Commits

History for

oncodeql-cli/v2.26.3

Commits on Jul 1, 2026

Python: Improve some flow summaries
hvitved
committed
a5444b5

Commits on Jun 25, 2026

Merge pull request #21869 from yoff/python/support-flask-subclasses
yoff
authored
5fcaac7

Commits on Jun 22, 2026

Python: deprecate Function.getAReturnValueFlowNode() and rewrite internal callers

yoff
and
Copilot
committed
1a9bb24
Python: deprecate AstNode.getAFlowNode() and rewrite internal callers

Copilot
authored and
yoff
committed
717ff62

Commits on Jun 3, 2026

Address review comments
owen-mc
committed
da999ee

Commits on Jun 2, 2026

Remove imprecise model for `tuple()`
owen-mc
committed
6f2cc43
Remove imprecise model for `list()`
owen-mc
committed
5042fde
Tweak model for str.join
owen-mc
committed
04341c4
Add MaD models for lxml and xml etree.fromstringlist
owen-mc
committed
c3ef1dd
Track flow through `tuple()` with list with tainted elements
owen-mc
committed
dede5bc
Use access path for `str.join` model
owen-mc
committed
ad97b6d
Python: fix sub class test
yoff
committed
f6ed5c1

Commits on May 21, 2026

Python: typo

yoff
authored and
owen-mc
committed
0ecca91
Python: Make sure all imprecise taint bubbles up

yoff
authored and
owen-mc
committed
f669a4f

Commits on Apr 29, 2026

Merge pull request #21641 from github/josefs/promptInjectionImprovements
josefs
authored
68be006

Commits on Apr 28, 2026

Improve prompt inject for Python
josefs
committed
bb18bb0

Commits on Apr 14, 2026

Merge pull request #21584 from owen-mc/shared/update-mad-comments
owen-mc
authored
7458674

Commits on Mar 27, 2026

Replace `branch` with `acceptingValue`
owen-mc
committed
37aac05
Add barriers and barrier guards to MaD format explanations
owen-mc
committed
10fddc7

Commits on Mar 26, 2026

Python: Replace type tracking with global data-flow
tausbn
committed
c439fc5

Commits on Feb 26, 2026

Python: convert barrier guard to MaD
yoff
committed
cfbae50

Commits on Feb 16, 2026

Python: Fix bad join in `OutgoingRequestCall`
tausbn
committed
987b10a
Python: Simple dataflow annotations
tausbn
committed
df0f2f8

Commits on Feb 6, 2026

Moving the SsrfSink concept into Concepts.qll, and renaming to HttpClientRequestFromModel as suggested in PR review.
bdrodes
committed
8459eec

Commits on Feb 4, 2026

Python: Altering SSRF MaD to use 'request-forgery' tag. Update to test cases expected results, off by one line. Changed to using ModelOutput::sinkNode.
bdrodes
committed
0a88425

Commits on Feb 2, 2026

Merge branch 'main' into azure_python_sdk_url_summary_upstream
bdrodes
authored
7ddfa80

Commits on Jan 30, 2026

Merge pull request #21234 from owen-mc/python/convert-sanitizers-to-mad
owen-mc
authored
5204255
Specify vulnerable args instead of safe ones
owen-mc
committed
0222159
Replace sanitizer by exclusion from sink definition
owen-mc
committed
a3885cd

Commits on Jan 29, 2026

python: Add query for prompt injection
yoff
committed
e7a0fc7
Merge pull request #20945 from joefarebrother/python-websockets
tausbn
authored
34800d1

Commits on Jan 26, 2026

Commits on Jan 22, 2026

python/javascript/ruby: mark internal predicates
yoff
committed
d05901a
python: add machinery for MaD barriers
yoff
committed
3dbfb9f