hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-21 14:47:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

update models

Browse Source
This commit is contained in:
Alex Ford
2023-09-25 11:37:23 +01:00
parent cd7077d74e
commit 95bf9fdf1a
57 changed files with 32567 additions and 6018 deletions
Download Patch File Download Diff File Expand all files Collapse all files

381
ruby/ql/lib/codeql/ruby/frameworks/models/CocoaPods/model.yml
View File

@@ -36,6 +36,9 @@
- - "Pod::Project"
- "Pod::Installer::BaseInstallHooksContext!"
- "Method[generate].Parameter[1]"
- - "Pod::Installer::Xcode::MultiPodsProjectGenerator"
- "Pod::Installer"
- "Method[create_generator].ReturnValue"
- - "Pod::Podfile"
- "Pod::Validator"
- "Method[podfile_from_spec].ReturnValue"
@@ -45,6 +48,12 @@
- - "Pod::Podfile"
- "Pod::Installer::InstallationOptions!"
- "Method[from_podfile].Parameter[0]"
- - "Pod::Validator"
- "Pod"
- "Method[test_validator].ReturnValue"
- - "Pod::Validator"
- "Pod::ExternalSources::AbstractExternalSource"
- "Method[validator_for_podspec].ReturnValue"
- - "Pod::Resolver"
- "Pod"
- "Method[create_resolver].ReturnValue"
@@ -59,16 +68,25 @@
- "Method[generate_aggregate_target].ReturnValue"
- - "Pod::AggregateTarget"
- "Pod::Installer::ProjectCache::TargetCacheKey!"
- "Method[from_aggregate_target].Parameter[1]"
- "Method[from_aggregate_target].Parameter[2]"
- - "Pod::Installer::Analyzer"
- "Pod::Installer"
- "Method[resolve_dependencies].ReturnValue"
- - "Pod::Installer::Analyzer"
- "Pod::Installer"
- "Method[create_analyzer].ReturnValue"
- - "Pod::PodTarget"
- "Pod::Installer::Analyzer"
- "Method[generate_pod_target].ReturnValue"
- - "Pod::Validator"
- "Pod"
- "Method[test_validator].ReturnValue"
- - "Pod::Validator"
- "Pod::ExternalSources::AbstractExternalSource"
- "Method[validator_for_podspec].ReturnValue"
- - "Pod::Installer::Analyzer::SpecsState"
- "Pod::Installer::Analyzer"
- "Method[generate_podfile_state].ReturnValue"
- - "Pod::Installer::Analyzer::SpecsState"
- "Pod::Installer::Analyzer"
- "Method[generate_sandbox_state].ReturnValue"
- - "Pod::Installer::Analyzer::SpecsState"
- "Pod::Installer::Analyzer::SandboxAnalyzer"
- "Method[analyze].ReturnValue"
- - "Pod::Downloader::Request"
- "Pod::ExternalSources::AbstractExternalSource"
- "Method[download_request].ReturnValue"
@@ -78,6 +96,9 @@
- - "Pod::Downloader::Request"
- "Pod::Downloader!"
- "Method[preprocess_request].ReturnValue"
- - "Pod::Installer::PodSourceDownloader"
- "Pod::Installer"
- "Method[create_pod_downloader].ReturnValue"
- - "Pod::Generator::Constant"
- "Pod::Installer::Xcode::PodsProjectGenerator::TargetInstallerHelper"
- "Method[update_changed_file].Parameter[0]"
@@ -114,12 +135,6 @@
- - "Pod::Generator::UmbrellaHeader"
- "Pod::Installer::Xcode::PodsProjectGenerator::TargetInstallerHelper"
- "Method[update_changed_file].Parameter[0]"
- - "Pod::Installer::Analyzer"
- "Pod::Installer"
- "Method[resolve_dependencies].ReturnValue"
- - "Pod::Installer::Analyzer"
- "Pod::Installer"
- "Method[create_analyzer].ReturnValue"
- - "Pod::Installer::BaseInstallHooksContext"
- "Pod::Installer::BaseInstallHooksContext!"
- "Method[generate].ReturnValue"
@@ -132,9 +147,6 @@
- - "Pod::Installer::InstallationOptions"
- "Pod::Installer::InstallationOptions!"
- "Method[from_podfile].ReturnValue"
- - "Pod::Installer::PodSourceDownloader"
- "Pod::Installer"
- "Method[create_pod_downloader].ReturnValue"
- - "Pod::Installer::PodSourceInstaller"
- "Pod::Installer"
- "Method[create_pod_installer].ReturnValue"
@@ -171,15 +183,6 @@
- - "Pod::Installer::Analyzer::TargetInspectionResult"
- "Pod::Installer::Analyzer::TargetInspector"
- "Method[compute_results].ReturnValue"
- - "Pod::Installer::Analyzer::SpecsState"
- "Pod::Installer::Analyzer"
- "Method[generate_podfile_state].ReturnValue"
- - "Pod::Installer::Analyzer::SpecsState"
- "Pod::Installer::Analyzer"
- "Method[generate_sandbox_state].ReturnValue"
- - "Pod::Installer::Analyzer::SpecsState"
- "Pod::Installer::Analyzer::SandboxAnalyzer"
- "Method[analyze].ReturnValue"
- - "Pod::Installer::ProjectCache::ProjectCacheAnalysisResult"
- "Pod::Installer"
- "Method[analyze_project_cache].ReturnValue"
@@ -210,9 +213,6 @@
- - "Pod::Installer::ProjectCache::TargetMetadata"
- "Pod::Installer::ProjectCache::TargetMetadata!"
- "Method[from_native_target].ReturnValue"
- - "Pod::Installer::Xcode::MultiPodsProjectGenerator"
- "Pod::Installer"
- "Method[create_generator].ReturnValue"
- - "Pod::Installer::Xcode::SinglePodsProjectGenerator"
- "Pod::Installer"
- "Method[create_generator].ReturnValue"
@@ -238,6 +238,9 @@
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Pod::Installer::Xcode::PodsProjectGenerator::TargetInstallerHelper"
- "Method[update_changed_file].Parameter[1]"
- "path-injection"
- - "Pod::Validator"
- "Method[validate_nonempty_patterns].Parameter[0]"
- "code-injection"
@@ -259,15 +262,21 @@
- - "Pod::Installer::Xcode::PodsProjectGenerator::FileReferencesInstaller"
- "Method[add_file_accessors_paths_to_pods_group].Parameter[0]"
- "code-injection"
- - "Pod::Installer::Xcode::PodsProjectGenerator::TargetInstallerHelper"
- "Method[update_changed_file].Parameter[1]"
- "path-injection"
- - "Pod::Installer::ProjectCache::ProjectCacheVersion!"
- "Method[from_file].Parameter[0]"
- "path-injection"
- - "Pod::Sandbox!"
- "Method[update_changed_file].Parameter[0]"
- "path-injection"
- - "Pod::Installer::ProjectCache::ProjectCacheVersion"
- "Method[save_as].Parameter[0]"
- "path-injection"
- - "Pod::Installer::ProjectCache::ProjectInstallationCache"
- "Method[save_as].Parameter[0]"
- "path-injection"
- - "Pod::Installer::ProjectCache::ProjectMetadataCache"
- "Method[save_as].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
@@ -287,9 +296,9 @@
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Installer"
- "Method[section_title]"
- "Argument[1]"
- - "SpecHelper!"
- "Method[create_sample_app_copy_from_fixture]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer"
@@ -297,6 +306,11 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer"
- "Method[section_title]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Project"
- "Method[defininition_for_build_configuration]"
- "Argument[0]"
@@ -307,6 +321,16 @@
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Pod::Installer::BaseInstallHooksContext!"
- "Method[new]"
- "Argument[4]"
- "ReturnValue"
- "value"
- - "Pod::Installer::Analyzer::PodfileDependencyCache!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Pod::Sandbox"
- "Method[store_podspec]"
- "Argument[1]"
@@ -357,16 +381,16 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Target"
- "Method[xcconfig_path]"
- "Argument[0]"
- - "Pod::Installer::Analyzer"
- "Method[determine_build_type]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Target"
- "Method[c99ext_identifier]"
- "Argument[0]"
- "value"
- - "Pod::Installer::ProjectCache::TargetCacheKey!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- "value"
- - "Pod::PodTarget"
- "Method[resources_bundle_target_label]"
- "Argument[0]"
@@ -397,26 +421,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper::Fixture"
- "Method[fixture]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper::TemporaryRepos"
- "Method[repo_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper::TemporaryRepos"
- "Method[repo_make]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper::TemporaryRepos"
- "Method[repo_clone]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Init"
- "Method[template_contents]"
- "Argument[1]"
@@ -427,16 +431,16 @@
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec"
- "Method[validate_regex!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Downloader::Cache"
- "Method[path_for_pod]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::ExternalSources::AbstractExternalSource"
- "Method[normalized_podspec_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Downloader::Request"
- "Method[slug]"
- "Argument[0]"
@@ -457,35 +461,15 @@
- "Argument[spec:]"
- "ReturnValue"
- "taint"
- - "Pod::ExternalSources::AbstractExternalSource"
- "Method[normalized_podspec_path]"
- - "Pod::Installer::ProjectCache::ProjectCacheVersion!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Downloader::Base"
- "Method[ui_message]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Plist"
- "Method[sanitize_encoding]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Markdown"
- "Method[title_from_string]"
- "value"
- - "Pod::Downloader!"
- "Method[download_source]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Markdown"
- "Method[title_from_string]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Acknowledgements"
- "Method[format_license]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Pod::Generator::CopyXCFrameworksScript"
- "Method[shell_escape]"
@@ -502,36 +486,16 @@
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Pod::Installer::Analyzer"
- "Method[determine_build_type]"
- "Argument[1]"
- - "Pod::Installer::PreInstallHooksContext!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Pod::Installer::PodfileValidator"
- "Method[add_error]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::PodfileValidator"
- "Method[add_warning]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::SourceProviderHooksContext"
- "Method[add_source]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::TargetUUIDGenerator"
- "Method[uuid_for_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Pod::Sandbox::HeadersStore"
- "Method[add_file]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Sandbox::PathList"
- "Method[escape_path_for_glob]"
- "Argument[0]"
@@ -562,23 +526,23 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec::Create"
- "Method[spec_template]"
- - "Pod::Target"
- "Method[xcconfig_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec::Create"
- "Method[semantic_versioning_notice]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec::Create"
- "Method[semantic_versioning_notice]"
- - "Pod::Target"
- "Method[c99ext_identifier]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::Analyzer::PodVariantSet"
- "Method[scope_if_necessary]"
- - "Pod::Xcode::FrameworkPaths!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::ProjectCacheAnalyzer"
- "Method[compute_removed_targets]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -587,11 +551,6 @@
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::ProjectCache::ProjectCacheAnalyzer"
- "Method[compute_removed_targets]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::ProjectCache::ProjectInstallationCache"
- "Method[update_cache_key_by_target_label!]"
- "Argument[0]"
@@ -617,6 +576,111 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::ProjectInstallationCache!"
- "Method[new]"
- "Argument[4]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::ProjectMetadataCache!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::TargetMetadata!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "SpecHelper::Fixture"
- "Method[fixture]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper::TemporaryRepos"
- "Method[repo_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper::TemporaryRepos"
- "Method[repo_make]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper::TemporaryRepos"
- "Method[repo_clone]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec"
- "Method[validate_regex!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Downloader::Base"
- "Method[ui_message]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Plist"
- "Method[sanitize_encoding]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Markdown"
- "Method[title_from_string]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Markdown"
- "Method[title_from_string]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Generator::Acknowledgements"
- "Method[format_license]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Pod::Installer::PodfileValidator"
- "Method[add_error]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::PodfileValidator"
- "Method[add_warning]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::TargetUUIDGenerator"
- "Method[uuid_for_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Pod::Sandbox::HeadersStore"
- "Method[add_file]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec::Create"
- "Method[spec_template]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec::Create"
- "Method[semantic_versioning_notice]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Spec::Create"
- "Method[semantic_versioning_notice]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::Analyzer::PodVariantSet"
- "Method[scope_if_necessary]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Command::Options::RepoUpdate"
- "Method[repo_update?]"
- "Argument[0]"
@@ -702,11 +766,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Pod::Installer::Analyzer::PodfileDependencyCache!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Pod::Installer::Analyzer::TargetInspector!"
- "Method[new]"
- "Argument[1]"
@@ -717,11 +776,6 @@
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Pod::Installer::BaseInstallHooksContext!"
- "Method[new]"
- "Argument[4]"
- "ReturnValue"
- "value"
- - "Pod::Installer::PodSourceDownloader!"
- "Method[new]"
- "Argument[3]"
@@ -752,36 +806,6 @@
- "Argument[5]"
- "ReturnValue"
- "value"
- - "Pod::Installer::PreInstallHooksContext!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::ProjectCacheVersion!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::ProjectInstallationCache!"
- "Method[new]"
- "Argument[4]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::TargetCacheKey!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::ProjectMetadataCache!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Pod::Installer::ProjectCache::TargetMetadata!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Pod::Sandbox::FileAccessor!"
- "Method[vendored_frameworks_headers_dir]"
- "Argument[0]"
@@ -797,11 +821,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Xcode::FrameworkPaths!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Pod::Target::BuildSettings::PodTargetSettings!"
- "Method[new]"
- "Argument[2]"
@@ -822,11 +841,6 @@
- "Argument[configuration:]"
- "ReturnValue"
- "value"
- - "Pod::Downloader!"
- "Method[download_source]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Xcodeproj::UserInterface!"
- "Method[warn]"
- "Argument[0]"
@@ -837,11 +851,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper!"
- "Method[create_sample_app_copy_from_fixture]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Pod::Installer::ProjectCache::ProjectCacheAnalysisResult!"
- "Method[new]"
- "Argument[4]"

