Rasmus Wriedt Larsen 56c85ffe54 Python: Fixup threat-models for os.environ.get() ...

Since using `.DictionaryElementAny` doesn't actually do a store on the
source, (so we can later follow any dict read-steps).

I added the ensure_tainted steps to highlight that the result of the
WHOLE expression ends up "tainted", and that we don't just mark
`os.environ` as the source without further flow.

2024-09-10 14:32:36 +02:00

..

CodeExecution.py

…

CodeExecutionPossibleFP1.py

…

CodeExecutionPossibleFP2.py

…

CodeExecutionPossibleFP3.py

…

ConceptsTest.expected

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

ConceptsTest.ql

…

Decoding.py

Python: replace dataflow-test location in files

2024-04-23 09:40:59 +02:00

Encoding.py

Python: replace dataflow-test location in files

2024-04-23 09:40:59 +02:00

FileSystemAccess.py

v1

2023-10-08 21:24:54 +02:00

http_client.py

…

http_server.py

…

InlineTaintTest.expected

Python: Accept new ordering of query predicates in .expected

2023-11-15 10:09:54 +01:00

InlineTaintTest.ql

Python: Update more inline expectation tests to use the paramterized module

2023-06-20 10:16:15 +02:00

io_test.py

…

Logging.py

…

PathNormalization.py

…

pep249.py

Python: Add support for .executescript

2023-03-22 15:20:06 +01:00

SafeAccessCheck.py

…

SystemCommandExecution.py

Python: move asyncio CMDi related tests to stdlib tests

2023-09-06 16:54:18 +02:00

test_hmac.py

Python: Add modeling of hmac

2023-02-13 15:39:43 +01:00

test_html.py

Python: Require quote escaping for html.escape

2024-01-30 12:17:01 +01:00

test_json.py

…

test_md5.py

…

test_re.py

Python: Remove intermediary steps from taint-test

2023-11-23 10:40:25 +01:00

threat_models.py

Python: Fixup threat-models for os.environ.get()

2024-09-10 14:32:36 +02:00

urllib.py

…

wsgiref_simple_server_test.py

Python: Fixup threat-models for os.environ.get()

2024-09-10 14:32:36 +02:00

xml_dom.py

…

xml_etree.py

…

xml_sax.py

…

XPathExecution.py

…