@@ -14,6 +14,7 @@ If you love PyT, please star our project on GitHub to show your support! :star:
1414#### :tada: New Features
1515#### :sparkles: Usability
1616#### :mortar_board: Walkthrough / Help
17+ #### :performing_arts: Performance
1718#### :telescope: Precision
1819#### :bug: Bugfixes
1920#### :snake: Miscellaneous
@@ -26,28 +27,65 @@ If you love PyT, please star our project on GitHub to show your support! :star:
2627
2728#### :tada : New Features
2829
30+ * Ability to analyze directories, ` -r ` Recursive option ([ #129 ] , thanks [ @omergunal ] )
31+ * Added ` --dont-prepend-root ` option, makes it so that we don't require imports start with ` project_root.* ` ([ #151 ] , thanks [ @bcaller ] )
32+ * Added ` --no-local-imports ` option, to require absolute imports be relative to the project root ([ #151 ] , thanks [ @bcaller ] )
33+ * [ PEP 498] support, formatted string literals ([ #142 ] , thanks [ @bcaller ] )
34+ * [ PEP 526] support, syntax for variable annotations ([ #143 ] , thanks [ @bcaller ] )
2935* Whitelist lines of sources and sinks ending in ` # nosec ` ([ #121 ] , thanks [ @omergunal ] )
30- * Ability to analyze directories, -r Recursive option ([ #129 ] , thanks [ @omergunal ] )
3136
37+ [ @bcaller ] : https://github.com/bcaller
38+ [ PEP 498 ] : https://www.python.org/dev/peps/pep-0498/
39+ [ PEP 526 ] : https://www.python.org/dev/peps/pep-0526/
3240[ #121 ] : https://github.com/python-security/pyt/pull/121
3341[ #129 ] : https://github.com/python-security/pyt/pull/129
42+ [ #142 ] : https://github.com/python-security/pyt/pull/142
43+ [ #143 ] : https://github.com/python-security/pyt/pull/143
44+ [ #151 ] : https://github.com/python-security/pyt/pull/151
45+
46+ #### :telescope : Precision
47+
48+ * Added per-arg taint, for sink functions ([ #147 ] , thanks [ @bcaller ] )
49+ * Improved tuple assingment to be more precise and support starargs ([ #150 ] , thanks [ @bcaller ] )
50+
51+ [ #147 ] : https://github.com/python-security/pyt/pull/147
52+ [ #150 ] : https://github.com/python-security/pyt/pull/150
53+
54+ #### :bug : Bugfixes
55+ * Fixed a bug where ` get_call_names ` only handled ast.Attribute nodes ([ #148 ] , thanks [ @bcaller ] )
56+ * Fixed a bug where ` vars_visitor.py ` crashed on Python 3.5 dict syntax ([ #144 ] , thanks [ @bcaller ] )
57+
58+ [ #144 ] : https://github.com/python-security/pyt/pull/144
59+ [ #148 ] : https://github.com/python-security/pyt/pull/148
60+
61+ #### :performing_arts : Performance
62+
63+ * Added an ` lru_cache ` to the ` generate_ast ` function ([ #153 ] , thanks [ @bcaller ] )
64+
65+ [ #153 ] : https://github.com/python-security/pyt/pull/153
3466
3567#### :mortar_board : Walkthrough / Help
3668
3769* Added README.rst files to almost every directory. (Partially [ #126 ] )
3870
3971#### :snake : Miscellaneous
4072
73+ * Added tests for ` vars_visitor.py ` , making our overall coverage 91% ([ #139 ] , thanks [ @stannum-l ] )
74+ * Cleaned and organized requirements, ` setup.py ` , ` tox.ini ` and ` .travis.yml ` ([ #152 ] , thanks [ @bcaller ] )
75+ * Cleaned up the new pyt/core/ folder ([ #132 ] )
4176* Fixed all flake8 errors ([ #114 ] & [ #130 ] , thanks [ @cclauss ] )
4277* Re-organized the entire codebase into different directories ([ #126 ] )
43- * Cleaned up the new pyt/core/ folder ([ #132 ] )
78+ * Return exit code 1 if any non-sanitised vulnerabilities are found ([ #156 ] , thanks [ @ bcaller ] )
4479
45- [ #126 ] : https://github.com/python-security/pyt/pull/126
80+ [ @cclauss ] : https://github.com/cclauss
81+ [ @stannum-l ] : https://github.com/stannum-l
4682[ #114 ] : https://github.com/python-security/pyt/pull/114
83+ [ #126 ] : https://github.com/python-security/pyt/pull/126
4784[ #130 ] : https://github.com/python-security/pyt/pull/130
48- [ @cclauss ] : https://github.com/cclauss
4985[ #132 ] : https://github.com/python-security/pyt/pull/132
50-
86+ [ #139 ] : https://github.com/python-security/pyt/pull/139
87+ [ #152 ] : https://github.com/python-security/pyt/pull/152
88+ [ #156 ] : https://github.com/python-security/pyt/pull/156
5189
5290# 0.34
5391##### April 24, 2018
@@ -56,8 +94,8 @@ If you love PyT, please star our project on GitHub to show your support! :star:
5694
5795* Baseline support ([ #106 ] , thanks [ @omergunal ] )
5896
59- [ #106 ] : https://github.com/python-security/pyt/pull/106
6097[ @omergunal ] : https://github.com/omergunal
98+ [ #106 ] : https://github.com/python-security/pyt/pull/106
6199
62100#### :sparkles : Usability
63101* Combined all source/sink information files and made it the default ([ #116 ] )
@@ -68,20 +106,20 @@ If you love PyT, please star our project on GitHub to show your support! :star:
68106
69107#### :bug : Bugfixes
70108* Fixed a bug where ` visit_Raise ` raised a ` TypeError ` ([ #117 ] , thanks [ @lFatty ] )
71- * Fixed an infinite loop bug that was caused while handling certain loops ([ #118 ] )
72109* Fixed a bug where we were not including ` pyt/vulnerability_definitions ` files ([ #122 ] , thanks [ @Ekultek ] )
110+ * Fixed an infinite loop bug that was caused while handling certain loops ([ #118 ] )
73111
74112#### :snake : Miscellaneous
75113
76114* Moved out a bunch of historical files to the [ ReadTheDocs repo] ( https://github.com/KevinHock/rtdpyt ) ([ #110 ] , [ #111 ] )
77115
78- [ #116 ] : https://github.com/python-security/pyt/pull/116
116+ [ @Ekultek ] : https://github.com/Ekultek
117+ [ @lfatty ] : https://github.com/lfatty
118+ [ #110 ] : https://github.com/python-security/pyt/pull/110
119+ [ #111 ] : https://github.com/python-security/pyt/pull/111
79120[ #115 ] : https://github.com/python-security/pyt/pull/115
121+ [ #116 ] : https://github.com/python-security/pyt/pull/116
80122[ #119 ] : https://github.com/python-security/pyt/pull/119
81123[ #117 ] : https://github.com/python-security/pyt/pull/117
82124[ #118 ] : https://github.com/python-security/pyt/pull/118
83- [ #111 ] : https://github.com/python-security/pyt/pull/111
84- [ #110 ] : https://github.com/python-security/pyt/pull/110
85- [ @lfatty ] : https://github.com/lfatty
86125[ #122 ] : https://github.com/python-security/pyt/issues/122
87- [ @Ekultek ] : https://github.com/Ekultek
0 commit comments