142
ruby/ql/lib/codeql/ruby/frameworks/models/activerecord-import/model.yml Normal file
View File

@@ -0,0 +1,142 @@
"extensions":
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "OutputToHTML!"
- "Method[output_results].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Float"
- "Method[round_to]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Float"
- "Method[ceil_to]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Float"
- "Method[floor_to]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[increment_locking_column!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[increment_locking_column!]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[increment_locking_column!]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[add_column_for_on_duplicate_key_update]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[sql_for_on_duplicate_key_update_as_array]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[sql_for_on_duplicate_key_update_as_array]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[sql_for_on_duplicate_key_update_as_hash]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::MysqlAdapter"
- "Method[sql_for_on_duplicate_key_update_as_hash]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::SQLite3Adapter"
- "Method[next_value_for_sequence]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::SQLite3Adapter"
- "Method[add_column_for_on_duplicate_key_update]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::SQLite3Adapter"
- "Method[sql_for_conflict_target]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::SQLite3Adapter"
- "Method[sql_for_default_conflict_target]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::PostgreSQLAdapter"
- "Method[next_value_for_sequence]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::PostgreSQLAdapter"
- "Method[add_column_for_on_duplicate_key_update]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::PostgreSQLAdapter"
- "Method[sql_for_conflict_target]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::PostgreSQLAdapter"
- "Method[sql_for_default_conflict_target]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::AbstractAdapter::InstanceMethods"
- "Method[next_value_for_sequence]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::AbstractAdapter::InstanceMethods"
- "Method[increment_locking_column!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::AbstractAdapter::InstanceMethods"
- "Method[increment_locking_column!]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::AbstractAdapter::InstanceMethods"
- "Method[increment_locking_column!]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::ValueSetsBytesParser!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import::ValueSetsRecordsParser!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ActiveRecord::Import!"
- "Method[base_adapter]"
- "Argument[0]"
- "ReturnValue"
- "value"

