11 Commits

Author	SHA1	Message	Date
jorgectf	8f8c064632	Modify test	2023-07-24 17:50:22 +02:00
jorgectf	55648ac4de	Add shlex.quote as sanitizer	2023-07-20 15:34:54 +02:00
erik-krogh	ef44cb86c2	remove FPs related to parameters that are meant to be commands	2023-02-03 14:47:55 +01:00
erik-krogh	e9ebba3350	assume shell=False for subprocess calls, fixes FPs in e.g. youtube-dl	2023-02-03 14:47:55 +01:00
erik-krogh	d228cf0e7b	use more API-nodes to model subprocess.run (and friends)	2023-02-03 14:47:55 +01:00
erik-krogh	bce83bfc4e	add failing test for indirectly setting the shell=true flag for subprocess.run	2023-02-03 14:47:55 +01:00
erik-krogh	0a2c7d062c	add Fabric test, and add tracking of the shell flag in Fabric	2023-02-03 14:47:55 +01:00
erik-krogh	6bbc4f4a48	add more tests	2023-02-03 14:47:55 +01:00
erik-krogh	33c506d7fe	add minimal test for Array join as a sink, and learn that the order is flipped compared to JS. Thanks Copilot!	2023-02-03 14:47:55 +01:00
erik-krogh	5bddfc0d79	add test for f-strings as sink	2023-02-03 14:47:55 +01:00
erik-krogh	47a06d2824	add library inputs as a source, and get minimal test to work	2023-02-03 14:47:55 +01:00