René's URL Explorer Experiment


Title: Python: Remove imprecise container steps #2 by owen-mc · Pull Request #21888 · github/codeql · GitHub

Open Graph Title: Python: Remove imprecise container steps #2 by owen-mc · Pull Request #21888 · github/codeql

X Title: Python: Remove imprecise container steps #2 by owen-mc · Pull Request #21888 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Python: Remove imprecise container steps #2 by owen-mc · Pull Request #21888 · github/codeql

Open Graph Description: Supersedes #17493. We used to have taint steps from any element of a collection to the entire collection (see here). These are very imprecise, leading to false positives (e.g. seen #17008 (comment)...

X Description: Supersedes #17493. We used to have taint steps from any element of a collection to the entire collection (see here). These are very imprecise, leading to false positives (e.g. seen #17008 (comment)...

Opengraph URL: https://github.com/github/codeql/pull/21888

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:3ac5c804-3568-9916-cc38-09b54af918e1
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8056:135B7:53A38A:7066A2:6A4DA66E
html-safe-noncef564eed416522c551bd3bc842a25ba57273c2d7e1774962f65ed3fbdf6fbf479
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4MDU2OjEzNUI3OjUzQTM4QTo3MDY2QTI6NkE0REE2NkUiLCJ2aXNpdG9yX2lkIjoiMTE0NzgwNjYyMTI0NzU3OTc1OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac276a19a12ed8b82a4217a35af64e21817654e08ae32eb34425ce657a619afd4b
hovercard-subject-tagpull_request:3726387952
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/21888/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/51eaf8f05068e136eef6b2105083ff3e997c59b88be57ad6f1e9429ba2ec1e11/github/codeql/pull/21888
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/51eaf8f05068e136eef6b2105083ff3e997c59b88be57ad6f1e9429ba2ec1e11/github/codeql/pull/21888
og:image:altSupersedes #17493. We used to have taint steps from any element of a collection to the entire collection (see here). These are very imprecise, leading to false positives (e.g. seen #17008 (comment)...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameowen-mc
hostnamegithub.com
expected-hostnamegithub.com
None06b8a6144231bf3a234f1c2e9993861e07ce98a905912b114aa386c2d7e84b33
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release47723578ce6819210724ef064c858fce6d3115a3
ui-targetcanary-2
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/21888#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F21888
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F21888
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/21888
Reloadhttps://github.com/github/codeql/pull/21888
Reloadhttps://github.com/github/codeql/pull/21888
Please reload this pagehttps://github.com/github/codeql/pull/21888
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 426 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
owen-mchttps://github.com/owen-mc
github:mainhttps://github.com/github/codeql/tree/main
owen-mc:py/remove-imprecise-container-stepshttps://github.com/owen-mc/codeql/tree/py/remove-imprecise-container-steps
Conversationhttps://github.com/github/codeql/pull/21888
Commits26 (26)https://github.com/github/codeql/pull/21888/commits
Checkshttps://github.com/github/codeql/pull/21888/checks
Files changedhttps://github.com/github/codeql/pull/21888/files
Python: Remove imprecise container steps #2https://github.com/github/codeql/pull/21888#top
owen-mchttps://github.com/owen-mc
github:mainhttps://github.com/github/codeql/tree/main
owen-mc:py/remove-imprecise-container-stepshttps://github.com/owen-mc/codeql/tree/py/remove-imprecise-container-steps
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
May 21, 2026https://github.com/github/codeql/pull/21888#issue-4497987143
#17493https://github.com/github/codeql/pull/17493
herehttps://github.com/github/codeql/blob/main/python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qll#L171-L192
#17008 (comment)https://github.com/github/codeql/issues/17008#issuecomment-2233920861
#16976https://github.com/github/codeql/issues/16976
https://github.com/github/codeql-python-team/issues/728?reload=1https://github.com/github/codeql-python-team/issues/728?reload=1
#17493https://github.com/github/codeql/pull/17493
Please reload this pagehttps://github.com/github/codeql/pull/21888
