-
Notifications
You must be signed in to change notification settings - Fork 1.9k
Python: finalize change notes for 1.19 #573
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Python: finalize change notes for 1.19 #573
Conversation
change-notes/1.19/analysis-python.md
Outdated
|
|
||
| > Changes that affect alerts in many files or from many queries | ||
| > For example, changes to file classification | ||
| A new predicate `Stmt.getAnEntryNode()` has been added to make it easier to write reachability queries involving statements. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This doesn't make as much sense out of context. This new predicate is necessary because of the changes to the CFG representation.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Okay - that wasn't clear to me. I'll move it.
change-notes/1.19/analysis-python.md
Outdated
|
|
||
| A new predicate `Stmt.getAnEntryNode()` has been added to make it easier to write reachability queries involving statements. | ||
| | Old CFG node order | New CFG node order | | ||
| |--------------------|--------------------| |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't like the table form, as it suggest some relation between item of the same row, where there is none.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Okay - I'll revise it.
|
@mark - does this work any better? |
|
Yes, that's perfect |
Yet another SSRF query for Golang
@markshannon and @taus-semmle - I've made some changes to the analysis change notes for Python. They're mostly smallish changes for consistency and clarity. The only substantial change was to move the information about "Assert statement tests the truth value of a literal constant" (
py/assert-literal-constant) into the New queries table. As far as I can tell it was erroneously added to the wrong table.