Skip to content

Commit 44b570f

Browse files
tausbnfelicitymay
andauthored
Apply suggestions from code review
Co-Authored-By: Felicity Chapman <[email protected]>
1 parent e97d88c commit 44b570f

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

change-notes/1.24/analysis-python.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ The following changes in version 1.24 affect Python analysis in all applications
1414

1515
- A large number of libraries and queries have been moved to the new `Value` API, which should result in more precise results.
1616

17-
- The `Value` API has been extended in various ways:
17+
- The `Value` interface has been extended in various ways:
1818
- A new `StringValue` class has been added, for tracking string literals.
1919
- Values now have a `booleanValue` method which returns the boolean interpretation of the given value.
2020
- Built-in methods for which the return type is not fixed are now modeled as returning an unknown value by default.
@@ -24,10 +24,10 @@ The following changes in version 1.24 affect Python analysis in all applications
2424

2525
| **Query** | **Expected impact** | **Change** |
2626
|----------------------------|------------------------|------------------------------------------------------------------|
27-
| Arbitrary file write during tarfile extraction (`py/tarslip`) | Fewer false negatives | Negations are now handled correctly in conditionals that may sanitize tainted values. |
28-
| First parameter of a method is not named 'self' (`py/not-named-self`) | Fewer false positives | `__class_getitem__` is now recognized as a class method. |
29-
| Import of deprecated module (`py/import-deprecated-module) | Fewer false positives | Deprecated modules used for backwards compatibility are no longer reported.|
30-
| Module imports itself (`py/import-own-module`) | Fewer false positives | Imports local to a given package are no longer classified as self-imports. |
27+
| Arbitrary file write during tarfile extraction (`py/tarslip`) | Fewer false negative results | Negations are now handled correctly in conditional expressions that may sanitize tainted values. |
28+
| First parameter of a method is not named 'self' (`py/not-named-self`) | Fewer false positive results | `__class_getitem__` is now recognized as a class method. |
29+
| Import of deprecated module (`py/import-deprecated-module`) | Fewer false positive results | Deprecated modules that are used to provide backwards compatibility are no longer reported.|
30+
| Module imports itself (`py/import-own-module`) | Fewer false positive results | Imports local to a given package are no longer classified as self-imports. |
3131
| Uncontrolled command line (`py/command-line-injection`) | More results | We now model the `fabric` and `invoke` packages for command execution. |
3232

3333
### Web framework support
@@ -53,4 +53,4 @@ queries:
5353
## Changes to libraries
5454
### Taint tracking
5555
- The `urlsplit` and `urlparse` functions now propagate taint appropriately.
56-
- HTTP requests using the `requests` library are now modeled.
56+
- HTTP requests using the `requests` library are now modeled.

0 commit comments

Comments
 (0)