8 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	f03a8a838b	Python: Make any routed parameter a RemoteFlowSource ... I'm not 100% sure whether this approach makes everything too magic, but I like the fact that you can't _forget_ to make routed params remove-flow sources.	2020-10-06 03:03:14 +02:00
Rasmus Wriedt Larsen	d7526c40ba	Python: Copy old flask tests to new dataflow setup	2020-10-06 03:02:30 +02:00
Rasmus Wriedt Larsen	71a75ce596	Python: Handle bound methods in flask modeling	2020-09-22 16:33:35 +02:00
Rasmus Wriedt Larsen	5709189c2a	Python: Expand flask test	2020-09-22 16:33:34 +02:00
Rasmus Wriedt Larsen	e614365963	Python: Adopt new approach in flask modeling ... Removed all the dict-like stuff, not sure that is how we should do things.	2020-09-22 16:33:33 +02:00
Rasmus Wriedt Larsen	00ea0cebc3	Python: More Flask modeling kinda works ... It "kinda" works now, but it really is not a pretty solution. Adding all these "tracked" objects is SUPER annoying... it _would_ be possible to skip them, but that seems like it will give the wrong edges for dataflow/taintflow queries :| A good chunk of it should be able to be removed with access-paths like C# does for library modeling. Some of it could be solved by better type-tracking API like API Graphs... but it seems like we generally are just lacking the nice-to-have features like `.getAMemberCall` and the like. See https://github.com/github/codeql/pull/4082/files#diff-9aa94c4d713ef9d8da73918ff53db774L33	2020-09-22 16:28:25 +02:00
Rasmus Wriedt Larsen	3c08590ee4	Python: Expand flask tests a bit	2020-09-22 16:28:24 +02:00
Rasmus Wriedt Larsen	7c205dd3fc	Python: First attempt at modeling Flask	2020-09-22 16:28:21 +02:00