diff --git a/ql/src/codeql_ruby/frameworks/ActiveRecord.qll b/ql/src/codeql_ruby/frameworks/ActiveRecord.qll index 53c57fb308d..fc6573a1518 100644 --- a/ql/src/codeql_ruby/frameworks/ActiveRecord.qll +++ b/ql/src/codeql_ruby/frameworks/ActiveRecord.qll @@ -52,6 +52,13 @@ class ActiveRecordModelClassMethodCall extends MethodCall { or // e.g. Foo.joins(:bars).where(...) this.getReceiver() instanceof ActiveRecordModelClassMethodCall + or + // e.g. self.where(...) within an ActiveRecordModelClass + ( + this.getReceiver() instanceof Self + and + this.getEnclosingModule() instanceof ActiveRecordModelClass + ) } }