8457
ruby/ql/lib/codeql/ruby/frameworks/models/aws-sdk-ruby/model.yml
View File

File diff suppressed because it is too large Load Diff

4
ruby/ql/lib/codeql/ruby/frameworks/models/better_errors/model.yml
View File

@@ -43,12 +43,12 @@
"data":
- - "BetterErrors::ErrorPage"
- "Method[text_heading]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "BetterErrors::ErrorPage"
- "Method[text_heading]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "BetterErrors::Middleware"

32
ruby/ql/lib/codeql/ruby/frameworks/models/bootsnap/model.yml
View File

@@ -3,12 +3,6 @@
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "BasicObject"
- "Bootsnap::LoadPathCache::Cache"
- "Method[find].ReturnValue"
- - "BasicObject"
- "Bootsnap::CompileCache::YAML::Psych4"
- "Method[input_to_storage].ReturnValue"
- - "BasicObject"
- "Bootsnap::CompileCache::YAML::Psych3"
- "Method[input_to_storage].ReturnValue"
@@ -21,6 +15,12 @@
- - "BasicObject"
- "Bootsnap::CompileCache::YAML::Psych4::SafeLoad"
- "Method[storage_to_output].ReturnValue"
- - "BasicObject"
- "Bootsnap::LoadPathCache::Cache"
- "Method[find].ReturnValue"
- - "BasicObject"
- "Bootsnap::CompileCache::YAML::Psych4"
- "Method[input_to_storage].ReturnValue"
- - "BasicObject"
- "Bootsnap::CompileCache::ISeq!"
- "Method[input_to_storage].ReturnValue"
@@ -50,11 +50,6 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Bootsnap::CLI"
- "Method[cache_dir=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Bootsnap::LoadPathCache::Cache"
- "Method[find]"
- "Argument[0]"
@@ -85,6 +80,16 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Bootsnap::CompileCache::ISeq!"
- "Method[fetch]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Bootsnap::CLI"
- "Method[cache_dir=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Bootsnap::LoadPathCache::LoadedFeaturesIndex"
- "Method[strip_extension_if_elidable]"
- "Argument[0]"
@@ -155,8 +160,3 @@
- "Argument[readonly:]"
- "ReturnValue"
- "value"
- - "Bootsnap::CompileCache::ISeq!"
- "Method[fetch]"
- "Argument[0]"
- "ReturnValue"
- "taint"

40
ruby/ql/lib/codeql/ruby/frameworks/models/bootstrap-sass/model.yml
View File

@@ -20,6 +20,11 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Converter::Network"
- "Method[get_tree_sha]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Converter::CharStringScanner"
- "Method[pos=]"
- "Argument[0]"
@@ -27,12 +32,12 @@
- "value"
- - "Converter::LessConversion"
- "Method[indent]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[indent]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
@@ -62,16 +67,11 @@
- "taint"
- - "Converter::LessConversion"
- "Method[replace_asset_url]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[replace_asset_url]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[mixin_all_grid_columns]"
- "Argument[1]"
- "ReturnValue"
- "taint"
@@ -80,11 +80,21 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[mixin_all_grid_columns]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[mixin_all_grid_columns]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[mixin_all_grid_columns]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[mixin_all_grid_columns]"
- "Argument[to:]"
@@ -95,11 +105,6 @@
- "Argument[from:]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[mixin_all_grid_columns]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[mixin_all_grid_columns]"
- "Argument[selector:]"
@@ -117,12 +122,12 @@
- "value"
- - "Converter::LessConversion"
- "Method[replace_file_imports]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
- "Method[replace_file_imports]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Converter::LessConversion"
@@ -265,8 +270,3 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Converter::Network"
- "Method[get_tree_sha]"
- "Argument[1]"
- "ReturnValue"
- "taint"

240
ruby/ql/lib/codeql/ruby/frameworks/models/capistrano/model.yml Normal file
View File

@@ -0,0 +1,240 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Capistrano::Configuration"
- "Capistrano::DSL::Env"
- "Method[env].ReturnValue"
- - "Capistrano::Configuration"
- "Capistrano::Configuration!"
- "Method[reset!].ReturnValue"
- - "Capistrano::Configuration"
- "Capistrano::Configuration!"
- "Method[env].ReturnValue"
- - "Capistrano::VersionValidator"
- "Capistrano::VersionValidator"
- "Method[verify].ReturnValue"
- - "Capistrano::VersionValidator"
- "Capistrano::DSL"
- "Method[lock].ReturnValue"
- - "Capistrano::Configuration::PluginInstaller"
- "Capistrano::Configuration"
- "Method[installer].ReturnValue"
- - "Capistrano::Configuration::Server"
- "Capistrano::Configuration"
- "Method[server].ReturnValue"
- - "Capistrano::Configuration::Server"
- "Capistrano::Configuration::Server"
- "Method[with].ReturnValue"
- - "Capistrano::Configuration::Server"
- "Capistrano::Configuration::Server"
- "Method[add_roles].ReturnValue"
- - "Capistrano::Configuration::Server"
- "Capistrano::Configuration::Server"
- "Method[add_role].ReturnValue"
- - "Capistrano::Configuration::Server"
- "Capistrano::Configuration::Servers"
- "Method[add_host].ReturnValue"
- - "Capistrano::Configuration::Server"
- "Capistrano::Configuration::Server!"
- "Method[[]].ReturnValue"
- - "Capistrano::Configuration::Servers"
- "Capistrano::Configuration"
- "Method[servers].ReturnValue"
- - "Capistrano::Configuration::ValidatedVariables"
- "Capistrano::Doctor::VariablesDoctor"
- "Method[variables].ReturnValue"
- - "Capistrano::Configuration::ValidatedVariables::ValidatedQuestion"
- "Capistrano::Configuration::ValidatedVariables"
- "Method[assert_valid_later].ReturnValue"
- - "Capistrano::Configuration::Server::Properties"
- "Capistrano::Configuration::Server"
- "Method[properties].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "TestApp"
- "Method[run].Parameter[0]"
- "command-injection"
- - "RaiseNotImplementedMacro"
- "Method[raise_not_implemented_on].Parameter[0]"
- "code-injection"
- - "Capistrano::Plugin"
- "Method[eval_rakefile].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "RemoteCommandHelpers"
- "Method[test_dir_exists]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RemoteCommandHelpers"
- "Method[test_symlink_exists]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RemoteCommandHelpers"
- "Method[test_file_exists]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RemoteCommandHelpers"
- "Method[exists?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RemoteCommandHelpers"
- "Method[exists?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RemoteCommandHelpers"
- "Method[symlinked?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RemoteCommandHelpers"
- "Method[symlinked?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "TestApp"
- "Method[release_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Capistrano::Configuration"
- "Method[server]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration"
- "Method[add_filter]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Capistrano::Configuration::Filter"
- "Method[filter]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::NullFilter"
- "Method[filter]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Servers"
- "Method[add_host]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Servers"
- "Method[extract_options]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Capistrano::Configuration::Variables"
- "Method[set]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Variables"
- "Method[set]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Variables"
- "Method[set]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Variables"
- "Method[fetch]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Variables"
- "Method[peek]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Variables"
- "Method[fetch_for]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Capistrano::DSL::Paths"
- "Method[set_release_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Server::Properties"
- "Method[method_missing]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Server::Properties"
- "Method[set]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Capistrano::Doctor::OutputHelpers::Row"
- "Method[<<]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Capistrano::Doctor::ServersDoctor::RoleWhitespaceChecker"
- "Method[include_whitespace?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Capistrano::Doctor::ServersDoctor::ServerDecorator"
- "Method[pretty_inspect]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Capistrano::Configuration::Question!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::Server!"
- "Method[[]]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Configuration::ValidatedVariables::ValidatedQuestion!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Doctor::VariablesDoctor!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::Doctor::ServersDoctor::ServerDecorator!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::VersionValidator!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Capistrano::ImmutableTask!"
- "Method[extended]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Capistrano!"
- "Method[filter]"
- "Argument[0]"
- "ReturnValue"
- "value"

