Rasmus Lerchedahl Petersen a063d7d510 Python: sinks -> decodings ...

Query operators that interpret JavaScript
are no longer considered sinks.
Instead they are considered decodings
and the output is the tainted dictionary.
The state changes to `DictInput` to reflect
that the user now controls a dangerous dictionary.

This fixes the spurious result and moves the error reporting
to a more logical place.

2023-09-11 16:33:20 +02:00

..

2

Python: Update expected output for syntax error queries

2023-06-07 15:26:52 +00:00

3

delete old deprecations

2023-06-14 08:31:51 +02:00

experimental

Python: prepare to promote NoSqlInjection

2023-09-07 09:28:29 +02:00

library-tests

Merge pull request #14084 from RasmusWL/flask-jsonify

2023-08-30 13:07:54 +02:00

query-tests

Python: sinks -> decodings

2023-09-11 16:33:20 +02:00

TestUtilities

Revert "Merge pull request #37 from erik-krogh/shared/inline-tests"

2023-01-05 09:19:43 +01:00

.project

…

.qlpath

…

LICENSE-PSF.md

…

qlpack.lock.yml

Packaging: Rafactor Python core libraries

2021-08-24 13:23:45 -07:00

qlpack.yml

Python: Enable implicit this warnings

2023-05-04 10:16:52 +02:00