Commits

Commit history

1. Commits on Feb 9, 2026

   • Merge pull request #20563 from microsoft/azure_python_sdk_url_summary_upstream

     Show description for 5ad42f8
     yoff

     authored
     5ad42f8View commit details

     Copy full SHA for 5ad42f8

     View code at this pointBrowse repository at this point
2. Commits on Feb 6, 2026

   • Moving the SsrfSink concept into Concepts.qll, and renaming to HttpClientRequestFromModel as suggested in PR review.

     bdrodes

     committed
     8459eecView commit details

     Copy full SHA for 8459eec

     View code at this pointBrowse repository at this point
3. Commits on Feb 5, 2026

   • Update python/ql/lib/change-notes/2025-09-30-azure_ssrf_models.md

     Show description for ac1987f
     

     bdrodes

     and

     owen-mc

     authored
     ac1987fView commit details

     Copy full SHA for ac1987f

     View code at this pointBrowse repository at this point

   • Python: Bump extractor version and add change note

     tausbn

     committed
     8c27437View commit details

     Copy full SHA for 8c27437

     View code at this pointBrowse repository at this point

   • Python: Add tests

     tausbn

     committed
     12ee930View commit details

     Copy full SHA for 12ee930

     View code at this pointBrowse repository at this point

   • Python: Regenerate parser files

     tausbn

     committed
     bac356cView commit details

     Copy full SHA for bac356c

     View code at this pointBrowse repository at this point

   • Python: Fix syntax error when `=` is used as a format fill character

     Show description for 68c1a3d
     tausbn

     committed
     68c1a3dView commit details

     Copy full SHA for 68c1a3d

     View code at this pointBrowse repository at this point
4. Commits on Feb 4, 2026

   • Python: Altering SSRF MaD to use 'request-forgery' tag. Update to test cases expected results, off by one line. Changed to using ModelOutput::sinkNode.

     bdrodes

     committed
     0a88425View commit details

     Copy full SHA for 0a88425

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into azure_python_sdk_url_summary_upstream

     bdrodes

     authored
     cd73dcfView commit details

     Copy full SHA for cd73dcf

     View code at this pointBrowse repository at this point

   • Pretty print models in test

     Show description for 3f08ff8
     owen-mc

     committed
     3f08ff8View commit details

     Copy full SHA for 3f08ff8

     View code at this pointBrowse repository at this point
5. Commits on Feb 2, 2026

   • Post-release preparation for codeql-cli-2.24.1

     

     github-actions[bot]

     committed
     73d06f2View commit details

     Copy full SHA for 73d06f2

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into azure_python_sdk_url_summary_upstream

     bdrodes

     authored
     7ddfa80View commit details

     Copy full SHA for 7ddfa80

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.24.1

     

     github-actions[bot]

     committed
     0db542eView commit details

     Copy full SHA for 0db542e

     View code at this pointBrowse repository at this point
6. Commits on Jan 30, 2026

   • Merge pull request #21234 from owen-mc/python/convert-sanitizers-to-mad

     Show description for 5204255
     owen-mc

     authored
     5204255View commit details

     Copy full SHA for 5204255

     View code at this pointBrowse repository at this point

   • Specify vulnerable args instead of safe ones

     owen-mc

     committed
     0222159View commit details

     Copy full SHA for 0222159

     View code at this pointBrowse repository at this point

   • Merge pull request #21141 from mbaluda/prompt-injection

     Show description for 8c0baef
     yoff

     authored
     8c0baefView commit details

     Copy full SHA for 8c0baef

     View code at this pointBrowse repository at this point

   • Replace sanitizer by exclusion from sink definition

     owen-mc

     committed
     a3885cdView commit details

     Copy full SHA for a3885cd

     View code at this pointBrowse repository at this point

   • Make qldoc slightly more specific

     owen-mc

     committed
     b4cb2c3View commit details

     Copy full SHA for b4cb2c3

     View code at this pointBrowse repository at this point

   • Allow MaD sanitizers for queries with MaD sinks

     owen-mc

     committed
     ef6332cView commit details

     Copy full SHA for ef6332c

     View code at this pointBrowse repository at this point

   • Pretty print model numbers in tests

     owen-mc

     committed
     ad6f800View commit details

     Copy full SHA for ad6f800

     View code at this pointBrowse repository at this point
7. Commits on Jan 29, 2026

   • python: Add query for prompt injection

     Show description for e7a0fc7
     yoff

     committed
     e7a0fc7View commit details

     Copy full SHA for e7a0fc7

     View code at this pointBrowse repository at this point

   • Update CHANGELOG.md

     jonjanego

     authored
     e54d7c7View commit details

     Copy full SHA for e54d7c7

     View code at this pointBrowse repository at this point

   • Fix typo in taint flow model for urllib.parse

     jonjanego

     authored
     813d463View commit details

     Copy full SHA for 813d463

     View code at this pointBrowse repository at this point

   • Merge pull request #20945 from joefarebrother/python-websockets

     Show description for 34800d1
     tausbn

     authored
     34800d1View commit details

     Copy full SHA for 34800d1

     View code at this pointBrowse repository at this point
8. Commits on Jan 26, 2026

   • Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering

     Show description for b974a84
     hvitved

     authored
     b974a84View commit details

     Copy full SHA for b974a84

     View code at this pointBrowse repository at this point

   • Add change notes

     hvitved

     committed
     0f6bae0View commit details

     Copy full SHA for 0f6bae0

     View code at this pointBrowse repository at this point

   • Python: Adapt to changes in `FlowSummaryImpl`

     hvitved

     committed
     0adece7View commit details

     Copy full SHA for 0adece7

     View code at this pointBrowse repository at this point
9. Commits on Jan 22, 2026

   • python: format file

     yoff

     committed
     55abc52View commit details

     Copy full SHA for 55abc52

     View code at this pointBrowse repository at this point

   • python/javascript/ruby: mark internal predicates

     yoff

     committed
     d05901aView commit details

     Copy full SHA for d05901a

     View code at this pointBrowse repository at this point

   • Update python/ql/lib/semmle/python/security/dataflow/UrlRedirectCustomizations.qll

     Show description for 7f00a7f
     

     yoff

     and

     aschackmull

     committed
     7f00a7fView commit details

     Copy full SHA for 7f00a7f

     View code at this pointBrowse repository at this point

   • python: add machinery for MaD barriers

     Show description for 3dbfb9f
     yoff

     committed
     3dbfb9fView commit details

     Copy full SHA for 3dbfb9f

     View code at this pointBrowse repository at this point

   • python: remove barrier that can be expressed in MaD

     yoff

     committed
     699ed50View commit details

     Copy full SHA for 699ed50

     View code at this pointBrowse repository at this point
10. Commits on Jan 20, 2026

    • Merge pull request #21134 from yoff/python/support-ListElement-in-MaD

      Show description for 5414bd2
      tausbn

      authored
      5414bd2View commit details

      Copy full SHA for 5414bd2

      View code at this pointBrowse repository at this point

    • python: add changenote

      yoff

      committed
      fa92645View commit details

      Copy full SHA for fa92645

      View code at this pointBrowse repository at this point

    • python: Add up/downgrade scripts

      igfoo

      committed
      82e9ea2View commit details

      Copy full SHA for 82e9ea2

      View code at this pointBrowse repository at this point