172
ruby/ql/lib/codeql/ruby/frameworks/models/carrierwave/model.yml Normal file
View File

@@ -0,0 +1,172 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "CarrierWave::Storage::Fog::File"
- "CarrierWave::Storage::Fog"
- "Method[retrieve!].ReturnValue"
- - "CarrierWave::Storage::Fog::File"
- "CarrierWave::Storage::Fog"
- "Method[retrieve_from_cache!].ReturnValue"
- - "CarrierWave::Storage::Fog::File"
- "CarrierWave::Storage::Fog"
- "Method[store!].ReturnValue"
- - "CarrierWave::Storage::Fog::File"
- "CarrierWave::Storage::Fog"
- "Method[cache!].ReturnValue"
- - "CarrierWave::Storage::Fog::File"
- "CarrierWave::Storage::Fog::File"
- "Method[copy_to].ReturnValue"
- - "CarrierWave::SanitizedFile"
- "CarrierWave::Storage::File"
- "Method[retrieve!].ReturnValue"
- - "CarrierWave::SanitizedFile"
- "CarrierWave::Storage::File"
- "Method[retrieve_from_cache!].ReturnValue"
- - "CarrierWave::SanitizedFile"
- "CarrierWave::Storage::Fog"
- "Method[store!].Parameter[0]"
- - "CarrierWave::SanitizedFile"
- "CarrierWave::Storage::Fog::File"
- "Method[store].Parameter[0]"
- - "CarrierWave::SanitizedFile"
- "CarrierWave::SanitizedFile"
- "Method[move_to].ReturnValue"
- - "CarrierWave::Downloader::RemoteFile"
- "CarrierWave::Downloader::Base"
- "Method[download].ReturnValue"
- - "CarrierWave::Mounter::Single"
- "CarrierWave::Mount::Extension"
- "Method[_mounter].ReturnValue"
- - "CarrierWave::Mounter::Single"
- "CarrierWave::Mounter!"
- "Method[build].ReturnValue"
- - "CarrierWave::Mounter::Multiple"
- "CarrierWave::Mount::Extension"
- "Method[_mounter].ReturnValue"
- - "CarrierWave::Mounter::Multiple"
- "CarrierWave::Mounter!"
- "Method[build].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "CarrierWave::SanitizedFile"
- "Method[move!].Parameter[0]"
- "path-injection"
- - "CarrierWave::SanitizedFile"
- "Method[copy!].Parameter[0]"
- "path-injection"
- - "CarrierWave::Mount"
- "Method[uploader_option].Parameter[1]"
- "code-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "CarrierWave::Storage::Fog::File"
- "Method[content_type=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::SanitizedFile"
- "Method[content_type=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::SanitizedFile"
- "Method[file=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "CarrierWave::Mount"
- "Method[build_uploader]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::RMagick"
- "Method[convert]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::RMagick"
- "Method[dimension_from]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Compatibility::Paperclip"
- "Method[interpolate_paperclip_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "CarrierWave::Uploader::Cache"
- "Method[workfile_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "CarrierWave::Uploader::Cache"
- "Method[cache_id=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Uploader::Cache"
- "Method[original_filename=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Uploader::Processing"
- "Method[forcing_extension]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Uploader::Store"
- "Method[full_filename]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Compatibility::Paperclip::ClassMethods"
- "Method[interpolate]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "CarrierWave::Compatibility::Paperclip::ClassMethods"
- "Method[interpolate]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "CarrierWave::Uploader::Configuration::ClassMethods"
- "Method[cache_storage]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Uploader::Configuration::ClassMethods"
- "Method[storage]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Downloader::Base!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Storage::Abstract!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Test::SsrfProtectionAwareWebMock::Matcher!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RemoteFile!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CarrierWave::Uploader::Mountable!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"

95
ruby/ql/lib/codeql/ruby/frameworks/models/colorize/model.yml Normal file
View File

@@ -0,0 +1,95 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "ColorizedString"
- "Colorize::InstanceMethods"
- "Method[colorize].ReturnValue"
- - "ColorizedString"
- "ColorizedString!"
- "Method[[]].ReturnValue"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Colorize::ClassMethods"
- "Method[enable_readline_support]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Colorize::ClassMethods"
- "Method[enable_readline_support=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Colorize::ClassMethods"
- "Method[disable_colorization]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Colorize::ClassMethods"
- "Method[disable_colorization=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Colorize::ClassMethods"
- "Method[prevent_colors]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Colorize::ClassMethods"
- "Method[prevent_colors=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Colorize::ClassMethods"
- "Method[add_color_code]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Colorize::InstanceMethods"
- "Method[colorized_string]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Colorize::InstanceMethods"
- "Method[colorized_string]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Colorize::InstanceMethods"
- "Method[colorized_string]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Colorize::InstanceMethods"
- "Method[colorized_string]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Colorize::InstanceMethods"
- "Method[defaults_colors]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Colorize::InstanceMethods"
- "Method[colors_from_params]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Colorize::InstanceMethods"
- "Method[colors_from_hash]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Colorize::InstanceMethods"
- "Method[color_from_symbol]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ColorizedString!"
- "Method[[]]"
- "Argument[0]"
- "ReturnValue"
- "value"

3346
ruby/ql/lib/codeql/ruby/frameworks/models/dd-trace-rb/model.yml Normal file
View File

File diff suppressed because it is too large Load Diff

70
ruby/ql/lib/codeql/ruby/frameworks/models/devise/model.yml
View File

@@ -6,12 +6,12 @@
- - "User"
- "Devise::Mapping!"
- "Method[find_scope!].Parameter[0]"
- - "Devise::Mapping"
- "Devise!"
- "Method[add_mapping].ReturnValue"
- - "Devise::ParameterFilter"
- "Devise::Models::Authenticatable::ClassMethods"
- "Method[devise_parameter_filter].ReturnValue"
- - "Devise::Mapping"
- "Devise!"
- "Method[add_mapping].ReturnValue"
- - "Devise::ParameterSanitizer"
- "Devise::Controllers::Helpers"
- "Method[devise_parameter_sanitizer].ReturnValue"
@@ -62,21 +62,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ActionDispatch::Routing::Mapper"
- "Method[set_omniauth_path_prefix!]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Devise::RegistrationsController"
- "Method[update_needs_confirmation?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Devise::Delegator"
- "Method[failure_app]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Devise::FailureApp"
- "Method[i18n_options]"
- "Argument[0]"
@@ -92,6 +77,11 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ActionDispatch::Routing::Mapper"
- "Method[set_omniauth_path_prefix!]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Devise::ParameterFilter"
- "Method[filtered_hash_by_method_for_given_keys]"
- "Argument[0]"
@@ -102,6 +92,26 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Devise!"
- "Method[warden]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Devise!"
- "Method[warden]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Devise!"
- "Method[ref]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Devise!"
- "Method[mailer=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Devise::ParameterSanitizer"
- "Method[permit]"
- "Argument[2]"
@@ -109,12 +119,12 @@
- "taint"
- - "Devise::ParameterSanitizer"
- "Method[permit]"
- "Argument[block]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Devise::ParameterSanitizer"
- "Method[permit]"
- "Argument[3]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Devise::ParameterSanitizer"
@@ -127,6 +137,16 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Devise::RegistrationsController"
- "Method[update_needs_confirmation?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Devise::Delegator"
- "Method[failure_app]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Devise::Controllers::Rememberable"
- "Method[remember_key]"
- "Argument[1]"
@@ -217,16 +237,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Devise!"
- "Method[warden]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Devise!"
- "Method[warden]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Devise::Getter!"
- "Method[new]"
- "Argument[0]"

