Ruby: add missing example rails action

2026-04-25 08:45:14 +02:00 · 2022-01-19 13:47:00 +00:00
parent 45ed5a806c
commit 0aab670b17
1 changed files with 5 additions and 0 deletions
--- a/ruby/ql/test/query-tests/security/cwe-352/railsapp/app/controllers/articles_controller.rb
+++ b/ruby/ql/test/query-tests/security/cwe-352/railsapp/app/controllers/articles_controller.rb
@@ -9,6 +9,11 @@ class ArticlesController < ApplicationController
    article.destroy
  end

+  def change_title
+    article.title = params[:article_title]
+    article.save!
+  end
+
  def article
    @article ||= Article.find(params[:article_id])
  end