Rasmus Wriedt Larsen
6db3b37ed7
Python: Use separate directory for subclass capture models
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
c4abffe77e
Python: Ignore any captured info with tests in it
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
de41f199fc
Python: Allow single file processing
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
2c0bed174f
Python: Remove suspicious packages
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
0b5c73ae1e
Python: Allow any .bqrs file
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
b24e565128
SubclassFinder: don't include site-packages
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
aa5eee1eac
Python: Revert manual pickle modeling
...
This reverts commit 62910f0cab525ca4d4901c4c27f6e6b22c3375fc.
This reverts commit 75a8197879ec47094d9b18f3dab7bcc1c1cdba28.
We don't find `kombu.serialization.pickle_load` since we respect
`__all__`. I think that was an attempt to not flood the captured
modeling with useless re-exports, but I think we've ended up doing that
anyway... we should consider to remove that restriction!
see 21d7df29c7/kombu/serialization.py (L29)
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
f74581ad09
Revert "Python: Model owslib.etree.etree directly"
...
This reverts commit 1213e786519a11142746fd3a725c874181f3a42b.
By fixing a few bugs in the SubclassFinder + manually running Find.ql on the geonode DB from DCA, I found that the installed version of owslib had both: https://github.com/geopython/OWSLib/blob/0.27.2/owslib/etree.py
2023-12-08 11:27:53 +01:00
Rasmus Wriedt Larsen
6ef9a2b11e
Python: Fix problem if import is used
...
I fixed it in both predicates... I think we might still be able to remove
`newDirectAlias` -- but with it being better, it will allow us to better test if `newImportAlias` actually cover everything we need!
2023-12-08 11:27:52 +01:00
Rasmus Wriedt Larsen
fcdc8102e2
Python: Add test highlight problem is import is used :O
2023-12-08 11:27:52 +01:00
Rasmus Wriedt Larsen
f1fd9b4c7a
Python: Fix underlying problem of not using Alias
2023-12-08 11:27:52 +01:00
Rasmus Wriedt Larsen
a956e1f613
Python: Use django View instead of MethodView
...
Due to the 'only model most specific spec' logic highlighted in previous
commit, I'm changing away from MethodView/View, and use Django view instead.
In practice this shouldn't matter at all, but for writing tests it would
have been a nice fix to only have the "same name but more specific"
logic apply when it's the same _definition_ location. We used to have
this information available, but right now we don't... so instead of
spending a lot of time rewriting the core library, I simply used a
different class :D :O :(
2023-12-08 11:27:52 +01:00
Rasmus Wriedt Larsen
03aa2e27df
Python: Explain the funky logic in Find.ql
2023-12-08 11:27:52 +01:00
Rasmus Wriedt Larsen
1f8f6dd0ec
Python: Ensure no deps visible in FindSubclass tests
2023-12-08 11:27:52 +01:00
Rasmus Wriedt Larsen
af2d783b38
Python: More examples of things to handle in find-subclass
2023-12-08 11:27:52 +01:00
Taus
fa6aec7ae2
Python: Model owslib.etree.etree directly
...
Somehow, this alias did not get picked up by the tooling.
2023-12-08 11:27:52 +01:00
Taus
6d40e7e0fc
Python: Add extensible modelling for lxml.etree
2023-12-08 11:27:52 +01:00
Taus
5b9d56774b
Python: Refactor references to ElementTree
...
This would probably be better as a module, but I wanted to verify
first that this would yield the right results.
2023-12-08 11:27:52 +01:00
Taus
d29879a844
Python: Model kombu.serialization
...
More `pickle` wrappers.
2023-12-08 11:27:52 +01:00
Taus
a6dc6f3e42
Python: Add model for flask.restful
...
Not subclass-related -- just an alias.
2023-12-08 11:27:52 +01:00
Taus
6261a94986
Python: Add cloudpickle model
...
This one didn't seem to fit into the subclass approach, so I just modeled
it manually.
2023-12-08 11:27:52 +01:00
Taus
5920a8fad6
Python: Add meta-query for "interesting" taint sinks
2023-12-08 11:27:52 +01:00
Taus
43fe9ca31d
Python: Model rest_framework.exceptions.APIException
...
Only models the subclasses of `APIException` that share the same interface as
`APIException` itself with regard to the `getBody` predicate.
2023-12-08 11:27:52 +01:00
Taus
1f66659ff2
Python: Add Django FileField model
2023-12-08 11:27:52 +01:00
Taus
aa3f1cf3e1
Python: extend aiohttp model
2023-12-08 11:27:52 +01:00
Taus
b5bffb2220
Python: Add aioch model
2023-12-08 11:27:52 +01:00
Taus
875fa0b8f0
Python: Add Peewee model
2023-12-08 11:27:52 +01:00
Taus
5e3bdb8701
Python: Add Pydantic model
2023-12-08 11:27:51 +01:00
Taus
9d93afe128
Python: Add logging.Logger model
2023-12-08 11:27:51 +01:00
Taus
dea61e14d1
Python: Add Urllib3 model
2023-12-08 11:27:51 +01:00
Taus
1269a98d2b
Python: Add Tornado models
2023-12-08 11:27:51 +01:00
Taus
6093bb9fd4
Python: add some stdlib models
2023-12-08 11:27:51 +01:00
Taus
4879a931eb
Python: Add starlette.requests.URL model
2023-12-08 11:27:51 +01:00
Taus
a3f7885787
Python: Add SqlAlchemy model
2023-12-08 11:27:51 +01:00
Taus
422733f32a
Python: Add rest_framework model
2023-12-08 11:27:51 +01:00
Taus
5afead5896
Python: Add Pycurl model
2023-12-08 11:27:51 +01:00
Taus
f1a72311ed
Python: add MultiDict model
2023-12-08 11:27:51 +01:00
Taus
62db8cc633
Python: Add MarkupSafe model
2023-12-08 11:27:51 +01:00
Taus
cdb0ac524d
Python: Add invoke model
2023-12-08 11:27:51 +01:00
Taus
699b6b8bef
Python: Add httpx model
2023-12-08 11:27:51 +01:00
Taus
6128c89518
Python: Add Flask app and blueprint models
2023-12-08 11:27:51 +01:00
Taus
a81f8ea54d
Python: Add Django RawSQL and HttpRequest models
2023-12-08 11:27:51 +01:00
Taus
ff9482f81b
Python: Add fabric connection model
2023-12-08 11:27:51 +01:00
Taus
947aa099e0
Python: Add aiohttp.ClientSession model
2023-12-08 11:27:51 +01:00
Taus
f5bed2d955
Python: Add clickhouse_driver model
2023-12-08 11:27:51 +01:00
Taus
83e6e51e95
Python: Add starlette.websocket model
2023-12-08 11:27:50 +01:00
Rasmus Wriedt Larsen
f19b672656
Python: Also capture alias with new name
2023-12-08 11:27:50 +01:00
Rasmus Wriedt Larsen
e7d55736b0
Python: Add test of find-subclass code
2023-12-08 11:27:50 +01:00
Rasmus Wriedt Larsen
7d86a8d7f1
Python: Improve speed of process-mrva-results.py
...
Same trick as 'generate-code-scanning-query-list.py'
2023-12-08 11:27:50 +01:00
Taus
750f14f859
Python: Add http.client.HTTPResponse model
2023-12-08 11:27:50 +01:00