184
ruby/ql/lib/codeql/ruby/frameworks/models/dogstatsd-ruby/model.yml Normal file
View File

@@ -0,0 +1,184 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Datadog::Statsd"
- "Datadog::Statsd"
- "Method[batch].Argument[block].Parameter[0]"
- - "Datadog::Statsd::ConnectionCfg"
- "Datadog::Statsd::Forwarder!"
- "Method[new].Parameter[0]"
- - "Datadog::Statsd::ConnectionCfg"
- "Datadog::Statsd::Forwarder!"
- "Method[new].Parameter[connection_cfg:]"
- - "Datadog::Statsd::Telemetry"
- "Datadog::Statsd"
- "Method[telemetry].ReturnValue"
- - "Datadog::Statsd::UDPConnection"
- "Datadog::Statsd::ConnectionCfg"
- "Method[make_connection].ReturnValue"
- - "Datadog::Statsd::UDSConnection"
- "Datadog::Statsd::ConnectionCfg"
- "Method[make_connection].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Datadog::Statsd::UDPConnection"
- "Method[send_message].Parameter[0]"
- "code-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "FakeUDPSocket"
- "Method[error_on_send]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Datadog::Statsd::Sender"
- "Method[add]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry"
- "Method[would_fit_in?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry"
- "Method[sent]"
- "Argument[4]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry"
- "Method[sent]"
- "Argument[packets:]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry"
- "Method[dropped_queue]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry"
- "Method[dropped_queue]"
- "Argument[packets:]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry"
- "Method[dropped_writer]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry"
- "Method[dropped_writer]"
- "Argument[packets:]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::EventSerializer"
- "Method[escape]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::ServiceCheckSerializer"
- "Method[escape_message]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::StatSerializer"
- "Method[format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::StatSerializer"
- "Method[format]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::StatSerializer"
- "Method[format]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::StatSerializer"
- "Method[format]"
- "Argument[4]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::StatSerializer"
- "Method[format]"
- "Argument[sample_rate:]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::StatSerializer"
- "Method[formated_name]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::TagSerializer"
- "Method[format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::TagSerializer"
- "Method[to_tags_hash]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Datadog::Statsd::Serialization::TagSerializer"
- "Method[escape_tag_content]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::TagSerializer"
- "Method[dd_tags]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::TagSerializer"
- "Method[default_tags]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Connection!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Datadog::Statsd::Connection!"
- "Method[new]"
- "Argument[logger:]"
- "ReturnValue"
- "value"
- - "Datadog::Statsd::Serialization::TagSerializer!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Serialization::TagSerializer!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Datadog::Statsd::Telemetry!"
- "Method[new]"
- "Argument[global_tags:]"
- "ReturnValue"
- "taint"
- - "FakeUDPSocket!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "FakeUDPSocket!"
- "Method[new]"
- "Argument[copy_message:]"
- "ReturnValue"
- "value"

1094
ruby/ql/lib/codeql/ruby/frameworks/models/dynflow/model.yml Normal file
View File

File diff suppressed because it is too large Load Diff

128
ruby/ql/lib/codeql/ruby/frameworks/models/faraday/model.yml
View File

@@ -61,11 +61,6 @@
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Faraday"
- "Method[params=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday"
- "Method[body=]"
- "Argument[0]"
@@ -76,6 +71,11 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday"
- "Method[params=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday"
- "Method[marshal_load]"
- "Argument[0]"
@@ -98,16 +98,11 @@
- "value"
- - "Faraday::Utils"
- "Method[deep_merge!]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- "value"
- - "Faraday::Utils"
- "Method[deep_merge!]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Faraday::Utils"
- "Method[deep_merge]"
- "Argument[1]"
- "ReturnValue"
- "taint"
@@ -116,13 +111,18 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Faraday::Utils"
- "Method[deep_merge]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Faraday::Utils"
- "Method[sort_query_params]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Connection"
- "Method[params=]"
- - "CustomEncoder"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -131,6 +131,11 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Connection"
- "Method[params=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Connection"
- "Method[path_prefix=]"
- "Argument[0]"
@@ -146,41 +151,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "CustomEncoder"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Adapter"
- "Method[request_timeout]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Faraday::Error"
- "Method[exc_msg_and_response!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::RackBuilder"
- "Method[assert_index]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Faraday::RackBuilder"
- "Method[is_adapter?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::EncodeMethods"
- "Method[encode_pair]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Faraday::EncodeMethods"
- "Method[encode_array]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::DecodeMethods"
- "Method[prepare_context]"
- "Argument[0]"
@@ -211,6 +181,51 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Faraday::RackBuilder"
- "Method[assert_index]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Faraday::RackBuilder"
- "Method[is_adapter?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Adapter"
- "Method[request_timeout]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Faraday::Utils::Headers"
- "Method[add_parsed]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Faraday::Utils::ParamsHash"
- "Method[convert_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Utils::ParamsHash"
- "Method[to_query]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Error"
- "Method[exc_msg_and_response!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::EncodeMethods"
- "Method[encode_pair]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Faraday::EncodeMethods"
- "Method[encode_array]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Adapter::Test"
- "Method[path_match?]"
- "Argument[0]"
@@ -286,21 +301,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Utils::Headers"
- "Method[add_parsed]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Faraday::Utils::ParamsHash"
- "Method[convert_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Utils::ParamsHash"
- "Method[to_query]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Faraday::Adapter!"
- "Method[new]"
- "Argument[2]"

5227
ruby/ql/lib/codeql/ruby/frameworks/models/graphql-ruby/model.yml Normal file
View File

File diff suppressed because it is too large Load Diff

239
ruby/ql/lib/codeql/ruby/frameworks/models/haml/model.yml Normal file
View File

@@ -0,0 +1,239 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Haml::SyntaxError"
- "Haml::Parser"
- "Method[error_with_lineno].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Haml::CLI"
- "Method[read_file].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Haml::RailsHelpers"
- "Method[find_and_preserve]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::RailsHelpers"
- "Method[surround]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::RailsHelpers"
- "Method[surround]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Haml::RailsHelpers"
- "Method[precede]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::RailsHelpers"
- "Method[succeed]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeCompiler"
- "Method[compile_id!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeCompiler"
- "Method[compile_class!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeCompiler"
- "Method[compile_data!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeCompiler"
- "Method[compile_boolean!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeCompiler"
- "Method[compile_common!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeCompiler"
- "Method[attribute_builder]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeParser"
- "Method[wrap_bracket]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeParser"
- "Method[each_attr]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::DynamicMerger"
- "Method[merge_dynamic]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::TempleEngine"
- "Method[precompiled_with_ambles]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Haml::TempleEngine"
- "Method[precompiled_with_ambles]"
- "Argument[after_preamble:]"
- "ReturnValue"
- "taint"
- - "Haml::Parser"
- "Method[error_with_lineno]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Parser"
- "Method[continuation_script?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Parser"
- "Method[block_keyword]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Parser"
- "Method[closes_flat?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Parser"
- "Method[is_multiline?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Parser"
- "Method[handle_ruby_multiline]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Parser"
- "Method[is_ruby_multiline?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Parser"
- "Method[old=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::StringSplitter"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Helpers"
- "Method[preserve]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Util"
- "Method[check_encoding]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Util"
- "Method[check_haml_encoding]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Haml::Util"
- "Method[inspect_obj]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Util"
- "Method[human_indentation]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Util"
- "Method[contains_interpolation?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Compiler::ChildrenCompiler"
- "Method[rstrip_whitespace!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Compiler::ScriptCompiler"
- "Method[find_and_preserve]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Filters::TextBase"
- "Method[compile_text!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::AttributeCompiler!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Haml::Compiler::DoctypeCompiler!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Compiler::ScriptCompiler!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Haml::Compiler::ScriptCompiler!"
- "Method[find_and_preserve]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Error!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Haml::Filters::Base!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Filters::TiltBase!"
- "Method[render]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Haml::Filters::TiltBase!"
- "Method[render]"
- "Argument[indent_width:]"
- "ReturnValue"
- "taint"
- - "Haml::Helpers!"
- "Method[preserve]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Haml::Util!"
- "Method[escape_html_safe]"
- "Argument[0]"
- "ReturnValue"
- "taint"

