Rasmus Lerchedahl Petersen
133e18edd9
Python: Annotate missing flow
2020-07-30 18:13:39 +02:00
Rasmus Lerchedahl Petersen
1467d6b419
Python: Test all expressions that incur dataflow
2020-07-30 17:51:17 +02:00
Rasmus Lerchedahl Petersen
d32e2772a0
Python: some doc, a generator, and a corotuine
2020-07-29 15:52:56 +02:00
Rasmus Lerchedahl Petersen
488a7f4d01
Python: update test expectations
2020-07-28 21:46:45 +02:00
Rasmus Lerchedahl Petersen
eab64f125b
Python: Dataflow, start on test for classes
2020-07-28 20:32:12 +02:00
Rasmus Lerchedahl Petersen
38acea633f
Python: Dataflow, expand callable to classes
2020-07-27 17:58:21 +02:00
Porcupiney Hairs
7a71ca3e0f
fix tests.
2020-07-24 00:57:19 +05:30
Rasmus Wriedt Larsen
c49311e69e
Python: Fix JinjaSSTISinks.expected
2020-07-23 20:11:27 +02:00
Porcupiney Hairs
1e7921e575
add qhelp and fix tests.
2020-07-23 20:04:32 +05:30
porcupineyhairs
8e85dc755a
Apply suggestions from code review
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2020-07-23 19:37:40 +05:30
Rasmus Wriedt Larsen
9dbd280d31
Python: Fix syntax error
2020-07-21 18:01:27 +05:30
Porcupiney Hairs
49df4169cf
Python : Add query to detect Server Side Template Injection
2020-07-21 18:01:27 +05:30
Taus Brock-Nannestad
cec3694c89
Python: Add type tracker and step summary implementation.
2020-07-17 16:36:56 +02:00
Rasmus Wriedt Larsen
dc7d92ba2f
Python: Autoformat experimental/library-tests/CallGraph/
2020-07-13 16:20:02 +02:00
Rasmus Wriedt Larsen
83bd14b687
Python: Make experimental/library-tests/CallGraph pass for Python 2
...
The import doesn't actually work the intended way, so running
```
$ python python/ql/test/experimental/library-tests/CallGraph/test.py
```
will procude no output. but our extractor will extract the things we need, so
for a quick fix this will need to suffice.
2020-07-13 14:52:28 +02:00
Taus
df3eb9f9c5
Merge pull request #3790 from RasmusWL/python-add-annotated-callgraph-tests
...
Python: Add annotated call-graph tests
2020-07-10 15:38:38 +02:00
Rasmus Wriedt Larsen
7306f58e57
Python: Fix experimental tests
2020-07-07 19:44:43 +02:00
Taus Brock-Nannestad
f07a7bf8cf
Python: Autoformat everything using qlformat.
...
Will need subsequent PRs fixing up test failures (due to deprecated
methods moving around), but other than that everything should be
straight-forward.
2020-07-07 15:43:52 +02:00
Rasmus Wriedt Larsen
d00e7396c4
Python: Consistently use camelCase in annotated call-graph tests
2020-07-06 17:59:16 +02:00
Rasmus Wriedt Larsen
65c4e6c02a
Python: Disable class instantiation annotation for now
...
Adjusting test setup properly requires some deep thinking, and I don't think I'm
ready to do that right now. Added a TODO instead.
2020-07-06 17:48:15 +02:00
Rasmus Wriedt Larsen
cd8ea78420
Python: Autoformat
2020-07-06 17:34:19 +02:00
Rasmus Wriedt Larsen
9e252d5465
Python: Explain random example
2020-07-06 17:30:49 +02:00
Rasmus Wriedt Larsen
849159b279
Python: Unlimited import depth
2020-07-06 17:30:26 +02:00
Rasmus Wriedt Larsen
acfc62cad6
Python: Fix grammar
...
