Rasmus Wriedt Larsen bbe93f43d3 Python: Only comparison with constant will clear taint ...

tainted = SOURCE
    if tainted == tainted:
        SINK(tainted) # unsafe

before, in the body of the if statement, `tainted` was not tainted

2020-01-21 15:25:57 +01:00

..

carrier.py

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

Contexts.expected

Python taint-tracking. Reorder columns in some tests for easier comprehension of expected output.

2019-08-29 14:36:10 +01:00

Contexts.ql

Python taint-tracking. Reorder columns in some tests for easier comprehension of expected output.

2019-08-29 14:36:10 +01:00

deep.py

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

module.py

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

ModuleAttribute.expected

Python taint-tracking: Fix up handling of contexts for __init__ and for context-free taints.

2019-08-29 10:31:50 +01:00

ModuleAttribute.ql

Python taint-tracking: Fix up handling of contexts for __init__ and for context-free taints.

2019-08-29 10:31:50 +01:00

ParamSource.expected

Python taint-tracking: make sure all features of legacy extensions are supported.

2019-08-29 10:31:50 +01:00

ParamSource.ql

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

rockpaperscissors.py

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

sanitizer.py

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

TaintLib.qll

Python taint-tracking: make sure all features of legacy extensions are supported.

2019-08-29 10:31:50 +01:00

TaintSanity.expected

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

TaintSanity.ql

Python taint-tracking: make sure all features of legacy extensions are supported.

2019-08-29 10:31:50 +01:00

test.py

Python: Highlight that any comparison will clear taint

2020-01-21 15:24:56 +01:00

TestDefn.expected

Python: Highlight that any comparison will clear taint

2020-01-21 15:24:56 +01:00

TestDefn.ql

Python: Move TaintTracking.qll from semmle.python.security to semmle.python.dataflow, for consistency with other code.

2019-08-30 12:57:47 +01:00

TestSanitizers.expected

Python: Remove callsite refinement ESSA definition when call in a test defining a pi-node.

2019-04-11 16:08:29 +01:00

TestSanitizers.ql

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

TestSink.expected

Python: Only comparison with constant will clear taint

2020-01-21 15:25:57 +01:00

TestSink.ql

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

TestSource.expected

Python: Highlight that any comparison will clear taint

2020-01-21 15:24:56 +01:00

TestSource.ql

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

TestStep.expected

Python: Only comparison with constant will clear taint

2020-01-21 15:25:57 +01:00

TestStep.ql

Python taint-tracking: Fix up handling of contexts for __init__ and for context-free taints.

2019-08-29 10:31:50 +01:00

TestVar.expected

Python: Only comparison with constant will clear taint

2020-01-21 15:25:57 +01:00

TestVar.ql

Python: Move TaintTracking.qll from semmle.python.security to semmle.python.dataflow, for consistency with other code.

2019-08-30 12:57:47 +01:00