117
ruby/ql/lib/codeql/ruby/frameworks/models/httparty/model.yml
View File

@@ -6,11 +6,11 @@
- - "CustomURIAdaptor"
- "CustomURIAdaptor!"
- "Method[parse].ReturnValue"
- - "HTTParty::CookieHash"
- "TripIt"
- "Method[parse_cookie].ReturnValue"
- - "HTTParty::Request"
- "HTTParty::Request!"
- - "HTTParty::Response"
- "HTTParty::Response"
- "Method[tap].Argument[block].Parameter[0]"
- - "HTTParty::Response"
- "HTTParty::Response!"
- "Method[_load].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::Request"
@@ -22,14 +22,11 @@
- "HTTParty::Request"
- "Method[handle_response].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::Response"
- "Method[tap].Argument[block].Parameter[0]"
- "HTTParty::ClassMethods"
- "Method[post].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[options].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[post].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[patch].ReturnValue"
@@ -42,15 +39,15 @@
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[head].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[copy].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[get].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[move].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[copy].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[mkcol].ReturnValue"
@@ -63,9 +60,15 @@
- - "HTTParty::Response"
- "HTTParty::ClassMethods"
- "Method[perform_request].ReturnValue"
- - "HTTParty::Response"
- "HTTParty::Response!"
- - "HTTParty::CookieHash"
- "TripIt"
- "Method[parse_cookie].ReturnValue"
- - "HTTParty::Request"
- "HTTParty::Request!"
- "Method[_load].ReturnValue"
- - "HTTParty::Request"
- "HTTParty::ClassMethods"
- "Method[build_request].ReturnValue"
- - "HTTParty::Logger::ApacheFormatter"
- "HTTParty::Logger!"
- "Method[build].ReturnValue"
@@ -79,15 +82,15 @@
- - "Delicious"
- "Method[recent].ReturnValue"
- "remote"
- - "TripIt"
- "Method[account_settings].ReturnValue"
- "remote"
- - "StackExchange"
- "Method[questions].ReturnValue"
- "remote"
- - "StackExchange"
- "Method[users].ReturnValue"
- "remote"
- - "TripIt"
- "Method[account_settings].ReturnValue"
- "remote"
- - "Twitter"
- "Method[timeline].ReturnValue"
- "remote"
@@ -132,31 +135,21 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "HTTParty::ConnectionAdapter"
- "Method[add_timeout?]"
- - "HTTParty!"
- "Method[normalize_base_uri]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[add_max_retries?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[clean_host]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[strip_ipv6_brackets]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[attach_ssl_certificates]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "HTTParty::Response!"
- "Method[underscore]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "CustomURIAdaptor!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::Request"
- "Method[decompress]"
- "Argument[0]"
@@ -282,8 +275,28 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::Logger::CurlFormatter"
- "Method[log]"
- - "HTTParty::ConnectionAdapter"
- "Method[add_timeout?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[add_max_retries?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[clean_host]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[strip_ipv6_brackets]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ConnectionAdapter"
- "Method[attach_ssl_certificates]"
- "Argument[1]"
- "ReturnValue"
- "taint"
@@ -292,6 +305,11 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "HTTParty::Logger::CurlFormatter"
- "Method[log]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::HTTPHeader::DigestAuthenticator"
- "Method[parse_cookies]"
- "Argument[0]"
@@ -347,11 +365,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::Response!"
- "Method[underscore]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "HTTParty::TextEncoder!"
- "Method[new]"
- "Argument[1]"
@@ -372,18 +385,8 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "CustomURIAdaptor!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty::ModuleInheritableAttributes!"
- "Method[hash_deep_dup]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "HTTParty!"
- "Method[normalize_base_uri]"
- "Argument[0]"
- "ReturnValue"
- "taint"

4
ruby/ql/lib/codeql/ruby/frameworks/models/jbuilder/model.yml
View File

@@ -92,12 +92,12 @@
- "value"
- - "Jbuilder"
- "Method[_merge_values]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jbuilder"
- "Method[_merge_values]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jbuilder"

873
ruby/ql/lib/codeql/ruby/frameworks/models/jekyll/model.yml Normal file
View File