Co-authored-by: Taus <tausbn@gmail.com >
2020-07-06 17:21:29 +02:00
Rasmus Lerchedahl Petersen
33cf96ccb8
Python: Address review comments
2020-07-03 14:11:58 +02:00
Rasmus Lerchedahl Petersen
a9e0288e5b
Python: exclude global vars from local flow
2020-07-03 08:41:10 +02:00
Rasmus Lerchedahl Petersen
bdc68ce6b6
Python: refactor Node class
2020-07-03 08:01:44 +02:00
dilanbhalla
dc73fcc4e8
moved to experimental
2020-07-01 09:54:58 -07:00
Rasmus Lerchedahl Petersen
0b11e77457
Python: make compile
2020-07-01 16:55:44 +02:00
Rasmus Lerchedahl Petersen
79e4f1ee93
Python: Enable consistency check (currently fails)
2020-07-01 09:21:36 +02:00
Rasmus Lerchedahl Petersen
e259281821
Merge branch 'master' of github.com:github/codeql into SharedDataflow
...
to receive updates from data flow library
2020-07-01 07:15:32 +02:00
Rasmus Lerchedahl Petersen
f84adb3c26
Python: stub for clearsContent
...
also remove all `CastNode`s (seems to help)
2020-06-26 13:09:35 +02:00
Rasmus Lerchedahl Petersen
e147e59652
Merge branch 'master' of github.com:github/codeql into SharedDataflow
...
To sync files
2020-06-26 12:01:01 +02:00
Rasmus Lerchedahl Petersen
43f85ef265
Python: typo
2020-06-26 12:00:24 +02:00
Rasmus Lerchedahl Petersen
c5c1c4c0af
Python: started adding some coverage tests
2020-06-25 16:29:41 +02:00
Rasmus Wriedt Larsen
3cc566f703
Merge branch 'master' into python-3521-revived
2020-06-25 12:02:21 +02:00
Rasmus Wriedt Larsen
994db060c7
Python: Use CWE-091 for XSLT
...
As indicated here https://www.zaproxy.org/docs/alerts/90017/
2020-06-25 11:53:12 +02:00
Rasmus Lerchedahl Petersen
415e0c4aac
Python: add suggestion for test cases
2020-06-25 10:46:33 +02:00
Rasmus Lerchedahl Petersen
5973fe8411
Python: scaffold for testing data flow coverage
2020-06-25 10:32:10 +02:00
Rasmus Wriedt Larsen
155bbbdec9
Python: Add annotated call-graph tests
...
See the added README for in-depth details
2020-06-24 22:15:39 +02:00
Rasmus Lerchedahl Petersen
c70cf6d780
Python: better (if imperfect) handling of phi node
2020-06-23 17:25:33 +02:00
Rasmus Lerchedahl Petersen
b759b71ac8
Python: explain the regression test
2020-06-23 11:02:33 +02:00
Rasmus Lerchedahl Petersen
a55b4660d4
Python: support for with-definitions
2020-06-23 07:45:30 +02:00
Rasmus Lerchedahl Petersen
e8289d6fa1
Python: add regression tests and organise tests
2020-06-22 16:36:19 +02:00
Rasmus Lerchedahl Petersen
13bb971b05
Python: sort out some enclosing callable confusion
2020-06-22 14:26:25 +02:00
Rasmus Lerchedahl Petersen
b65e6fba9e
Python: attempt at capturing maximal flows
...
(this is what used to be "all flows")
2020-06-22 11:28:28 +02:00
Rasmus Lerchedahl Petersen
47819bbcda
Python: obtain remaining expected flows
...
- implement encosing callable for more nodes
- implement extra flow for ESSA global variables
2020-06-22 07:36:09 +02:00
Porcupiney Hairs
a519132407
add support for libxml2
2020-06-22 02:01:07 +05:30
Rasmus Lerchedahl Petersen
426b1da552
Python: update sources and sinks
2020-06-19 11:38:15 +02:00
Rasmus Lerchedahl Petersen
9e078da963
Python: Better definition of all flows
...
does not become too big, when we filter out 0-step flows
2020-06-19 11:25:34 +02:00