fix(taint): track sensitive data through reflective urllib sinks - #589

Open

agentsope wants to merge 19 commits into

NVIDIA:mainfrom

agentsope:test/586-network-reflection-repro

Commits on Sep 19, 2026

test: cover constructed network reflection from issue 586
agentsope
committed
f764e27
test: assert published finding match for reflection regression
agentsope
committed
e9e8697
test: distinguish reflection findings from verdict policy
agentsope
committed
47fb8e4
test: specify reflective network taint resolution
agentsope
committed
c647510
fix(taint): resolve constructed reflective network sinks
agentsope
committed
ad2bbb2
test: verify reflective exfiltration through report pipeline
agentsope
committed
46ad1ad
style: format reflective sink resolver
agentsope
committed
a7feca4
test: reject stale reflective sink aliases
agentsope
committed
6c44837
fix(taint): invalidate reassigned reflective handles
agentsope
committed
fa24596
test: scope reflective sink bindings by call site
agentsope
committed
2a411ce
fix(taint): scope reflective handles to call sites
agentsope
committed
16eb727
style: define async binding visitor explicitly
agentsope
committed
df059a3
fix(taint): separate scope shadowing from expression binding
agentsope
committed
f130449
test: keep class bindings out of method scope
agentsope
committed
9b17c25
fix(taint): isolate reflective class namespaces
agentsope
committed
bfd8be7
test: focus issue 586 coverage on tainted reflection
agentsope
committed
e427ae2
test: cover shadowed importlib helpers
agentsope
committed
050d267
fix(taint): resolve importlib helpers within lexical scope
agentsope
committed
1d8a648
fix(taint): model reflective bindings across scopes
agentsope
committed
a797b06

Navigation Menu

fix(taint): track sensitive data through reflective urllib sinks - #589

fix(taint): track sensitive data through reflective urllib sinks#589
agentsope wants to merge 19 commits into
NVIDIA:mainfrom
agentsope:test/586-network-reflection-repro

Commits on Sep 19, 2026

test: cover constructed network reflection from issue 586

test: assert published finding match for reflection regression

test: distinguish reflection findings from verdict policy

test: specify reflective network taint resolution

fix(taint): resolve constructed reflective network sinks

test: verify reflective exfiltration through report pipeline

style: format reflective sink resolver

test: reject stale reflective sink aliases

fix(taint): invalidate reassigned reflective handles

test: scope reflective sink bindings by call site

fix(taint): scope reflective handles to call sites

style: define async binding visitor explicitly

fix(taint): separate scope shadowing from expression binding

test: keep class bindings out of method scope

fix(taint): isolate reflective class namespaces

test: focus issue 586 coverage on tainted reflection

test: cover shadowed importlib helpers

fix(taint): resolve importlib helpers within lexical scope

fix(taint): model reflective bindings across scopes