@@ -0,0 +1,873 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Hash"
- "Jekyll::LiquidRenderer"
- "Method[new_profile_hash].ReturnValue"
- - "Jekyll::Cleaner"
- "Jekyll::Site"
- "Method[site_cleaner].ReturnValue"
- - "Jekyll::Collection"
- "Jekyll::Site"
- "Method[posts].ReturnValue"
- - "Jekyll::Configuration"
- "Jekyll::Site"
- "Method[config=].ReturnValue"
- - "Jekyll::Configuration"
- "Jekyll::Site"
- "Method[load_theme_configuration].ReturnValue"
- - "Jekyll::Configuration"
- "Jekyll::Utils"
- "Method[deep_merge_hashes].Parameter[0]"
- - "Jekyll::EntryFilter"
- "Jekyll::Collection"
- "Method[entry_filter].ReturnValue"
- - "Jekyll::Excerpt"
- "Jekyll::Document"
- "Method[read_post_data].ReturnValue"
- - "Jekyll::Excerpt"
- "Jekyll::Document"
- "Method[generate_excerpt].ReturnValue"
- - "Jekyll::FrontmatterDefaults"
- "Jekyll::Site"
- "Method[frontmatter_defaults].ReturnValue"
- - "Jekyll::Page"
- "Jekyll::ThemeAssetsReader"
- "Method[append_unless_exists].Parameter[1]"
- - "Jekyll::PageExcerpt"
- "Jekyll::Page"
- "Method[generate_excerpt].ReturnValue"
- - "Jekyll::Publisher"
- "Jekyll::Site"
- "Method[publisher].ReturnValue"
- - "Jekyll::PostReader"
- "Jekyll::Reader"
- "Method[post_reader].ReturnValue"
- - "Jekyll::Renderer"
- "Jekyll::Document"
- "Method[renderer].ReturnValue"
- - "Jekyll::Renderer"
- "Jekyll::Convertible"
- "Method[renderer].ReturnValue"
- - "Jekyll::StaticFile"
- "Jekyll::ThemeAssetsReader"
- "Method[append_unless_exists].Parameter[1]"
- - "Jekyll::Theme"
- "Jekyll::Site"
- "Method[configure_theme].ReturnValue"
- - "Jekyll::Drops::CollectionDrop"
- "Jekyll::Collection"
- "Method[to_liquid].ReturnValue"
- - "Jekyll::Drops::DocumentDrop"
- "Jekyll::Document"
- "Method[to_liquid].ReturnValue"
- - "Jekyll::Drops::ExcerptDrop"
- "Jekyll::Excerpt"
- "Method[to_liquid].ReturnValue"
- - "Jekyll::Drops::JekyllDrop"
- "Jekyll::Drops::UnifiedPayloadDrop"
- "Method[jekyll].ReturnValue"
- - "Jekyll::Drops::SiteDrop"
- "Jekyll::Drops::UnifiedPayloadDrop"
- "Method[site].ReturnValue"
- - "Jekyll::Drops::StaticFileDrop"
- "Jekyll::StaticFile"
- "Method[to_liquid].ReturnValue"
- - "Jekyll::Drops::ThemeDrop"
- "Jekyll::Drops::UnifiedPayloadDrop"
- "Method[theme].ReturnValue"
- - "Jekyll::Drops::UnifiedPayloadDrop"
- "Jekyll::Site"
- "Method[site_payload].ReturnValue"
- - "Jekyll::Drops::UrlDrop"
- "Jekyll::Document"
- "Method[url_placeholders].ReturnValue"
- - "Jekyll::LiquidRenderer::File"
- "Jekyll::LiquidRenderer"
- "Method[file].ReturnValue"
- - "Jekyll::ThemeBuilder::ERBRenderer"
- "Jekyll::ThemeBuilder"
- "Method[erb].ReturnValue"
- - "Jekyll::Converters::Markdown::KramdownParser"
- "Jekyll::Converters::Markdown"
- "Method[get_processor].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Profiler"
- "Method[report].Parameter[1]"
- "code-injection"
- - "Jekyll::Cache"
- "Method[load].Parameter[0]"
- "path-injection"
- - "Jekyll::Cache"
- "Method[dump].Parameter[0]"
- "path-injection"
- - "Jekyll::FrontmatterDefaults"
- "Method[glob_cache].Parameter[0]"
- "path-injection"
- - "Jekyll::DataReader"
- "Method[read_data_to].Parameter[0]"
- "path-injection"
- - "Jekyll::LayoutReader"
- "Method[within].Parameter[0]"
- "path-injection"
- - "Jekyll::Convertible"
- "Method[[]].Parameter[0]"
- "code-injection"
- - "Jekyll::Utils"
- "Method[has_yaml_header?].Parameter[0]"
- "path-injection"
- - "Jekyll::Utils"
- "Method[safe_glob].Parameter[0]"
- "path-injection"
- - "Jekyll::Tags::IncludeTag"
- "Method[read_file].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Jekyll::Cache"
- "Method[path_to]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Converters::Markdown"
- "Method[custom_class_allowed?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Collection"
- "Method[sanitize_label]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Collection"
- "Method[determine_sort_order]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Collection"
- "Method[determine_sort_order]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Jekyll::Collection"
- "Method[order_with_warning]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Jekyll::Configuration"
- "Method[quiet]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Configuration"
- "Method[get_config_value_with_override]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Configuration"
- "Method[source]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Configuration"
- "Method[verbose]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Configuration"
- "Method[style_to_permalink]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Document"
- "Method[merge_categories!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::EntryFilter"
- "Method[derive_base_directory]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::EntryFilter"
- "Method[relative_to_source]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Excerpt"
- "Method[extract_excerpt]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Excerpt"
- "Method[sanctify_liquid_tags]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Excerpt"
- "Method[endtag_regex_stash]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::FrontmatterDefaults"
- "Method[update_deprecated_types]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::FrontmatterDefaults"
- "Method[ensure_time!]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::FrontmatterDefaults"
- "Method[strip_collections_dir]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::FrontmatterDefaults"
- "Method[sanitize_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::LiquidRenderer"
- "Method[increment_bytes]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::LiquidRenderer"
- "Method[increment_time]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Page"
- "Method[process]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::LogAdapter"
- "Method[message]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::LogAdapter"
- "Method[message]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::LogAdapter"
- "Method[log_level=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::LogAdapter"
- "Method[formatted_topic]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::DataReader"
- "Method[sanitize_filename]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::DataReader"
- "Method[convert_row]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::LayoutReader"
- "Method[layout_name]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::ThemeAssetsReader"
- "Method[append_unless_exists]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::ThemeAssetsReader"
- "Method[append_unless_exists]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Regenerator"
- "Method[source_modified_or_dest_missing?]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::Renderer"
- "Method[place_in_layouts]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Site"
- "Method[config=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Site"
- "Method[incremental?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Site"
- "Method[load_theme_configuration]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::ThemeBuilder"
- "Method[template_file]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::URL"
- "Method[generate_url]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::URL"
- "Method[generate_url_from_hash]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::URL"
- "Method[generate_url_from_drop]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::URL"
- "Method[sanitize_url]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[find]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[push]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[inspect]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[slugify]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[xml_escape]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[normalize_whitespace]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[array_to_sentence_string]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[array_to_sentence_string]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[jsonify]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[where]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[where_exp]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[find_exp]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[pop]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[shift]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[unshift]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[sample]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[read_liquid_attribute]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters"
- "Method[parse_sort_input]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters"
- "Method[as_liquid]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::LiquidExtensions"
- "Method[lookup_variable]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::LiquidExtensions"
- "Method[lookup_variable]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::Utils"
- "Method[slugify]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Utils"
- "Method[deep_merge_hashes]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Utils"
- "Method[deep_merge_hashes]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Utils"
- "Method[deep_merge_hashes!]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Utils"
- "Method[deep_merge_hashes!]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Utils"
- "Method[value_from_singular_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Utils"
- "Method[value_from_plural_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Utils"
- "Method[add_permalink_suffix]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Utils"
- "Method[replace_character_sequence_with_hyphen]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Cucumber::Formatter"
- "Method[before_step]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Cucumber::Formatter"
- "Method[before_step_result]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Jekyll::Converters::Identity"
- "Method[convert]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Converters::Identity"
- "Method[output_ext]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Drops::DocumentDrop"
- "Method[<=>]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Drops::Drop"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::Drops::Drop"
- "Method[fetch]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::Drops::SiteDrop"
- "Method[key?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Tags::HighlightBlock"
- "Method[render]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Tags::HighlightBlock"
- "Method[add_code_tag]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Tags::IncludeTag"
- "Method[valid_include_file?]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Jekyll::Tags::IncludeTag"
- "Method[outside_site_source?]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Jekyll::Tags::IncludeRelativeTag"
- "Method[resource_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters::DateFilters"
- "Method[date_to_string]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::DateFilters"
- "Method[date_to_long_string]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::DateFilters"
- "Method[date_to_xmlschema]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::DateFilters"
- "Method[date_to_rfc822]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::DateFilters"
- "Method[stringify_date]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::GroupingFilters"
- "Method[group_by]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::GroupingFilters"
- "Method[group_by_exp]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::URLFilters"
- "Method[strip_index]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Filters::URLFilters"
- "Method[compute_absolute_url]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::URLFilters"
- "Method[compute_relative_url]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Filters::URLFilters"
- "Method[ensure_leading_slash]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Utils::Ansi"
- "Method[reset]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Utils::Ansi"
- "Method[strip]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Utils::Ansi"
- "Method[has?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Commands::Serve::LiveReloadReactor"
- "Method[connect]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RuboCop::Cop::Jekyll::AssertEqualLiteralActual"
- "Method[literal?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RuboCop::Cop::Jekyll::AssertEqualLiteralActual"
- "Method[replace_based_on_line_length]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RuboCop::Cop::Jekyll::AssertEqualLiteralActual"
- "Method[replace_based_on_line_length]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RuboCop::Cop::Jekyll::AssertEqualLiteralActual"
- "Method[replace_hash_with_variable]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RuboCop::Cop::Jekyll::AssertEqualLiteralActual"
- "Method[replace_hash_with_variable]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RuboCop::Cop::Jekyll::AssertEqualLiteralActual"
- "Method[replace_array_with_variable]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RuboCop::Cop::Jekyll::AssertEqualLiteralActual"
- "Method[replace_array_with_variable]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "FooPage!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "FooPage!"
- "Method[new]"
- "Argument[name:]"
- "ReturnValue"
- "value"
- - "Drop!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Cache!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Correctness!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::Cleaner!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Commands::Serve::SkipAnalyzer!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::Commands::Serve::SkipAnalyzer!"
- "Method[skip_processing?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Converter!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Converter!"
- "Method[highlighter_prefix]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Converter!"
- "Method[highlighter_suffix]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Document!"
- "Method[superdirs_regex]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Drops::Drop!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::EntryFilter!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::FrontmatterDefaults!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Inclusion!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Inclusion!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Jekyll::LiquidRenderer!"
- "Method[format_error]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::Plugin!"
- "Method[priority]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Plugin!"
- "Method[safe]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::PluginManager!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Profiler!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::URL!"
- "Method[escape_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::URL!"
- "Method[unescape_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Jekyll::Hooks!"
- "Method[priority_value]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Hooks!"
- "Method[register_one]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Jekyll::Hooks!"
- "Method[register_one]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Jekyll::Hooks!"
- "Method[insert_hook]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Jekyll::Hooks!"
- "Method[insert_hook]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Jekyll::LiquidRenderer::File!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::LiquidRenderer::Table!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::LogAdapter!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Jekyll::Reader!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Publisher!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::PostReader!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::ThemeAssetsReader!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Tags::IncludeTag!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Jekyll::Tags::Link!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::ThemeBuilder!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Jekyll::ThemeBuilder::ERBRenderer!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"

