Rasmus Lerchedahl Petersen a063d7d510 Python: sinks -> decodings ...

Query operators that interpret JavaScript
are no longer considered sinks.
Instead they are considered decodings
and the output is the tainted dictionary.
The state changes to `DictInput` to reflect
that the user now controls a dangerous dictionary.

This fixes the spurious result and moves the error reporting
to a more logical place.

2023-09-11 16:33:20 +02:00

..

analysis

AlertSuppression: fix python test cases

2022-12-21 11:26:16 +01:00

Classes

Python: Remove references to LGTM

2022-12-19 15:15:32 +00:00

Diagnostics

Python: Fix syntax error locations

2021-12-07 16:51:33 +00:00

Exceptions/general

Python: Only alert on Python 2 code

2022-09-05 13:38:14 +02:00

Expressions

update expected output for DuplicateCharacterInSet

2023-01-06 15:41:57 +01:00

Functions

Python: Move ModificationOfParameterWithDefault to new dataflow API

2023-08-28 16:19:47 +02:00

Imports

fix some more style-guide violations in the alert-messages

2022-10-07 11:23:34 +02:00

Lexical

update expected output of tests

2022-08-22 21:41:47 +02:00

Metrics

Remove unit tests for duplicate-code detection, take II

2020-11-20 21:07:42 +01:00

Numerics

fix some more style-guide violations in the alert-messages

2022-10-07 11:23:34 +02:00

Resources

Python: Autoformat everything using qlformat.

2020-07-07 15:43:52 +02:00

Security

Python: sinks -> decodings

2023-09-11 16:33:20 +02:00

Statements

Python: avoid selecting getLocation() in py/unnecessary-delete

2023-06-05 11:16:13 +01:00

Summary

Python: Add non-alert data for lines of code

2021-04-23 13:22:18 +02:00

Testing

QL tests for Python queries and libraries.

2018-11-19 15:15:54 +00:00

Variables

python: remove outdated comment

2023-03-20 14:13:48 +01:00

options

Python: Remove ignored automatic_locations in qltest options files

2020-02-06 14:28:10 +01:00