hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: add change notes for Arel.sql / SqlConstruction changes

Browse Source
This commit is contained in:
Nick Rolfe
2022-11-10 13:00:29 +00:00
parent 5a15558355
commit 0337ccb93a
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ruby/ql/lib/change-notes/2022-11-10-arel-sql.md Normal file
View File

@@ -0,0 +1,5 @@
---
category: minorAnalysis
---
* The `codeql.ruby.Concepts` library now has a `SqlConstruction` class, in addition to the existing `SqlExecution` class.
* Calls to `Arel.sql` are now modeled as instances of the new `SqlConstruction` concept.

4
ruby/ql/src/change-notes/2022-11-10-arel-sql.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* The `rb/sql-injection` query now considers consider SQL constructions, such as calls to `Arel.sql`, as sinks.