Rasmus Lerchedahl Petersen
ad49eada48
Python: Do not alter codeql-workspaces.yml
...
And remove the qlpack referred to therein.
Instead we rename and duplicate the extesion file
that this qlpack pointed to.
These two extension files are kept in sync by `identical-files.json`.
2023-08-25 11:46:41 +02:00
Rasmus Lerchedahl Petersen
dbc60140e0
Python: move tests to data extensions
...
For these tests, we cannot use the same mechanism, as we want the
data extensions to be available for both tests.
Instead, we create a ql-pack for the test directory and point to
the data entensions from there. This makes the extensions
available for all tests in the directory.
2023-08-10 09:17:34 +02:00
Rasmus Lerchedahl Petersen
168a1e01a4
Python: move test to data extensions
...
For this test, we can simply use the convention,
that a file called `[ql-file-stem].ext.yml` will be used
as data extensions exactly for the test represented by `ql-file`.
2023-08-09 21:22:17 +02:00
Rasmus Lerchedahl Petersen
885e25ff2d
Python: use file-name-convention of *.model.yml
2023-08-09 14:25:33 +02:00
Tom Hvitved
6c989b9c6b
Python: Adjust to data flow refactor
2023-08-07 11:35:23 +02:00
Mathias Vorreiter Pedersen
abe3a816ce
Merge pull request #13851 from MathiasVP/sink-without-states
...
DataFlow: Support stateless `isSink` in `StateConfigSig`s
2023-08-04 18:01:42 +02:00
Asger F
c38cbe859d
Merge pull request #13737 from asgerf/dynamic/fuzzy-models
...
Dynamic: add Fuzzy token
2023-08-03 09:58:24 +02:00
Mathias Vorreiter Pedersen
3007fdab5e
Sync identical files.
2023-08-02 14:33:33 +02:00
Anders Schack-Mulligen
b27a3a81bc
Python: Adjust to use the qlpack data-flow api.
2023-08-01 14:02:33 +02:00
Owen Mansel-Chan
9b2b58a823
Sync files
2023-07-26 21:48:10 +01:00
github-actions[bot]
f91b7a9342
Post-release preparation for codeql-cli-2.14.1
2023-07-21 16:16:25 +00:00
github-actions[bot]
c936a920b0
Release preparation for version 2.14.1
2023-07-20 16:32:27 +00:00
Anders Schack-Mulligen
e72a0b2f8c
Dataflow: Add change notes.
2023-07-19 11:41:15 +02:00
Anders Schack-Mulligen
ae24d68b5d
C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.
2023-07-19 11:41:15 +02:00
Anders Schack-Mulligen
95d17045c9
Dataflow: Sync.
2023-07-19 11:41:15 +02:00
yoff
a1aa16f901
Merge pull request #13745 from GeekMasher/py-mad-xss
...
Python - Add Models as Data support for Reflected XSS Query
2023-07-18 13:39:17 +02:00
Mathew Payne
6ef55aa14f
Update python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2023-07-17 15:44:38 +01:00
yoff
d032bf5c0e
Merge pull request #13685 from RasmusWL/captured-variables-default-param-value
...
Python: Model parameter with default value as `DefinitionNode`
2023-07-17 14:25:13 +02:00
Mathew Payne
e3d75c488e
Merge branch 'main' into py-mad-xss
2023-07-17 11:08:09 +01:00
Mathew Payne
cf65ab834d
fix: formatting issue
2023-07-14 12:31:40 +01:00
Mathew Payne
4c1612f2dd
feat: add change log notes
2023-07-14 12:28:51 +01:00
Mathew Payne
c292984338
feat: add MaD to XSS query
2023-07-14 12:25:54 +01:00
Asger F
eb5c600a6b
Python: fix some whitespace
2023-07-13 15:42:34 +02:00
Asger F
2b0a8097e6
Python: implement Fuzzy for Python
2023-07-13 15:42:34 +02:00
Asger F
919cb07c1e
Sync ApiGraphModels.qll
2023-07-13 15:42:33 +02:00
Anders Schack-Mulligen
837df2ad37
Dataflow: Sync.
