hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-21 06:37:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
60,337 Commits 1,759 Branches 167 Tags
0496e6fae1061f7087a2639aaf8f78a62acaaba1
Commit Graph

7944 Commits

Author SHA1 Message Date
Rasmus Wriedt Larsen
0496e6fae1 Python: Remove suspicious packages 2023-11-13 13:56:02 +01:00
Rasmus Wriedt Larsen
3c919ea7dd Python: Allow any .bqrs file 2023-11-13 13:56:02 +01:00
Rasmus Wriedt Larsen
6ddc2596fc SubclassFinder: don't include site-packages 2023-11-13 13:56:02 +01:00
Rasmus Wriedt Larsen
8dfc3e5679 Remove old auto-modeling 2023-11-13 13:56:02 +01:00
Rasmus Wriedt Larsen
addcd12107 Python: auto model 2023-11-13 13:56:02 +01:00
Rasmus Wriedt Larsen
6425a810ad Python: auto model 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
954e8f9ecb Python: Revert manual pickle modeling 
This reverts commit 62910f0cab525ca4d4901c4c27f6e6b22c3375fc.
This reverts commit 75a8197879ec47094d9b18f3dab7bcc1c1cdba28.

We don't find `kombu.serialization.pickle_load` since we respect
`__all__`. I think that was an attempt to not flood the captured
modeling with useless re-exports, but I think we've ended up doing that
anyway... we should consider to remove that restriction!

see 21d7df29c7/kombu/serialization.py (L29)
 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
9765cee27c Revert "Python: Model owslib.etree.etree directly" 
This reverts commit 1213e786519a11142746fd3a725c874181f3a42b.

By fixing a few bugs in the SubclassFinder + manually running Find.ql on the geonode DB from DCA, I found that the installed version of owslib had both: https://github.com/geopython/OWSLib/blob/0.27.2/owslib/etree.py
 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
c4f5924d84 Python: Fix problem if import is used 
I fixed it in both predicates... I think we might still be able to remove
`newDirectAlias` -- but with it being better, it will allow us to better test if `newImportAlias` actually cover everything we need!
 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
f4ccc629da Python: Add test highlight problem is import is used :O 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
b7f43354fa Python: Fix underlying problem of not using Alias 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
ef693ea0aa Python: Use django View instead of MethodView 
Due to the 'only model most specific spec' logic highlighted in previous
commit, I'm changing away from MethodView/View, and use Django view instead.

In practice this shouldn't matter at all, but for writing tests it would
have been a nice fix to only have the "same name but more specific"
logic apply when it's the same _definition_ location. We used to have
this information available, but right now we don't... so instead of
spending a lot of time rewriting the core library, I simply used a
different class :D :O :(
 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
8c9204a345 Python: Explain the funky logic in Find.ql 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
a937e249a1 Python: Ensure no deps visible in FindSubclass tests 2023-11-13 13:56:01 +01:00
Rasmus Wriedt Larsen
3931ce7f29 Python: More examples of things to handle in find-subclass 2023-11-13 13:56:01 +01:00
Taus
ce953d241e Python: Model owslib.etree.etree directly 
Somehow, this alias did not get picked up by the tooling.
 2023-11-13 13:56:01 +01:00
Taus
85eb3fa460 Python: auto model 
Just the missing sinks suite.
 2023-11-13 13:56:01 +01:00
Taus
e558ea796d Python: Add extensible modelling for lxml.etree 2023-11-13 13:56:01 +01:00
Taus
81b9ee9328 Python: auto model 
Based on the usual suites.
 2023-11-13 13:56:01 +01:00
Taus
ce3a0b07d2 Python: Refactor references to ElementTree 
This would probably be better as a module, but I wanted to verify
first that this would yield the right results.
 2023-11-13 13:56:01 +01:00
Taus
c485e31314 Python: Model kombu.serialization 
More `pickle` wrappers.
 2023-11-13 13:56:01 +01:00
Taus
f30cc7c2d4 Python: Add model for flask.restful 
Not subclass-related -- just an alias.
 2023-11-13 13:56:01 +01:00
Taus
75235c0c02 Python: Add cloudpickle model 
This one didn't seem to fit into the subclass approach, so I just modeled
it manually.
 2023-11-13 13:56:01 +01:00
Taus
a737685307 Python: Add meta-query for "interesting" taint sinks 2023-11-13 13:56:00 +01:00
Taus
3ddac90482 Python: auto model 
`APIException` stuff
 2023-11-13 13:56:00 +01:00
Taus
aaaa942fa0 Python: Model rest_framework.exceptions.APIException 
Only models the subclasses of `APIException` that share the same interface as
`APIException` itself with regard to the `getBody` predicate.
 2023-11-13 13:56:00 +01:00
Taus
1e3ca8aeb5 Python: auto model 
A few more models arising from the API graph fix
 2023-11-13 13:56:00 +01:00
Taus
7d185922d8 Python: auto model 
I hope you like models, because here's a bunch of them!
(Based on MRVA top 1000 and the missing sinks suite.)
 2023-11-13 13:56:00 +01:00
Taus
10898b00ab Python: Add Django FileField model 2023-11-13 13:56:00 +01:00
Taus
5feb2a7726 Python: extend aiohttp model 2023-11-13 13:56:00 +01:00
Taus
70491ce3a0 Python: Add aioch model 2023-11-13 13:56:00 +01:00
Taus
55dc75615a Python: Add Peewee model 2023-11-13 13:56:00 +01:00
Taus
f0102be052 Python: Add Pydantic model 2023-11-13 13:56:00 +01:00
Taus
c2df81a838 Python: Add logging.Logger model 2023-11-13 13:56:00 +01:00
Taus
94e0bc06c7 Python: Add Urllib3 model 2023-11-13 13:56:00 +01:00
Taus
0844563523 Python: Add Tornado models 2023-11-13 13:56:00 +01:00
Taus
5016c5568c Python: add some stdlib models 2023-11-13 13:56:00 +01:00
Taus
359a162522 Python: Add starlette.requests.URL model 2023-11-13 13:56:00 +01:00
Taus
1c0af9d759 Python: Add SqlAlchemy model 2023-11-13 13:56:00 +01:00
Taus
84ba18cfc2 Python: Add rest_framework model 2023-11-13 13:56:00 +01:00
Taus
e060cfc554 Python: Add Pycurl model 2023-11-13 13:56:00 +01:00
Taus
ebd9802e74 Python: add MultiDict model 2023-11-13 13:55:59 +01:00
Taus
1178894ad4 Python: Add MarkupSafe model 2023-11-13 13:55:59 +01:00
Taus
c08587c84c Python: Add invoke model 2023-11-13 13:55:59 +01:00
Taus
4f75e5fa5c Python: Add httpx model 2023-11-13 13:55:59 +01:00
Taus
da01b95801 Python: Add Flask app and blueprint models 2023-11-13 13:55:59 +01:00
Taus
e1e4ec8936 Python: Add Django RawSQL and HttpRequest models 2023-11-13 13:55:59 +01:00
Taus
8500acd996 Python: Add fabric connection model 2023-11-13 13:55:59 +01:00
Taus
0d20a712fd Python: Add aiohttp.ClientSession model 2023-11-13 13:55:59 +01:00
Taus
7acf287c70 Python: Add clickhouse_driver model 2023-11-13 13:55:59 +01:00