Python fp and docs updtes (#58)

* refactor: Update comments for clarity and add expectations.json files for performance metrics

* feat: Implement FP guard for JS/TS local-collection receivers to suppress missing ownership checks

* feat: Enhance Rust parameter handling to classify local collections and prevent false ownership checks

* refactor: Simplify code formatting for better readability in multiple files

* refactor: Improve UTF-8 sequence length handling and enhance clarity in loop iteration

* feat: Update Java and Python patterns to include new security rules

* refactor: Improve comment clarity and consistency across multiple Rust files

* refactor: Simplify code formatting for improved readability in integration tests and module files

* refactor: Improve comment formatting and enhance clarity in assertions across multiple files
This commit is contained in:
Eli Peter 2026-04-29 19:53:34 -04:00 committed by GitHub
parent 4db0805de6
commit a438886217
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
291 changed files with 9485 additions and 3851 deletions

View file

@ -8,7 +8,7 @@
//! superset that DROPS no genuine findings.
//!
//! Both modes are exercised in the same test process via a serial
//! mutex around env-var manipulation cargo runs tests in parallel
//! mutex around env-var manipulation, cargo runs tests in parallel
//! and an unprotected env-var write would leak between threads.
//!
//! A4 baseline snapshot: when the env variable
@ -43,12 +43,12 @@ fn fixture_path(name: &str) -> PathBuf {
/// Fixture mix curated for the strict-additive guard. Picks shapes
/// the pointer module actively touches:
///
/// * `container_taint_js` JS container ops (push/shift/pop) flow
/// * `container_taint_js`, JS container ops (push/shift/pop) flow
/// through the W2 / W4 ELEM cells when pointer is on.
/// * `container_taint_py` Python container shapes mirror the JS path
/// * `container_taint_py`, Python container shapes mirror the JS path
/// for non-method `__getitem__` / `__setitem__` (W5; deferred but
/// the existing method-shape ops are still exercised).
/// * `cross_file_py_object_field` field-flow shapes that exercise
/// * `cross_file_py_object_field`, field-flow shapes that exercise
/// the W1 / W3 cross-call resolver with field-name keys.
///
/// Picked deliberately small: every additional fixture multiplies the
@ -114,7 +114,7 @@ where
/// it must not change the structural identity of any existing
/// finding. The current curated fixtures exercise shapes the
/// pointer module touches but where existing engine analyses already
/// produce all the findings so the equality check is the right
/// produce all the findings, so the equality check is the right
/// shape today. When pointer-on starts adding NEW findings to these
/// fixtures, the test should be updated to assert
/// `enabled.is_superset(disabled)`.
@ -178,7 +178,7 @@ fn pointer_disabled_finding_set_matches_baseline() {
let snapshot_text = match std::fs::read_to_string(&snapshot_path) {
Ok(s) => s,
Err(_) => {
// First run / missing snapshot write it and skip the
// First run / missing snapshot, write it and skip the
// diff check. Subsequent runs will assert against this
// captured value.
if let Some(parent) = snapshot_path.parent() {