2023-07-13 10:55:39 +02:00
Ed Minnix
63299688d5
Add change notes for default implementations of isBarrier and isAdditionalFlowStep
2023-07-12 15:21:16 -04:00
Ed Minnix
3db2644008
Python: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:25 -04:00
Ed Minnix
43f870e395
Python: Add default implementation of StateConfigSig::isBarrier/2
2023-07-12 15:06:25 -04:00
Rasmus Wriedt Larsen
98ed5cf522
Python: Move not this instanceof ParameterDefinition logic
2023-07-12 11:31:27 +02:00
Rasmus Wriedt Larsen
83ca47f32c
Python: Add change-note
2023-07-11 11:33:06 +02:00
Rasmus Wriedt Larsen
a1225674ee
Python: Add implementation note about why not targeting ESSA node
2023-07-11 11:32:26 +02:00
Jeroen Ketema
92ee31849c
Merge pull request #13643 from jketema/inline-5
...
Rework the remaining inline expectation tests to use the parameterized module
2023-07-11 11:29:14 +02:00
Mathias Vorreiter Pedersen
a4c0063ab1
Merge pull request #13679 from MathiasVP/speedup-big-step
...
DataFlow: Speed up the big step relation
2023-07-11 09:44:17 +01:00
Jeroen Ketema
8cee4f37a4
Merge branch 'main' into inline-5
2023-07-11 10:30:11 +02:00
Asger F
d88f557dbe
Merge pull request #13683 from asgerf/rb/api-graph-noobject
...
Ruby: exclude Object class from API graph
2023-07-10 12:51:15 +02:00
Mathias Vorreiter Pedersen
44f23bfa59
Merge pull request #13690 from github/post-release-prep/codeql-cli-2.14.0
...
Post-release preparation for codeql-cli-2.14.0
2023-07-07 23:39:38 +01:00
github-actions[bot]
13cf054a9d
Post-release preparation for codeql-cli-2.14.0
2023-07-07 14:55:41 +00:00
Rasmus Wriedt Larsen
44c67171f2
Python: Fix default parameter value flow
...
Somehow the previous fix didn't work :O
2023-07-07 16:17:07 +02:00
Rasmus Wriedt Larsen
a850a481d0
Merge pull request #13676 from RasmusWL/aiohttp-ssrf-sink
...
Python: Relax restriction of flow through `async with`
2023-07-07 14:55:57 +02:00
Rasmus Wriedt Larsen
43b025015d
Python: Avoid overlap between AssignmentDefinition and ParameterDefinition
2023-07-07 14:26:28 +02:00
Rasmus Wriedt Larsen
4e8a1144f2
Python: Remove explicit jumpStep for default parameter values
...
tests added in https://github.com/github/codeql/pull/5238
functionality added in https://github.com/github/codeql/pull/6640
2023-07-07 14:24:51 +02:00
Rasmus Wriedt Larsen
4920557c36
Merge pull request #13670 from jorgectf/seclab/xxe-sanitizer
...
Python: Add `markupsafe` as XXE sanitizer
2023-07-07 12:30:26 +02:00
Rasmus Wriedt Larsen
70994b9c57
Python: Accept points-to .expected changes
...
They look pretty safe to me, but haven't given them a whole lot of
thought.
2023-07-07 12:14:19 +02:00
Rasmus Wriedt Larsen
c5e8e232e5
Python: Fix dataflow consistencies for default parameter values
2023-07-07 11:55:07 +02:00
Rasmus Wriedt Larsen
6f3cb67050
Python: Model parameter with default value as DefinitionNode
2023-07-07 11:54:50 +02:00
Rasmus Wriedt Larsen
64a86e8fd7
Python: Update inline expectations
2023-07-07 11:32:05 +02:00
Rasmus Wriedt Larsen
cfd2d09a61
Python: Add test for DefinitionNode default parameter value
2023-07-07 11:00:16 +02:00
Mathias Vorreiter Pedersen
1064efa8b3
Update python/ql/lib/change-notes/released/0.10.0.md
2023-07-07 09:25:03 +01:00
Mathias Vorreiter Pedersen
82ff045315
Update python/ql/lib/CHANGELOG.md
2023-07-07 09:24:50 +01:00