yoffhttps://github.com/yoff
May 21, 2026 16:57https://github.com/github/codeql/pull/21888#commits-pushed-b67694b
https://github.com/yoff
https://github.com/owen-mc
Python: Remove imprecise container stepshttps://github.com/github/codeql/pull/21888/commits/b67694b2abdcd66461d3827efa590f96cfc05d5f
b67694bhttps://github.com/github/codeql/pull/21888/commits/b67694b2abdcd66461d3827efa590f96cfc05d5f
https://github.com/yoff
https://github.com/owen-mc
Python: recover taint for % format stringshttps://github.com/github/codeql/pull/21888/commits/facb3b681dd4aed6b7ff6928ab7c7a8f2c97e267
facb3b6https://github.com/github/codeql/pull/21888/commits/facb3b681dd4aed6b7ff6928ab7c7a8f2c97e267
https://github.com/yoff
https://github.com/owen-mc
Python: adjust test expectationshttps://github.com/github/codeql/pull/21888/commits/93e7ab52b766ba4eba57713022a0243ac6c7f0d8
93e7ab5https://github.com/github/codeql/pull/21888/commits/93e7ab52b766ba4eba57713022a0243ac6c7f0d8
https://github.com/yoff
https://github.com/owen-mc
Python: conversion step for format_maphttps://github.com/github/codeql/pull/21888/commits/9a180036a5593c15a3501d5be33ea8c7e7c1020e
9a18003https://github.com/github/codeql/pull/21888/commits/9a180036a5593c15a3501d5be33ea8c7e7c1020e
https://github.com/yoff
https://github.com/owen-mc
Python: reset test expectationshttps://github.com/github/codeql/pull/21888/commits/3275c814bd32893b43aad09bb9e915c18df210a8
3275c81https://github.com/github/codeql/pull/21888/commits/3275c814bd32893b43aad09bb9e915c18df210a8
https://github.com/yoff
https://github.com/owen-mc
Python: Make sure all imprecise taint bubbles uphttps://github.com/github/codeql/pull/21888/commits/f669a4f3bf16c34dffdb6b4d17e3ba85e8b5469e
f669a4fhttps://github.com/github/codeql/pull/21888/commits/f669a4f3bf16c34dffdb6b4d17e3ba85e8b5469e
https://github.com/yoff
https://github.com/owen-mc
Python: typohttps://github.com/github/codeql/pull/21888/commits/0ecca91deaa76ac16677ee429f66e62389aebedb
0ecca91https://github.com/github/codeql/pull/21888/commits/0ecca91deaa76ac16677ee429f66e62389aebedb
https://github.com/yoff
https://github.com/owen-mc
Python: extra tests for comprehensionhttps://github.com/github/codeql/pull/21888/commits/fa9426c74905b9bdd9cd390df3c3e76515160ca3
fa9426chttps://github.com/github/codeql/pull/21888/commits/fa9426c74905b9bdd9cd390df3c3e76515160ca3
https://github.com/yoff
https://github.com/owen-mc
python: fix testhttps://github.com/github/codeql/pull/21888/commits/fa758d6bf5e44bbd22298de3ad609483b3f7988a
fa758d6https://github.com/github/codeql/pull/21888/commits/fa758d6bf5e44bbd22298de3ad609483b3f7988a
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
May 21, 2026https://github.com/github/codeql/pull/21888#event-25825087210
https://github.com/owen-mc
Update test resultshttps://github.com/github/codeql/pull/21888/commits/e8779295eea09c963f3726dc9fdd04c57ca3ec54
e877929https://github.com/github/codeql/pull/21888/commits/e8779295eea09c963f3726dc9fdd04c57ca3ec54
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
force-pushedhttps://github.com/github/codeql/compare/1d66c7b4836fddce2314f56d4318dbffaf77c339..20fadc8db0bac6769e3997526179249a2742e322
1d66c7bhttps://github.com/github/codeql/commit/1d66c7b4836fddce2314f56d4318dbffaf77c339
20fadc8https://github.com/github/codeql/commit/20fadc8db0bac6769e3997526179249a2742e322
Compare https://github.com/github/codeql/compare/1d66c7b4836fddce2314f56d4318dbffaf77c339..20fadc8db0bac6769e3997526179249a2742e322
May 23, 2026 06:06https://github.com/github/codeql/pull/21888#event-25877286997
https://github.com/owen-mc
Add wildcard ContentSets to avoid performance problemshttps://github.com/github/codeql/pull/21888/commits/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
ec13e1bhttps://github.com/github/codeql/pull/21888/commits/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
force-pushedhttps://github.com/github/codeql/compare/20fadc8db0bac6769e3997526179249a2742e322..ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
20fadc8https://github.com/github/codeql/commit/20fadc8db0bac6769e3997526179249a2742e322
ec13e1bhttps://github.com/github/codeql/commit/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
Compare https://github.com/github/codeql/compare/20fadc8db0bac6769e3997526179249a2742e322..ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
May 27, 2026 14:30https://github.com/github/codeql/pull/21888#event-26019266681
