hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: Add count_by_sql as SQL sink

Browse Source
This commit is contained in:
Harry Maclean
2023-03-13 08:40:32 +13:00
parent c97dccf0de
commit 2d95b6a049
3 changed files with 26 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ruby/ql/lib/codeql/ruby/frameworks/ActiveRecord.qll
View File

@@ -123,7 +123,7 @@ private Expr sqlFragmentArgument(MethodCall call) {
or
methodName = "calculate" and result = call.getArgument(1)
or
methodName in ["average", "count", "maximum", "minimum", "sum"] and
methodName in ["average", "count", "maximum", "minimum", "sum", "count_by_sql"] and
result = call.getArgument(0)
or
// This format was supported until Rails 2.3.8