Rasmus Wriedt Larsen 3592b09d56 Python: Expand stdlib decoding tests ...

The part about claiming there is decoding of the input to `shelve.open`
is sort of an odd one, since it's not the filename, but the contents of
the file that is decoded.

However, trying to only handle this problem through path injection is
not enough -- if a user is able to upload and access files through
`shelve.open` in a path injection safe manner, that still leads to code
execution.

So right now the best way we have of modeling this is to treat the
filename argument as being deserialized...

2021-10-07 21:11:51 +02:00

..

examples

Packaging: Normalize all qlpack.yml files for all languages

2021-09-03 11:53:28 -07:00

lib

Python: Refactor pickle.loads() modeling

2021-10-07 20:28:30 +02:00

src

Fix hasLocationInfo URL reference

2021-09-29 13:47:58 +02:00

test

Python: Expand stdlib decoding tests

2021-10-07 21:11:51 +02:00