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
May 27, 2026https://github.com/github/codeql/pull/21888#issuecomment-4555708317
NodeEx.toStringhttps://github.com/github/codeql/blob/main/shared/dataflow/codeql/dataflow/internal/DataFlowImplCommon.qll#L872-L878
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
May 27, 2026 20:11https://github.com/github/codeql/pull/21888#event-26032936404
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
code ownerhttps://github.com/github/codeql/blob/6be9e2315d493e2f1e10f771a9107b8895f2d1b5/CODEOWNERS#L19
May 27, 2026 20:11https://github.com/github/codeql/pull/21888#event-26032936880
https://github.com/apps/copilot-pull-request-reviewer
Copilothttps://github.com/apps/copilot-pull-request-reviewer
May 27, 2026 20:11https://github.com/github/codeql/pull/21888#event-26032936934
started reviewinghttps://github.com/github/codeql/sessions/e1a88f3e-96aa-411a-9058-afc97ab0df4f
owen-mchttps://github.com/owen-mc
May 27, 2026 20:11https://github.com/github/codeql/pull/21888#event-26032944423
View session https://github.com/github/codeql/sessions/e1a88f3e-96aa-411a-9058-afc97ab0df4f
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
tausbnhttps://github.com/tausbn
May 27, 2026 20:11https://github.com/github/codeql/pull/21888#event-26032946629
https://github.com/apps/copilot-pull-request-reviewer
Copilothttps://github.com/apps/copilot-pull-request-reviewer
May 27, 2026 https://github.com/github/codeql/pull/21888#pullrequestreview-4375745816
View reviewed changes https://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
Copilothttps://github.com/apps/copilot-pull-request-reviewer
https://github.com/github/codeql/pull/21888#pullrequestreview-4375745816
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
CVE-2018-1281https://github.com/advisories/GHSA-96h5-25jj-74vc
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/test/library-tests/frameworks/tornado/taint_test.pyhttps://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109#diff-172bcb9912b57768e0a460d912c20365e009bbc7bc8a759912ae3692ad38dc1c
python/ql/test/library-tests/dataflow/sensitive-data/test.pyhttps://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109#diff-ec23b704b91758ecfab1f9e83e67993ca83039af010e8dd5f9a521952419640d
python/ql/test/library-tests/frameworks/stdlib/test_re.pyhttps://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109#diff-e75da475bdab55fbb246edea526f40d109a5afbcd3b744414608e0b13c765ab4
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
May 28, 2026https://github.com/github/codeql/pull/21888#issuecomment-4562269988
@yoffhttps://github.com/yoff
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
May 28, 2026 https://github.com/github/codeql/pull/21888#pullrequestreview-4379465416
View reviewed changes https://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPrivate.qllhttps://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109#diff-80716eaf55e2581b856950d844a39de74e7015eb05fb3fb56ea89662c13e56fd
hvitvedhttps://github.com/hvitved
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3316570566
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3317032602
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
hvitvedhttps://github.com/hvitved
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3317697589
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3319050024
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qllhttps://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109#diff-46aa957ae61de8b57f3d5ef20ce855c4275d56ecc47d2a6099b143d537a20bf9
hvitvedhttps://github.com/hvitved
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3316590967
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qllhttps://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109#diff-46aa957ae61de8b57f3d5ef20ce855c4275d56ecc47d2a6099b143d537a20bf9
hvitvedhttps://github.com/hvitved
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3316602239
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
codeql/rust/ql/lib/codeql/rust/dataflow/internal/TaintTrackingImpl.qllhttps://github.com/github/codeql/blob/17fe3e4e319e1b19077f07557a700ad7bdcacfa1/rust/ql/lib/codeql/rust/dataflow/internal/TaintTrackingImpl.qll#L57-L63
17fe3e4https://github.com/github/codeql/commit/17fe3e4e319e1b19077f07557a700ad7bdcacfa1
