mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
663 B
663 B
0.11.4
Minor Analysis Improvements
- Added support for tarfile extraction filters as defined in PEP-706. In particular, calls to
TarFile.extract, andTarFile.extractallare no longer considered to be sinks for thepy/tarslipquery if a sufficiently safe filter is provided.
- Added modeling of
*argsand**kwargsas routed-parameters in request handlers for django/flask/FastAPI/tornado.
- Added support for type parameters in function and class definitions, as well as the new Python 3.12 type alias statement.
- Added taint-flow modeling for regular expressions with
remodule from the standard library.