7982 Commits

Author	SHA1	Message	Date
github-actions[bot]	92af5f5386	Post-release preparation for codeql-cli-2.15.4	2023-12-06 22:59:22 +00:00
github-actions[bot]	c04457e9e7	Release preparation for version 2.15.4	2023-12-06 21:11:50 +00:00
Rasmus Wriedt Larsen	2fed0adde7	Merge pull request #8457 from RasmusWL/add-dataflow-consistency-query ... Python: Add dataflow consistency query	2023-12-04 12:50:46 +01:00
Taus	4ef1fe49e3	Merge pull request #14918 from github/tausbn/python-support-tarslip-extraction-filters ... Python: Add support for extraction filters	2023-11-30 22:55:09 +01:00
Taus	6e279183d9	Python: Remove unused unsafeFilter predicates	2023-11-28 13:54:17 +00:00
Taus	91643ad08f	Python: Update hasUnsafeFilter to use API graph ... This will probably break the tests in the short run. I'll fix the remaining issues in a follow-up commit. Co-authored-by: Rasmus Wriedt Larsen <rasmuswl@github.com>	2023-11-28 14:48:26 +01:00
Rasmus Wriedt Larsen	2c10160ad4	Python: Highlight we actually want post-update nodes for *args and **kwargs arguments	2023-11-28 14:07:03 +01:00
Rasmus Wriedt Larsen	02f2031239	Python: Ensure other call for super().foo	2023-11-28 14:04:51 +01:00
Rasmus Wriedt Larsen	3c82653b63	Python: Highlight missing post-update flow for *args and **kwargs	2023-11-28 10:59:48 +01:00
Taus	ad1a86879e	Python: Add change note	2023-11-27 14:39:32 +00:00
Taus	95e9284d08	Python: Add support for extraction filters ... Adds support for extraction filters as defined in https://peps.python.org/pep-0706/ and implemented in Python 3.12. By my reading, setting the filter to `'data'` or `'tar'` is probably safe, whereas `'fully_trusted'` or the default (which is the same as `None`) is not. For now, I have just added this modelling to the tarslip query. We could also share it with the modelling of `shutil.unpack_archive` (which has also gained a `filter` argument), but it was unclear to me where we should put this modelling in that case. Perhaps the best solution would be to merge the experimental `py/tarslip-extended` query into the existing query (in which case the current location is perhaps not too bad).	2023-11-27 14:11:17 +00:00
Rasmus Wriedt Larsen	4e0cca9a41	Merge pull request #14353 from GeekMasher/py-restframework ... Python: support `*args` and `**kwargs` in request handlers	2023-11-23 14:04:36 +01:00
Rasmus Wriedt Larsen	d056706af5	Merge pull request #14725 from RasmusWL/re-modeling ... Python: Add taint-flow modeling for `re` module	2023-11-23 11:35:36 +01:00
Rasmus Wriedt Larsen	3d46129bbf	Python: Remove intermediary steps from taint-test ... These were leftovers from old way of propagating taint	2023-11-23 10:40:25 +01:00
Rasmus Wriedt Larsen	4a98ed903e	Python: Fix consistency for bound-methods used in list-comp	2023-11-22 14:07:40 +01:00
Rasmus Wriedt Larsen	67b1414177	Python: Highlight even more cases for multipleArgumentCallExclude	2023-11-22 11:25:23 +01:00
Rasmus Wriedt Larsen	30891ca4aa	Merge pull request #14861 from yoff/python/demonstrate-def-use-explosion ... Python: test demonstrating the need for phi nodes	2023-11-22 09:57:10 +01:00
Rasmus Lerchedahl Petersen	d288c4a709	Python: rename folder	2023-11-21 16:48:41 +01:00
yoff	4f7fde7b87	Merge pull request #14858 from yoff/python/demonstrate-use-use-explosion ... Python: Test demonstrating the need for phi-read-nodes	2023-11-21 16:44:11 +01:00
Rasmus Wriedt Larsen	63fcaca82f	Python: add change-note	2023-11-21 16:02:41 +01:00
Rasmus Wriedt Larsen	a0867b4f66	Python: More HTTP request handler *args/**kwargs modeling ... I looked through all `override Parameter getARoutedParameter() {` in our codebase, and we now modeling *args/**kwargs for all of them 👍	2023-11-21 16:02:40 +01:00
Rasmus Wriedt Larsen	f9d7becd04	Python: Make multipleArgumentCallExclude more specific	2023-11-21 15:57:12 +01:00
Rasmus Lerchedahl Petersen	c552bc5eb1	Python: fix test output	2023-11-21 15:48:22 +01:00