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3317169958
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
hvitvedhttps://github.com/hvitved
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3317714224
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
May 28, 2026 11:34https://github.com/github/codeql/pull/21888#commits-pushed-80c6f08
https://github.com/owen-mc
Fix TODO in containerStephttps://github.com/github/codeql/pull/21888/commits/80c6f082d114ce5772dd38330b528868e3914363
80c6f08https://github.com/github/codeql/pull/21888/commits/80c6f082d114ce5772dd38330b528868e3914363
https://github.com/owen-mc
Add change notehttps://github.com/github/codeql/pull/21888/commits/812e8e6b34e09795f3013a89c2a77922b72819d7
812e8e6https://github.com/github/codeql/pull/21888/commits/812e8e6b34e09795f3013a89c2a77922b72819d7
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
May 28, 2026https://github.com/github/codeql/pull/21888#event-26058095434
https://github.com/owen-mc
Add a ContentSet for any tuple or dictionary elementhttps://github.com/github/codeql/pull/21888/commits/df15a719cb77241ab46f4268ec7c424c206aa03d
df15a71https://github.com/github/codeql/pull/21888/commits/df15a719cb77241ab46f4268ec7c424c206aa03d
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
May 28, 2026 https://github.com/github/codeql/pull/21888#pullrequestreview-4383706185
View reviewed changes https://github.com/github/codeql/pull/21888/files/df15a719cb77241ab46f4268ec7c424c206aa03d
python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPublic.qllhttps://github.com/github/codeql/pull/21888/files/df15a719cb77241ab46f4268ec7c424c206aa03d#diff-50e50073398961dfbdeb7333832d83eb8b4f1f8bd48712619e8af085fdbbe350
hvitvedhttps://github.com/hvitved
May 28, 2026https://github.com/github/codeql/pull/21888#discussion_r3319949103
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
May 29, 2026https://github.com/github/codeql/pull/21888#discussion_r3323416011
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
Add missing code for TAnyTupleOrDictionaryElementhttps://github.com/github/codeql/pull/21888/commits/aee33a0cc90918b121717ee26719fc25fe51a174
aee33a0https://github.com/github/codeql/pull/21888/commits/aee33a0cc90918b121717ee26719fc25fe51a174
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
May 29, 2026 https://github.com/github/codeql/pull/21888#pullrequestreview-4388572934
View reviewed changes https://github.com/github/codeql/pull/21888/files/aee33a0cc90918b121717ee26719fc25fe51a174
python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qllhttps://github.com/github/codeql/pull/21888/files/aee33a0cc90918b121717ee26719fc25fe51a174#diff-46aa957ae61de8b57f3d5ef20ce855c4275d56ecc47d2a6099b143d537a20bf9
hvitvedhttps://github.com/hvitved
May 29, 2026https://github.com/github/codeql/pull/21888#discussion_r3323598342
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
Jun 1, 2026https://github.com/github/codeql/pull/21888#discussion_r3337130409
Please reload this pagehttps://github.com/github/codeql/pull/21888
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
this commithttps://github.com/github/codeql/pull/21888/commits/b38440490aa08908676522e16dd3683174f16de9
Please reload this pagehttps://github.com/github/codeql/pull/21888
hvitvedhttps://github.com/hvitved
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3339581324
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3342344033
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
Address review commenthttps://github.com/github/codeql/pull/21888/commits/b38440490aa08908676522e16dd3683174f16de9
b384404https://github.com/github/codeql/pull/21888/commits/b38440490aa08908676522e16dd3683174f16de9
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
force-pushedhttps://github.com/github/codeql/compare/815b9a01680d1808727826a65482f05c8f4899dd..b38440490aa08908676522e16dd3683174f16de9
815b9a0https://github.com/github/codeql/commit/815b9a01680d1808727826a65482f05c8f4899dd
b384404https://github.com/github/codeql/commit/b38440490aa08908676522e16dd3683174f16de9
Compare https://github.com/github/codeql/compare/815b9a01680d1808727826a65482f05c8f4899dd..b38440490aa08908676522e16dd3683174f16de9
May 31, 2026 20:48https://github.com/github/codeql/pull/21888#event-26163653662
owen-mchttps://github.com/owen-mc
June 2, 2026 16:14https://github.com/github/codeql/pull/21888#commits-pushed-ad97b6d
