8 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	f75e65c67d	Python: Move LogInjection to new dataflow API	2023-08-28 15:27:50 +02:00
erik-krogh	944ca4a0da	fix some more style-guide violations in the alert-messages	2022-10-07 11:23:34 +02:00
erik-krogh	089ce5a8a4	change alert messages of path queries to use the same template	2022-09-02 14:45:40 +02:00
Rasmus Wriedt Larsen	695553ba9f	Python: Deprecate old non-Query.qll dataflow defs	2022-03-21 15:03:22 +01:00
Rasmus Lerchedahl Petersen	ecea392a08	python: rewrite qhelp overview ... (combining the Java version and the JS version)	2022-02-01 10:47:18 +01:00
Rasmus Lerchedahl Petersen	26befebfc2	python: drop precision and add severity score ... Given both the original FP score and our concerns regarding sanitizers, `@precision medium`, which is aligned with other languages, feels appropriate.	2022-02-01 10:34:36 +01:00
Rasmus Lerchedahl Petersen	8b5114d10e	python: Add standard customization setup ... - modernize the sanitizer, but do not make it less specific	2022-01-31 11:27:55 +01:00
Rasmus Lerchedahl Petersen	20d54543fd	python: move log injection out of experimental ... - move from custom concept `LogOutput` to standard concept `Logging` - remove `Log.qll` from experimental frameworks - fold models into standard models (naively for now) - stdlib: - make Logger module public - broaden definition of instance - add `extra` keyword as possible source - flak: add app.logger as logger instance - django: `add django.utils.log.request_logger` as logger instance (should we add the rest?) - remove LogOutput from experimental concepts	2022-01-31 11:27:55 +01:00