Merge pull request #5999 from RasmusWL/aiohttp-modeling

Python: Add aiohttp.web modeling

Author: yoff

docs/codeql/support/reusables/frameworks.rst

@@ -152,6 +152,7 @@ Python built-in support
    :widths: auto
 
    Name, Category
+   aiohttp.web, Web framework
    Django, Web framework
    Flask, Web framework
    Tornado, Web framework
@@ -160,8 +161,10 @@ Python built-in support
    simplejson, Serialization
    ujson, Serialization
    fabric, Utility library
-   invoke, Utility library
    idna, Utility library
+   invoke, Utility library
+   multidict, Utility library
+   yarl, Utility library
    mysql-connector-python, Database
    MySQLdb, Database
    psycopg2, Database

python/change-notes/2021-06-03-aiohttp-webserver-modeling.md

@@ -0,0 +1,2 @@
+lgtm,codescanning
+* Added modeling of sources/sinks when using the `aiohttp.web` web framework.

python/ql/src/semmle/python/Frameworks.qll

@@ -4,6 +4,7 @@
 
 // If you add modeling of a new framework/library, remember to add it it to the docs in
 // `docs/codeql/support/reusables/frameworks.rst`
+private import semmle.python.frameworks.Aiohttp
 private import semmle.python.frameworks.Cryptodome
 private import semmle.python.frameworks.Cryptography
 private import semmle.python.frameworks.Dill
@@ -12,6 +13,7 @@ private import semmle.python.frameworks.Fabric
 private import semmle.python.frameworks.Flask
 private import semmle.python.frameworks.Idna
 private import semmle.python.frameworks.Invoke
+private import semmle.python.frameworks.Multidict
 private import semmle.python.frameworks.MysqlConnectorPython
 private import semmle.python.frameworks.MySQLdb
 private import semmle.python.frameworks.Psycopg2
@@ -21,3 +23,4 @@ private import semmle.python.frameworks.Stdlib
 private import semmle.python.frameworks.Tornado
 private import semmle.python.frameworks.Ujson
 private import semmle.python.frameworks.Yaml
+private import semmle.python.frameworks.Yarl