https://github.com/owen-mc
Use access path for str.join modelhttps://github.com/github/codeql/pull/21888/commits/ad97b6dd644700a76372838a7f0fd002a98e383a
ad97b6dhttps://github.com/github/codeql/pull/21888/commits/ad97b6dd644700a76372838a7f0fd002a98e383a
https://github.com/owen-mc
Track flow through tuple() with list with tainted elementshttps://github.com/github/codeql/pull/21888/commits/dede5bc49bcaab2f9bef0b8a0025bf62cbabb85d
dede5bchttps://github.com/github/codeql/pull/21888/commits/dede5bc49bcaab2f9bef0b8a0025bf62cbabb85d
https://github.com/owen-mc
Add MaD models for lxml and xml etree.fromstringlisthttps://github.com/github/codeql/pull/21888/commits/c3ef1ddd64a2616fba1624132de647c65a00169b
c3ef1ddhttps://github.com/github/codeql/pull/21888/commits/c3ef1ddd64a2616fba1624132de647c65a00169b
https://github.com/owen-mc
Adjust expected test outputhttps://github.com/github/codeql/pull/21888/commits/f62ebef9e0c47703e4792492ba13fedfd3abe1f4
f62ebefhttps://github.com/github/codeql/pull/21888/commits/f62ebef9e0c47703e4792492ba13fedfd3abe1f4
https://github.com/owen-mc
Accept changed edges in test outputhttps://github.com/github/codeql/pull/21888/commits/20ce679d611a0e4981604307516034e876282ec7
20ce679https://github.com/github/codeql/pull/21888/commits/20ce679d611a0e4981604307516034e876282ec7
https://github.com/owen-mc
Update edges in expected test outputhttps://github.com/github/codeql/pull/21888/commits/b27d08ee32c678985aa73e73ef00090becd736d0
b27d08ehttps://github.com/github/codeql/pull/21888/commits/b27d08ee32c678985aa73e73ef00090becd736d0
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
Jun 2, 2026 https://github.com/github/codeql/pull/21888#pullrequestreview-4412599587
View reviewed changes https://github.com/github/codeql/pull/21888/files/b27d08ee32c678985aa73e73ef00090becd736d0
hvitvedhttps://github.com/hvitved
https://github.com/github/codeql/pull/21888#pullrequestreview-4412599587
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/lib/semmle/python/frameworks/Stdlib.qllhttps://github.com/github/codeql/pull/21888/files/ad97b6dd644700a76372838a7f0fd002a98e383a#diff-cac9a82bbea79b64358a082adcd1d176aa565091e6c6391c3b61cbb1bf784971
hvitvedhttps://github.com/hvitved
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3343561365
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3344211326
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3344578807
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/lib/semmle/python/frameworks/Stdlib.qllhttps://github.com/github/codeql/pull/21888/files/dede5bc49bcaab2f9bef0b8a0025bf62cbabb85d#diff-cac9a82bbea79b64358a082adcd1d176aa565091e6c6391c3b61cbb1bf784971
hvitvedhttps://github.com/hvitved
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3343595906
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3344405977
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/lib/semmle/python/frameworks/Stdlib.qllhttps://github.com/github/codeql/pull/21888/files/dede5bc49bcaab2f9bef0b8a0025bf62cbabb85d#diff-cac9a82bbea79b64358a082adcd1d176aa565091e6c6391c3b61cbb1bf784971
hvitvedhttps://github.com/hvitved
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3343599158
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3344406817
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/lib/semmle/python/frameworks/Stdlib.qllhttps://github.com/github/codeql/pull/21888/files/b27d08ee32c678985aa73e73ef00090becd736d0#diff-cac9a82bbea79b64358a082adcd1d176aa565091e6c6391c3b61cbb1bf784971
hvitvedhttps://github.com/hvitved
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3343649120
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
Jun 2, 2026https://github.com/github/codeql/pull/21888#discussion_r3344410522
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
owen-mchttps://github.com/owen-mc
June 2, 2026 21:59https://github.com/github/codeql/pull/21888#commits-pushed-04341c4
https://github.com/owen-mc
Tweak model for str.joinhttps://github.com/github/codeql/pull/21888/commits/04341c47bdb710c03d6514e886edfd74094ae125
04341c4https://github.com/github/codeql/pull/21888/commits/04341c47bdb710c03d6514e886edfd74094ae125
https://github.com/owen-mc
Remove imprecise model for list()https://github.com/github/codeql/pull/21888/commits/5042fdee8494763812de02252948d26884f4429a
5042fdehttps://github.com/github/codeql/pull/21888/commits/5042fdee8494763812de02252948d26884f4429a
