06-26 13:30:45 +02:00
Rasmus Lerchedahl Petersen
64af5f585c
Python: Update status description
2020-06-26 13:18:07 +02:00
Rasmus Lerchedahl Petersen
f84adb3c26
Python: stub for clearsContent
...
also remove all `CastNode`s (seems to help)
2020-06-26 13:09:35 +02:00
Rasmus Lerchedahl Petersen
248717473e
Python: quick status added to readme.md
2020-06-26 12:25:17 +02:00
Rasmus Wriedt Larsen
b164f2695d
Python: One more minor doc fix from review
2020-06-26 12:08:12 +02:00
Rasmus Wriedt Larsen
08384e30af
Python: Minor doc fixes from review
2020-06-26 12:06:31 +02:00
Rasmus Lerchedahl Petersen
6e5f71bf43
Python: sync dataflow files
2020-06-26 12:02:14 +02:00
Rasmus Lerchedahl Petersen
e147e59652
Merge branch 'master' of github.com:github/codeql into SharedDataflow
...
To sync files
2020-06-26 12:01:01 +02:00
Rasmus Lerchedahl Petersen
43f85ef265
Python: typo
2020-06-26 12:00:24 +02:00
dilanbhalla
dc58f6fa87
function/class synatax
2020-06-25 11:39:09 -07:00
Rasmus Lerchedahl Petersen
c5c1c4c0af
Python: started adding some coverage tests
2020-06-25 16:29:41 +02:00
Taus Brock-Nannestad
4dbc8e515a
Python: Address a few more review comments.
2020-06-25 14:19:18 +02:00
Taus
1608758219
Python: Apply suggestions from documentation review.
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2020-06-25 14:16:44 +02:00
Rasmus Wriedt Larsen
22ad8f717f
Python: Remove usage of .getASuccessor() in XSLT.qll
2020-06-25 12:07:45 +02:00
Rasmus Wriedt Larsen
1e5eeb8009
Python: Move lxml.etree library stub to reduce clutter
2020-06-25 12:07:41 +02:00
Rasmus Wriedt Larsen
3cc566f703
Merge branch 'master' into python-3521-revived
2020-06-25 12:02:21 +02:00
Rasmus Wriedt Larsen
e60af68b29
Python: Move lxml.etree library stub (so merge is easy)
2020-06-25 11:54:34 +02:00
Rasmus Wriedt Larsen
994db060c7
Python: Use CWE-091 for XSLT
...
As indicated here https://www.zaproxy.org/docs/alerts/90017/
2020-06-25 11:53:12 +02:00
Rasmus Wriedt Larsen
b36c23ef63
Merge pull request #3500 from yoff/UnmatchableDollar
...
Python: Regexp: Handle repetions {n} (with no ,)
2020-06-25 11:26:52 +02:00
Rasmus Wriedt Larsen
0b36cd44b8
Merge pull request #3522 from porcupineyhairs/pythonXpath
...
Python : Add Xpath injection query
2020-06-25 11:21:45 +02:00
Taus Brock-Nannestad
9f06e13313
Python: Fix incomplete renaming in Thrift.qll.
2020-06-25 10:48:26 +02:00
Rasmus Lerchedahl Petersen
415e0c4aac
Python: add suggestion for test cases
2020-06-25 10:46:33 +02:00
Rasmus Lerchedahl Petersen
5973fe8411
Python: scaffold for testing data flow coverage
2020-06-25 10:32:10 +02:00
Taus Brock-Nannestad
02363d76c1
Python: Document Comment.qll.
...
I didn't do the `toString` methods in this commit. I'm thinking
they're better to do in a separate commit. (There are 48 undocumented
instances!)
2020-06-24 22:43:59 +02:00
Taus Brock-Nannestad
fe78e68fd0
Python: Document a bunch of hasLocationInfo methods.
...
If only we had been _somewhat consistent in how we named the
parameters for these...
2020-06-24 22:38:03 +02:00
Rasmus Wriedt Larsen
155bbbdec9
Python: Add annotated call-graph tests
...
See the added README for in-depth details
2020-06-24 22:15:39 +02:00
Taus Brock-Nannestad
682e1b6040
Python: Document Comparisons.qll.
2020-06-24 22:13:46 +02:00
Taus Brock-Nannestad
b8e744eade
Python: Document Class.qll.
2020-06-24 22:07:47 +02:00
Taus Brock-Nannestad
25122c9fb5
Python: Document (parts of) ExternalArtifact.qll.
...
I don't think there's any need to document the parts specific to
metrics or defects, as I don't believe these are used anywhere.
2020-06-24 21:53:37 +02:00
Rasmus Lerchedahl Petersen
f6c59abcd9
Merge branch 'master' of github.com:github/codeql into UnmatchableDollar
...
to make CodeScan happy
2020-06-24 11:04:07 +02:00
Rasmus Lerchedahl Petersen
6e9c48bba7
Python: test zero iterations
2020-06-24 11:01:27 +02:00
Rasmus Lerchedahl Petersen
226c295b4c
Python: format
2020-06-24 10:48:51 +02:00
Rasmus Lerchedahl Petersen
c70cf6d780
Python: better (if imperfect) handling of phi node
2020-06-23 17:25:33 +02:00
Taus Brock-Nannestad
1e4ec5c987
Python: Make QLDoc for TObject.qll visible.
2020-06-23 14:31:30 +02:00
Taus Brock-Nannestad
ccf63e03bb
Python: Document FileOpen.qll.
2020-06-23 14:31:06 +02:00
Taus Brock-Nannestad
f86011fb51
Python: Document RedundantComparison.qll.
2020-06-23 14:30:42 +02:00
Taus Brock-Nannestad
2f93b1458e
Python: Document IsComparisons.qll.
2020-06-23 14:30:17 +02:00
Taus Brock-Nannestad
d6e5a5cb01
Python: Document AdvancedFormatting.qll.
2020-06-23 14:29:34 +02:00
Taus Brock-Nannestad
513ead66d3
Python: Document CallArgs.qll.
2020-06-23 14:28:40 +02:00
Rasmus Lerchedahl Petersen
b759b71ac8
Python: explain the regression test
2020-06-23 11:02:33 +02:00
Rasmus Lerchedahl Petersen
a55b4660d4
Python: support for with-definitions
2020-06-23 07:45:30 +02:00
Rasmus Wriedt Larsen
d5895c16c8
Python: Changing signature in overriden method is not an error
...
Rather, fulfiling the Liskov substitution principle is an opinionated
recommendation. Looking at `py/inheritance/incorrect-overridden-signature` and
`py/mixed-tuple-returns`, it seems very appropriate that this should have
`@severity recommendation`, and `@sub-severity high`.
2020-06-22 16:58:52 +02:00
Rasmus Lerchedahl Petersen
e8289d6fa1
Python: add regression tests and organise tests
2020-06-22 16:36:19 +02:00