zulip/zerver/lib
Graham Bleaney 461d5b1a3e pysa: Introduce sanitizers, models, and inline marking safe.
This commit adds three `.pysa` model files: `false_positives.pysa`
for ruling out false positive flows with `Sanitize` annotations,
`req_lib.pysa` for educating pysa about Zulip's `REQ()` pattern for
extracting user input, and `redirects.pysa` for capturing the risk
of open redirects within Zulip code. Additionally, this commit
introduces `mark_sanitized`, an identity function which can be used
to selectively clear taint in cases where `Sanitize` models will not
work. This commit also puts `mark_sanitized` to work removing known
false postive flows.
2020-06-11 12:57:49 -07:00
..
bugdown python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
url_preview pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
webhooks python: Convert more "".format to Python 3.6 f-strings. 2020-06-10 14:48:09 -07:00
__init__.py
actions.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
addressee.py addressee: Remove obsolete parsing functions. 2020-05-12 17:33:11 -07:00
alert_words.py python: Convert more variable type annotations to Python 3.6 style. 2020-05-08 16:42:43 -07:00
attachments.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
avatar.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
avatar_hash.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
bot_config.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
bot_lib.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
bot_storage.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
bulk_create.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
cache.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
cache_helpers.py docs: Update most remaining references to zulipchat.com. 2020-06-08 18:10:45 -07:00
camo.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
ccache.py docs: Convert many http URLs to https. 2020-03-26 21:35:32 -07:00
context_managers.py
create_user.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
db.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
debug.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
dev_ldap_directory.py requirements: Drop direct dependency on mock. 2020-05-26 11:40:42 -07:00
digest.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
display_recipient.py python: Convert TypedDict declarations to Python 3.6 style. 2020-05-26 11:43:40 -07:00
domains.py domains: Fix typing for validate_domain. 2019-07-29 15:18:24 -07:00
email_mirror.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
email_mirror_helpers.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
email_notifications.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
email_validation.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
emoji.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
error_notify.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
events.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
exceptions.py python: Use standard NoReturn (Python ≥ 3.6). 2020-06-11 12:56:52 -07:00
export.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
external_accounts.py text: Fix some typos (most of them found and fixed by codespell). 2020-03-27 17:25:56 -07:00
fix_unreads.py fix_unreads: Use cursor.execute correctly. 2020-06-09 21:12:43 -07:00
generate_test_data.py populate_db: Generate topics using config fixture. 2020-05-05 16:11:09 -07:00
hotspots.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
html_diff.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
html_to_text.py html_to_text: Add delimiters between text from different elements. 2019-05-01 17:35:20 -07:00
i18n.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
import_realm.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
initial_password.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
integrations.py integrations: Add Thinkst Canary integration. 2020-06-09 16:28:28 -07:00
logging_util.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
management.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
mdiff.py
mention.py bugdown: Store if message has wildcards in MentionData. 2019-12-02 12:12:35 -08:00
message.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
migrate.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
mobile_auth_otp.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
name_restrictions.py docs: Convert many http URLs to https. 2020-03-26 21:35:32 -07:00
narrow.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
onboarding.py onboarding: Mark strings in send_initial_realm_messages for translation. 2020-04-23 17:18:39 -07:00
outgoing_webhook.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
parallel.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
presence.py presence: Optimize performance of mobile_query. 2020-05-14 23:23:37 -07:00
profile.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
push_notifications.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
pysa.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
queue.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
rate_limiter.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
realm_description.py html_to_text: Add delimiters between text from different elements. 2019-05-01 17:35:20 -07:00
realm_icon.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
realm_logo.py realm_logo: Remove redundant `realm_logo_url` function. 2019-08-20 12:07:20 -07:00
redis_utils.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
remote_server.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
request.py request: Replace type argument hack with a different workaround. 2020-06-05 20:05:18 -07:00
response.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
rest.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
retention.py retention: Pass optional realm argument to move_messages_to_archive. 2020-05-16 14:46:56 -07:00
send_email.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
server_initialization.py actions: Merge do_change_is_admin and do_change_is_guest. 2020-05-25 16:17:10 -07:00
sessions.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
soft_deactivation.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
sqlalchemy_utils.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
statistics.py python: Modernize legacy Python 2 syntax with pyupgrade. 2020-04-09 16:43:22 -07:00
storage.py docs: Merge front-end-build-process with html-css. 2019-10-23 13:08:36 -07:00
stream_recipient.py stream_recipient: Use cursor.execute correctly. 2020-06-09 21:12:43 -07:00
stream_subscription.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
stream_topic.py python: Whitespace fixes from autopep8. 2020-04-21 17:58:09 -07:00
streams.py stream: Allow non admins to set stream post policy when creating streams. 2020-05-16 14:53:22 -07:00
subdomains.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
test_classes.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
test_data.source.txt
test_fixtures.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
test_helpers.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
test_runner.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
tex.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
thumbnail.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
timeout.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
timestamp.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
timezone.py markdown: Add timestamp syntax to markdown processors. 2020-05-20 14:23:55 -07:00
topic.py topic: Remove 7 days restriction for editing & moving topics. 2020-05-08 12:57:50 -07:00
topic_mutes.py python: Whitespace fixes from autopep8. 2020-04-21 17:58:09 -07:00
transfer.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
type_debug.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
types.py python: Convert TypedDict declarations to Python 3.6 style. 2020-05-26 11:43:40 -07:00
unminify.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
upload.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
url_encoding.py pysa: Introduce sanitizers, models, and inline marking safe. 2020-06-11 12:57:49 -07:00
user_agent.py user_agent: Compile the regular expression. 2020-02-14 10:26:37 -08:00
user_groups.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
user_status.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
users.py models: Parameterize .extra(where=["… IN …"]) with tuple/list adapter. 2020-06-09 21:12:43 -07:00
utils.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
validator.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00
widget.py
zcommand.py zcommand: Add `/fluid-width` and `/fixed-width` slash commands. 2020-04-07 20:54:34 -07:00
zephyr.py python: Convert percent formatting to Python 3.6 f-strings. 2020-06-10 15:02:09 -07:00