5 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	ca93f4d223	Python: Accept .expected changes	2023-08-11 10:36:05 +02:00
Rasmus Lerchedahl Petersen	9cb83fcdc9	python: add summaries for ... copy, pop, get, getitem, setdefault Also add read steps to taint tracking. Reading from a tainted collection can be done in two situations: 1. There is an acces path In this case a read step (possibly from a flow summary) gives rise to a taint step. 2. There is no access path In this case an explicit taint step (possibly via a flow summary) should exist.	2023-05-26 14:04:15 +02:00
Rasmus Wriedt Larsen	d73289ac4e	Python: Accept .expected changes	2023-04-27 11:54:39 +02:00
Rasmus Wriedt Larsen	b01a0ae696	Python: Adjust .expected after flask source change ... It's really hard to audit that this is all good.. I tried my best with `icdiff` though -- and there is a problem with ql/src/experimental/Security/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql that needs to be fixed in the next commit	2022-10-03 20:35:49 +02:00
haby0	4195eef9ba	Add CSV injection model	2022-03-15 15:15:38 +08:00