You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| Arbitrary file write during tarfile extraction (`py/tarslip`) | Fewer false negatives | Negations are now handled correctly inconditionals that may sanitize tainted values. |
28
-
| First parameter of a method isnot named 'self' (`py/not-named-self`) | Fewer false positives|`__class_getitem__`is now recognized as a class method. |
29
-
| Import of deprecated module (`py/import-deprecated-module) | Fewer false positives | Deprecated modules used for backwards compatibility are no longer reported.|
30
-
| Module imports itself (`py/import-own-module`) | Fewer false positives| Imports local to a given package are no longer classified asself-imports. |
27
+
| Arbitrary file write during tarfile extraction (`py/tarslip`) | Fewer false negative results | Negations are now handled correctly inconditional expressions that may sanitize tainted values. |
28
+
| First parameter of a method isnot named 'self' (`py/not-named-self`) | Fewer false positive results|`__class_getitem__`is now recognized as a class method. |
29
+
| Import of deprecated module (`py/import-deprecated-module`) | Fewer false positive results | Deprecated modules that are used to provide backwards compatibility are no longer reported.|
30
+
| Module imports itself (`py/import-own-module`) | Fewer false positive results| Imports local to a given package are no longer classified asself-imports. |
31
31
| Uncontrolled command line (`py/command-line-injection`) | More results | We now model the `fabric`and`invoke` packages for command execution. |
32
32
33
33
### Web framework support
@@ -53,4 +53,4 @@ queries:
53
53
## Changes to libraries
54
54
### Taint tracking
55
55
- The `urlsplit`and`urlparse` functions now propagate taint appropriately.
56
-
-HTTP requests using the `requests` library are now modeled.
56
+
-HTTP requests using the `requests` library are now modeled.
0 commit comments