Skip to content

Release 0.1.6

Choose a tag to compare

View all tags
@tercel tercel released this 16 Feb 07:50
· 20 commits to main since this release
python/v0.1.6
63d2921

Added

  • check-chars: Dangerous character blacklist (bidi controls + zero-width chars, CVE-2021-42574) with comment-aware detection — flags in code, allows in comments
  • check-chars: is_dangerous_char() public function and DANGEROUS_CODEPOINTS constant
  • check-chars: Comment region detection state machine for Python (#) and JS/TS (//, /* */) with string literal tracking
  • check-imports: Relative import support — from .foo import x and from . import foo now resolve correctly for cycle detection

Fixed

  • check-imports: ImportAnalyzer now handles node.level > 0 (relative imports) by resolving against current_module with correct package vs module distinction
Assets 2
Loading