yoff
42090b55fa
Merge branch 'main' into python/captured-variables-for-typetracking
2023-05-04 13:52:23 +02:00
yoff
d1206ea620
Update python/ql/test/library-tests/ApiGraphs/py3/test_captured_inheritance.py
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-05-04 13:52:08 +02:00
Kasper Svendsen
d9f29a85d6
Python: Enable implicit this warnings
2023-05-04 10:16:52 +02:00
Mathias Vorreiter Pedersen
77001a070b
Merge branch 'main' into identity-consistency-check
2023-05-03 22:01:06 +01:00
Mathias Vorreiter Pedersen
e650df810d
Python: Accept consistency changes.
2023-05-03 20:33:00 +01:00
Rasmus Lerchedahl Petersen
64068f1c88
python: longer name and longer comment
2023-05-03 18:23:08 +02:00
Rasmus Lerchedahl Petersen
6d9fd24f1b
python: update comments
2023-05-03 18:10:15 +02:00
yoff
e49f7a5d33
Update python/ql/test/experimental/dataflow/variable-capture/by_value.py
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-05-03 18:03:39 +02:00
yoff
a905917123
Merge pull request #12937 from RasmusWL/fix-module-variable-node
...
Python: Hide `ModuleVariableNode` in data-flow paths
2023-05-03 17:58:26 +02:00
Erik Krogh Kristensen
f29db40371
Merge pull request #13011 from kaspersv/kaspersv/explicit-this-receivers-shared2
...
JS, Python, Ruby: Make implicit this receivers explicit
2023-05-03 15:34:59 +02:00
Ian Lynagh
b56b843d13
Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1
...
Post-release preparation for codeql-cli-2.13.1
2023-05-03 13:12:10 +01:00
Kasper Svendsen
aca2ace843
JS, Python, Ruby: Make implicit this receivers explicit
2023-05-03 13:51:51 +02:00
Kasper Svendsen
3eb5a95ee3
Python: Make implicit this receivers explicit
2023-05-03 12:16:21 +02:00
Sim4n6
6d3fdc3a07
all forms considered+ more unicode normalize sink
2023-05-02 21:18:37 +01:00
Sim4n6
083cd612cd
add a change note markdown
2023-05-02 15:17:03 +01:00
Sim4n6
1fa1a4e268
Add Unicode Bypass Validation query tests and help
2023-05-02 15:09:16 +01:00
Rasmus Wriedt Larsen
c89b57997a
Python: Change variable capture tests to use fresh variable names
...
Instead of reusing `nonSink0` for both captureOut1NotCalled and
captureOut2NotCalled tests (I used 1/2 naming scheme to match things up
nicely).
I also added a comment highlighting that `m` is the function that is not
called (since I overlooked that initially :O)
2023-05-02 14:13:56 +02:00
github-actions[bot]
18d4af994d
Post-release preparation for codeql-cli-2.13.1
2023-05-02 10:50:20 +00:00
Anders Schack-Mulligen
ca09649679
Dataflow: Forward hasLocationInfo.
2023-05-02 10:48:32 +02:00
Anders Schack-Mulligen
5927bb2030
Dataflow: Replace "extends Node" with "instanceof Node".
2023-05-02 09:48:34 +02:00
Rasmus Lerchedahl Petersen
e65ff68547
python: update debug queries
2023-05-01 14:58:42 +02:00
Anders Schack-Mulligen
6c8cb0dc5e
Merge pull request #12930 from aschackmull/dataflow/split-typedcontent
...
Dataflow: Refactor access paths to split TypedContent into an explicit pair
2023-05-01 14:58:15 +02:00
yoff
0bc6f10a71
Merge pull request #12220 from amammad/amammad-python-paramiko
...
add some python sinks for paramiko ssh clients
2023-05-01 11:38:50 +02:00
erik-krogh
18f8c69261
satisfy the signature of HostnameRegexpSig, which doesn't understand RegExpSink
2023-05-01 10:49:51 +02:00
erik-krogh
d5029c94b6
changes based on review
2023-05-01 10:42:15 +02:00
erik-krogh
a7f733ab8c
move RegExpInterpretation into Concepts.qll
2023-05-01 10:42:15 +02:00
erik-krogh
2fad406b5c
move StdLibRegExpInterpretation to Stdlib.qll
2023-05-01 10:42:15 +02:00
erik-krogh
a64848c022
simplify StdLibRegExpInterpretation to only consider re.compile, because the rest is handled by RegexExecution
2023-05-01 10:42:14 +02:00
erik-krogh
113ce61d40
fix nit in qldoc
2023-05-01 10:42:14 +02:00
erik-krogh
2d2602b668
use that strings are local-source-nodes in regex-tracking
2023-05-01 10:42:14 +02:00
erik-krogh
3cde11efc8
use StrConst instead of Bytes and Unicode
2023-05-01 10:42:14 +02:00
erik-krogh
ffa3425195
rename away from deprecated alias in test-files
2023-05-01 10:42:14 +02:00
erik-krogh
f2adc4f958
add missing qldoc
2023-05-01 10:42:14 +02:00
erik-krogh
59cc90e547
move Regex into a ParseRegExp file, and rename the class to RegExp
2023-05-01 10:42:14 +02:00
erik-krogh
556bb41999
move all code to find Regex flag into a module
2023-05-01 10:42:14 +02:00
erik-krogh
f0254fc089
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
erik-krogh
e677b62241
use type-tracking instead of global dataflow for tracking regular expressions
2023-05-01 10:41:53 +02:00
Rasmus Wriedt Larsen
1bba5258d6
Merge pull request #11280 from RasmusWL/dict-dataflow-steps
...
Python: Support more dictionary read/store steps
2023-04-30 16:07:29 +02:00
github-actions[bot]
3bd29171fb
Release preparation for version 2.13.1
2023-04-28 12:14:35 +00:00
amammad
b3669b818b
v1.3 change name according to camelCase
2023-04-28 04:56:47 +02:00
Mathias Vorreiter Pedersen
e506f638fc
DataFlow: Sync identical files.
2023-04-27 18:40:33 +01:00
yoff
54ced06ada
Merge branch 'main' into python/captured-variables-for-typetracking
2023-04-27 17:32:41 +02:00
Anders Schack-Mulligen
71ae0909d8
Dataflow: Enforce type pruning in all forward stages.
2023-04-27 14:55:26 +02:00
Anders Schack-Mulligen
9140cbefc0
Dataflow: Sync.
2023-04-27 14:55:23 +02:00
Anders Schack-Mulligen
246d904712
Merge pull request #12948 from aschackmull/dataflow/pathnode-type-tostring
...
Dataflow: Add type to PathNode.toString.
2023-04-27 14:14:10 +02:00
Rasmus Wriedt Larsen
aa216e6535
Python: Update inline expectations
2023-04-27 12:04:05 +02:00
Rasmus Wriedt Larsen
d73289ac4e
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
amammad
a541fdf5e5
v1.2 code quality improvements including commnets too
2023-04-27 08:30:46 +02:00
amammad
1bf159e9a9
Merge branch 'github:main' into amammad-python-paramiko
2023-04-26 23:28:29 -07:00
Arthur Baars
128d102bbc
Merge pull request #12871 from aibaars/py-yaml
...
Python: add YAML support
2023-04-26 18:13:26 +02:00
