Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 038688a

Browse files
authored
Python: Minor updates to 1.25 change notes
backporting fixes from `@sj`
1 parent 2979f98 commit 038688a

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

change-notes/1.25/analysis-python.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22

33
* Importing `semmle.python.web.HttpRequest` will no longer import `UntrustedStringKind` transitively. `UntrustedStringKind` is the most commonly used non-abstract subclass of `ExternalStringKind`. If not imported (by one mean or another), taint-tracking queries that concern `ExternalStringKind` will not produce any results. Please ensure such queries contain an explicit import (`import semmle.python.security.strings.Untrusted`).
44
* Added model of taint sources for HTTP servers using `http.server`.
5-
* Added taint modeling of routed parameters in flask.
6-
* Improved modeling of builtin methods on strings for taint tracking.
5+
* Added taint modeling of routed parameters in Flask.
6+
* Improved modeling of built-in methods on strings for taint tracking.
77
* Improved classification of test files.
88
* New class `BoundMethodValue` exposing information about a bound method.
99
* The query `py/command-line-injection` now recognizes command execution with the `fabric` and `invoke` Python libraries.

0 commit comments

Comments
 (0)