Rasmus Lerchedahl Petersen	077e51c6c6	Python: fix test output	2023-11-21 15:47:18 +01:00
Rasmus Lerchedahl Petersen	4857960f72	Python: test demonstrating the need for phi nodes ... or a dataflow node playing that role, at least.	2023-11-21 15:40:05 +01:00
Rasmus Lerchedahl Petersen	f138fc0d2d	Python: Test demonstrating need for phi-read-nodes ... Or for a data flow node filling that role, at least.	2023-11-21 13:54:02 +01:00
Rasmus Wriedt Larsen	37d03ee0f3	Python: Accept .expected changes ... Note that in this case, since there is a known `django.urls.path` route-setup, we know that the request-handler will only be passed keyword arguments, so it is not a mistake that `*args` is not considered a routed-parameter here (although it certainly wouldn't have hurt us if we did consider it a routed-parameter either).	2023-11-21 13:46:55 +01:00
Rasmus Wriedt Larsen	1bc8a6de61	Python: Fixup mistaken modelling	2023-11-21 13:46:23 +01:00
Rasmus Wriedt Larsen	36a846ee32	Python: Fix django regex path handling	2023-11-21 13:08:45 +01:00
Rasmus Wriedt Larsen	c51c15ae74	Python: Add test of routed parameters to *args ... Also move the **kwargs and *args test to a more appropriate file	2023-11-21 13:01:01 +01:00
Rasmus Wriedt Larsen	2ec1822e9c	Python: Accept consistency-errors in django-orm	2023-11-21 12:44:42 +01:00
Rasmus Wriedt Larsen	5f26790b90	Merge branch 'main' into py-restframework	2023-11-21 11:57:48 +01:00
Rasmus Wriedt Larsen	df9fb141b8	Python: Remove old manual consistency query tests	2023-11-21 11:50:23 +01:00
Rasmus Wriedt Larsen	b6df6b7c99	Python: Add dataflow consistency query	2023-11-21 11:33:28 +01:00
Rasmus Wriedt Larsen	71c017f053	Python: Apply suggestions from code review ... Co-authored-by: yoff <lerchedahl@gmail.com>	2023-11-21 10:07:42 +01:00
Rasmus Wriedt Larsen	c8301fc5f0	Merge pull request #14851 from RasmusWL/variable-caputre-list-comprehension ... Python: Add test for variable reference in list comprehension	2023-11-20 17:10:34 +01:00
Rasmus Wriedt Larsen	db1499d5b0	Python: Add test for variable reference in list comprehension	2023-11-20 16:41:34 +01:00
Taus	10b72a0c39	Python: Fix scope of type parameters ... This takes care of scoping for type parameters on functions, but not type aliases or classes. For classes, the _type parameters_ now have the correct `Class` as scope, but all their child nodes do not (e.g. the `Name` inside a `TypeParameter`). This has to do with how the `py_scopes` relation is emitted by the extractor, since `Name`s are expressions.	2023-11-20 13:31:21 +00:00
Taus	36201105b9	Merge branch 'main' into tausbn/python-add-support-for-python-3.12-type-syntax	2023-11-20 13:27:54 +00:00
Chris Campbell	27a2781954	Merge branch 'github:main' into main	2023-11-20 12:15:45 +00:00
github-actions[bot]	bad499e360	Post-release preparation for codeql-cli-2.15.3	2023-11-17 14:35:41 +00:00
Chris Campbell	114b694553	Remove @precision values, correct missing tags	2023-11-16 15:50:41 +00:00
Taus	216cd88225	Merge branch 'main' into tausbn/python-add-support-for-python-3.12-type-syntax	2023-11-16 15:25:06 +00:00
Taus	635bcd4fa2	Python: Add change note	2023-11-16 15:14:30 +00:00
github-actions[bot]	6ec9b95072	Release preparation for version 2.15.3	2023-11-16 13:07:16 +00:00
Henry Mercer	0c1fb8c881	Merge pull request #14811 from github/henrymercer/remove-lines-of-non-user-code-from-summary ... Remove LoC metrics from the analysis summary	2023-11-16 12:30:55 +00:00
Henry Mercer	de83929a60	Remove LoC metrics from the analysis summary	2023-11-16 11:36:44 +00:00
Rasmus Wriedt Larsen	25d3af9236	Merge branch 'main' into clean-tests	2023-11-16 11:21:01 +01:00
Taus	fd750a3bf0	Merge branch 'main' into tausbn/python-add-support-for-python-3.12-type-syntax	2023-11-16 09:59:44 +00:00
Rasmus Wriedt Larsen	71ef98584d	Merge pull request #14791 from RasmusWL/python-3.12 ... Python: Update `.expected` to support Python 3.12	2023-11-16 10:42:48 +01:00