Ruby: Add new test case for rb/code-injection

2026-04-28 02:05:14 +02:00 · 2022-10-09 22:26:29 +01:00
parent c4baf0b8fa
commit 4a39e4aac0
1 changed files with 2 additions and 2 deletions
--- a/ruby/ql/test/query-tests/security/cwe-094/CodeInjection.rb
+++ b/ruby/ql/test/query-tests/security/cwe-094/CodeInjection.rb
@@ -37,8 +37,8 @@ class UsersController < ActionController::Base
    # BAD
    eval(Regexp.escape(code))

-
-
+    # BAD
+    ActiveJob::Serializers.deserialize(code)
  end

  def update