Skip to content

Commit 95ead47

Browse files
author
Felicity Chapman
committed
Organization changes and boiler-plate text deletion
1 parent 975605b commit 95ead47

File tree

1 file changed

+5
-10
lines changed

1 file changed

+5
-10
lines changed

change-notes/1.20/analysis-python.md

Lines changed: 5 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,8 @@
11
# Improvements to Python analysis
22

3+
## General improvements
34

4-
## General improvements
5-
6-
> Changes that affect alerts in many files or from many queries
7-
> For example, changes to file classification
5+
The extractor now parses all Python code from a single unified grammar. This means that almost all Python code will be successfully parsed, even if mutually incompatible Python code is present in the same project. This also means that Python code for any version can be correctly parsed on a worker running any other supported version of Python. For example, Python 3.7 code is parsed correctly, even if the installed version of Python is only 3.5.
86

97
The constants `MULTILINE` and `VERBOSE` in `re` module, are now understood for Python 3.6 and upward.
108
Removes false positives seen when using Python 3.6, but not when using earlier versions.
@@ -13,7 +11,7 @@ The API has been improved to declutter the global namespace and improve discover
1311
* The API for accessing builtin functions has been improved. Predicates of the form `theXXXFunction()`, such as `theLenFunction()`, have been deprecated in favour of `Object::builtin(name)`.
1412
* A configuration based API has been added for writing data flow and taint tracking queries. This is provided as a convenience for query authors who have written data flow or taint tracking queries for other languages, so they can use a similar format of query across multiple languages.
1513

16-
## New queries
14+
## New queries
1715

1816
| **Query** | **Tags** | **Purpose** |
1917
|-----------------------------|-----------|--------------------------------------------------------------------|
@@ -24,7 +22,7 @@ The API has been improved to declutter the global namespace and improve discover
2422
| Overly permissive file permissions (`py/overly-permissive-file`) | security, external/cwe/cwe-732 | Finds instances where a file is created with overly permissive permissions. Results are not shown on LGTM by default. |
2523
| Use of insecure SSL/TLS version (`py/insecure-protocol`) | security, external/cwe/cwe-327 | Finds instances where a known insecure protocol has been specified. Results are shown on LGTM by default. |
2624

27-
## Changes to existing queries
25+
## Changes to existing queries
2826

2927
| **Query** | **Expected impact** | **Change** |
3028
|----------------------------|------------------------|------------------------------------------------------------------|
@@ -35,11 +33,8 @@ The API has been improved to declutter the global namespace and improve discover
3533
| Unused import (`py/unused-import`) | Fewer false positive results | Results where the imported module is used in a `doctest` string are no longer reported. |
3634
| Unused import (`py/unused-import`) | Fewer false positive results | Results where the imported module is used in a type-hint comment are no longer reported. |
3735

38-
## Changes to code extraction
39-
40-
* The extractor now parses all Python code from a single unified grammar. This means that almost all Python code will be successfully parsed, even if mutually incompatible Python code is present in the same project. This also means that Python code for any version can be correctly parsed on a worker running any other supported version of Python. For example, Python 3.7 code is parsed correctly, even if the installed version of Python is only 3.5.
4136

42-
## Changes to QL libraries
37+
## Changes to QL libraries
4338

4439
* Added support for the `dill` pickle library.
4540
* Added support for the `bottle` web framework.

0 commit comments

Comments
 (0)