https://github.com/owen-mc
Remove imprecise model for tuple()https://github.com/github/codeql/pull/21888/commits/6f2cc43f32bd6e1a8822425542fc199a534cd41d
6f2cc43https://github.com/github/codeql/pull/21888/commits/6f2cc43f32bd6e1a8822425542fc199a534cd41d
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
Jun 3, 2026 https://github.com/github/codeql/pull/21888#pullrequestreview-4421838062
View reviewed changes https://github.com/github/codeql/pull/21888/files/6f2cc43f32bd6e1a8822425542fc199a534cd41d
python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qllhttps://github.com/github/codeql/pull/21888/files/6f2cc43f32bd6e1a8822425542fc199a534cd41d#diff-46aa957ae61de8b57f3d5ef20ce855c4275d56ecc47d2a6099b143d537a20bf9
Please reload this pagehttps://github.com/github/codeql/pull/21888
python/ql/lib/semmle/python/frameworks/Stdlib.qllhttps://github.com/github/codeql/pull/21888/files/6f2cc43f32bd6e1a8822425542fc199a534cd41d#diff-cac9a82bbea79b64358a082adcd1d176aa565091e6c6391c3b61cbb1bf784971
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
Address review commentshttps://github.com/github/codeql/pull/21888/commits/da999ee440f951e82b0c776c0c8c025f2ed8fc1d
da999eehttps://github.com/github/codeql/pull/21888/commits/da999ee440f951e82b0c776c0c8c025f2ed8fc1d
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
hvitvedhttps://github.com/hvitved
June 3, 2026 21:08https://github.com/github/codeql/pull/21888#event-26307997942
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
Jun 3, 2026https://github.com/github/codeql/pull/21888#issuecomment-4617187565
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
Jun 4, 2026 https://github.com/github/codeql/pull/21888#pullrequestreview-4425596650
View reviewed changes https://github.com/github/codeql/pull/21888/files/da999ee440f951e82b0c776c0c8c025f2ed8fc1d
hvitvedhttps://github.com/hvitved
https://github.com/github/codeql/pull/21888#pullrequestreview-4425596650
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
Jun 4, 2026https://github.com/github/codeql/pull/21888#issuecomment-4619816266
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
Jun 4, 2026https://github.com/github/codeql/pull/21888#issuecomment-4620463052
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
Jun 4, 2026https://github.com/github/codeql/pull/21888#issuecomment-4622151986
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
1f91f91https://github.com/github/codeql/commit/1f91f915c7778dc58d1522bf6aed6644c78ec920
Jun 4, 2026https://github.com/github/codeql/pull/21888#event-26357497750
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
owen-mchttps://github.com/owen-mc
June 4, 2026 21:16https://github.com/github/codeql/pull/21888#event-26357498901
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
Jun 8, 2026 https://github.com/github/codeql/pull/21888#ref-pullrequest-4589004633
Python: Implement ContentApprox #21941 https://github.com/github/codeql/pull/21941
https://github.com/hvitved
hvitvedhttps://github.com/hvitved
Jul 1, 2026 https://github.com/github/codeql/pull/21888#ref-pullrequest-4784452968
Python: Improve some flow summaries #22101 https://github.com/github/codeql/pull/22101
https://github.com/yoff
yoffhttps://github.com/yoff
Jul 2, 2026 https://github.com/github/codeql/pull/21888#ref-pullrequest-4563086152
Python: switch dataflow library to new (shared) CFG + SSA #21925 https://github.com/github/codeql/pull/21925
https://github.co/hiddenchars
https://github.com/github/codeql/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F21888
Copilot code review https://github.com/apps/copilot-pull-request-reviewer
Copilot https://github.com/apps/copilot-pull-request-reviewer
https://github.com/github/codeql/pull/21888/files/ec13e1bcd3f3f0c41484d976ef1fc913fed1e109
https://github.com/hvitved
hvitved https://github.com/hvitved
https://github.com/github/codeql/pull/21888/files/da999ee440f951e82b0c776c0c8c025f2ed8fc1d
https://github.com/tausbn
tausbn https://github.com/tausbn
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Python https://github.com/github/codeql/issues?q=state%3Aopen%20label%3APython
Please reload this pagehttps://github.com/github/codeql/pull/21888
https://github.com/owen-mc
https://github.com/hvitved
https://github.com/apps/copilot-pull-request-reviewer
https://github.com/yoff
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.