Rasmus Wriedt Larsen 56c85ffe54 Python: Fixup threat-models for os.environ.get() ...

Since using `.DictionaryElementAny` doesn't actually do a store on the
source, (so we can later follow any dict read-steps).

I added the ensure_tainted steps to highlight that the result of the
WHOLE expression ends up "tainted", and that we don't just mark
`os.environ` as the source without further flow.

2024-09-10 14:32:36 +02:00

..

aioch

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

aiofile

fix tests because of error in Frameworks.qll

2023-11-06 19:19:36 +01:00

aiofiles

fix tests because of error in Frameworks.qll

2023-11-06 19:19:36 +01:00

aiohttp

Update ConceptsTests and make a fix

2024-07-23 10:15:09 +01:00

aiomysql

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

aiopg

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

aiosqlite

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

anyio

fix tests because of error in Frameworks.qll

2023-11-06 19:19:36 +01:00

asyncpg

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

baize

Python: Apply suggestions from code review

2023-11-15 14:35:52 +01:00

cassandra-driver

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

cherrypy

fix tests because of error in Frameworks.qll

2023-11-06 19:19:36 +01:00

clickhouse_driver

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

crypto

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

cryptodome

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

cryptography

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

cx_Oracle

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

data

Python: Add MaD support for DictionaryElement/DictionaryElementAny for sources

2024-07-12 15:19:40 +02:00

dill

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

django

Python: Accept consistency-errors in django-orm

2023-11-21 12:44:42 +01:00

django-orm

Python: Move dataflow TestUtil to importable location

2024-04-23 09:40:59 +02:00

django-v1

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

django-v2-v3

Add additional test for kwargs case

2024-07-29 23:27:22 +01:00

fabric

Merge pull request #16789 from yoff/python/document-models-as-data

2024-06-25 15:46:28 +02:00

fastapi

Update ConceptsTests and make a fix

2024-07-23 10:15:09 +01:00

flask

Update ConceptsTests and make a fix

2024-07-23 10:15:09 +01:00

flask_admin

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

flask_sqlalchemy

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

gradio

Change Gradio rfs test to use shared rfs test module

2024-07-31 13:25:32 +02:00

httpx

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

idna

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

internal-ql-helpers

Python: address review comments

2023-12-04 17:49:26 +01:00

invoke

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

jmespath

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

joblib

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

jsonpickle

add jsonpickle and pexpect libs in case of unsafe decoding and secondary command execution, add proper test cases

2024-05-06 14:36:10 +02:00

libtaxii

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

lxml

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

markupsafe

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

modeling-example

Python: Update expected output (uninteresting).

2024-04-12 09:20:30 +02:00

multidict

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

mysql-connector-python

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

mysqldb

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

numpy

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

oracledb

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

pandas

add panas code execution sinks, add proper tests

2024-05-06 14:36:10 +02:00

paramiko

continue to convert paramiko query to a more general query,

2024-05-06 14:36:10 +02:00

peewee

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

pexpect

add jsonpickle and pexpect libs in case of unsafe decoding and secondary command execution, add proper test cases

2024-05-06 14:36:10 +02:00

phoenixdb

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

psycopg

Python: Model the psycopg package

2024-01-29 14:30:20 +01:00

pycurl

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

pymssql

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

pymysql

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

pyodbc

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

pyramid

Update ConceptsTests and make a fix

2024-07-23 10:15:09 +01:00

requests

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

rest_framework

update inline tests for rest_framework tests

2024-07-29 23:35:36 +01:00

rsa

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

ruamel.yaml

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

sanic

fix tests because of error in Frameworks.qll

2023-11-06 19:19:36 +01:00

serverless

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

simplejson

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

sqlalchemy

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

starlette

fix tests because of error in Frameworks.qll

2023-11-06 19:19:36 +01:00

stdlib

Python: Fixup threat-models for os.environ.get()

2024-09-10 14:32:36 +02:00

stdlib-py2

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

stdlib-py3

Python: replace dataflow-test location in files

2024-04-23 09:40:59 +02:00

streamlit

Add remoteflowsoucre test

2024-07-30 17:20:14 +02:00

toml

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

torch

add pyTorch :) code execution sinks, add proper tests

2024-05-06 14:36:10 +02:00

tornado

Add tests for tornado and twisted

2024-07-23 13:21:37 +01:00

twisted

Add tests for tornado and twisted

2024-07-23 13:21:37 +01:00

ujson

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

urllib3

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

xmltodict

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

yaml

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

yarl

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00