36
ruby/ql/lib/codeql/ruby/frameworks/models/json/model.yml
View File

@@ -18,15 +18,15 @@
- - "Regexp"
- "Regexp!"
- "Method[json_create].ReturnValue"
- - "Struct"
- "Struct!"
- "Method[json_create].ReturnValue"
- - "Set"
- "Kernel"
- "Method[JSON].Parameter[0]"
- - "Set"
- "Set!"
- "Method[json_create].ReturnValue"
- - "Struct"
- "Struct!"
- "Method[json_create].ReturnValue"
- - "JSONAdditionTest::A"
- "JSON"
- "Method[generate].Parameter[0]"
@@ -81,6 +81,21 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "JSON::Pure::Generator::State"
- "Method[generate]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "JSON::Pure::Generator::State"
- "Method[buffer_initial_length=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON::Pure::Generator::State!"
- "Method[from_state]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON!"
- "Method[create_id=]"
- "Argument[0]"
@@ -96,16 +111,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "JSON::Pure::Generator::State"
- "Method[generate]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "JSON::Pure::Generator::State"
- "Method[buffer_initial_length=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON::Pure::Generator::GeneratorMethods::Hash"
- "Method[json_shift]"
- "Argument[0]"
@@ -121,8 +126,3 @@
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "JSON::Pure::Generator::State!"
- "Method[from_state]"
- "Argument[0]"
- "ReturnValue"
- "value"

57
ruby/ql/lib/codeql/ruby/frameworks/models/kaminari/model.yml Normal file
View File

@@ -0,0 +1,57 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Kaminari::PaginatableArray"
- "Kaminari!"
- "Method[paginate_array].ReturnValue"
- - "Kaminari::Helpers::Page"
- "Kaminari::Helpers::Paginator"
- "Method[page_tag].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Kaminari::Helpers::Paginator"
- "Method[method_missing].Parameter[0]"
- "code-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Kaminari::PaginatableWithoutCount::LimitValueSetter"
- "Method[set_limit_value]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Kaminari::ConfigurationMethods::ClassMethods"
- "Method[max_paginates_per]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Kaminari::ConfigurationMethods::ClassMethods"
- "Method[paginates_per]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Kaminari::ConfigurationMethods::ClassMethods"
- "Method[max_pages]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Kaminari::ConfigurationMethods::ClassMethods"
- "Method[max_pages_per]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Kaminari::Helpers::Tag!"
- "Method[new]"
- "Argument[5]"
- "ReturnValue"
- "value"
- - "Kaminari::Helpers::Tag!"
- "Method[new]"
- "Argument[internal_params:]"
- "ReturnValue"
- "value"

91
ruby/ql/lib/codeql/ruby/frameworks/models/launchy/model.yml Normal file
View File

@@ -0,0 +1,91 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "ThisProject"
- "ThisProject!"
- "Method[new].Argument[block].Parameter[0]"
- - "Launchy::Argv"
- "Launchy::Detect::NixDesktopEnvironment::Kde!"
- "Method[browser].ReturnValue"
- - "Launchy::Argv"
- "Launchy::Detect::NixDesktopEnvironment::Gnome!"
- "Method[browser].ReturnValue"
- - "Launchy::Argv"
- "Launchy::Detect::NixDesktopEnvironment::Xfce!"
- "Method[browser].ReturnValue"
- - "Launchy::Argv"
- "Launchy::Detect::NixDesktopEnvironment::Xdg!"
- "Method[browser].ReturnValue"
- - "Launchy::Argv"
- "Launchy::Detect::NixDesktopEnvironment::NotFound!"
- "Method[browser].ReturnValue"
- - "Launchy::Detect::RubyEngine"
- "Launchy::Detect::RubyEngine!"
- "Method[ruby_engine_error_message].Parameter[0]"
- - "Launchy::Detect::Runner::Windows"
- "Launchy::Detect::Runner!"
- "Method[detect].ReturnValue"
- - "Launchy::Detect::Runner::Jruby"
- "Launchy::Detect::Runner!"
- "Method[detect].ReturnValue"
- - "Launchy::Detect::Runner::Forkable"
- "Launchy::Detect::Runner!"
- "Method[detect].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Launchy::DescendantTracker"
- "Method[find_child].Parameter[0]"
- "code-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "ThisProject"
- "Method[ruby_gemspec]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ThisProject"
- "Method[java_gemspec]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ThisProject"
- "Method[yielding_gemspec]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Launchy::DescendantTracker"
- "Method[inherited]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Launchy::Detect::Runner"
- "Method[dry_run]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Launchy::Detect::HostOsFamily!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Launchy::Detect::RubyEngine!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Launchy::Detect::RubyEngine!"
- "Method[ruby_engine_error_message]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Launchy::Detect::RubyEngine!"
- "Method[is_current_engine?]"
- "Argument[0]"
- "ReturnValue"
- "taint"

147
ruby/ql/lib/codeql/ruby/frameworks/models/lograge/model.yml Normal file
View File

@@ -0,0 +1,147 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Lograge::Formatters::KeyValue"
- "Lograge"
- "Method[set_formatter].ReturnValue"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Lograge"
- "Method[before_format]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Lograge"
- "Method[controller_field]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::OrderedOptions"
- "Method[custom_payload]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Lograge::OrderedOptions"
- "Method[custom_payload]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Lograge::Formatters::KeyValueDeep"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::KeyValueDeep"
- "Method[flatten_keys]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Lograge::Formatters::Logstash"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::KeyValue"
- "Method[format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::KeyValue"
- "Method[format]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::KeyValue"
- "Method[parse_value]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Lograge::Formatters::KeyValue"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::Cee"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::Graylog2"
- "Method[short_message]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::L2met"
- "Method[format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::L2met"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::L2met"
- "Method[modify_payload]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Lograge::Formatters::L2met"
- "Method[source_field]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::Json"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::LTSV"
- "Method[format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::LTSV"
- "Method[format]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::LTSV"
- "Method[escape]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Lograge::Formatters::LTSV"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::Raw"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Lograge::LogSubscribers::ActionController"
- "Method[strip_query_string]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Lograge::LogSubscribers::ActionController"
- "Method[extract_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::LogSubscribers::ActionController"
- "Method[extract_format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Lograge::Formatters::Helpers::MethodAndPath"
- "Method[method_and_path_string]"
- "Argument[0]"
- "ReturnValue"
- "taint"

65
ruby/ql/lib/codeql/ruby/frameworks/models/minitar/model.yml Normal file
View File

@@ -0,0 +1,65 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Archive::Tar::Minitar::Writer"
- "Archive::Tar::Minitar::Writer!"
- "Method[open].ReturnValue"
- - "Archive::Tar::Minitar::Input"
- "Archive::Tar::Minitar::Input!"
- "Method[open].ReturnValue"
- - "Archive::Tar::Minitar::Input"
- "Archive::Tar::Minitar::Input!"
- "Method[each_entry].ReturnValue"
- - "Archive::Tar::Minitar::Input"
- "Archive::Tar::Minitar::Reader!"
- "Method[each_entry].ReturnValue"
- - "Archive::Tar::Minitar::Output"
- "Archive::Tar::Minitar::Output!"
- "Method[open].ReturnValue"
- - "Archive::Tar::Minitar::Output"
- "Archive::Tar::Minitar::Output!"
- "Method[tar].ReturnValue"
- - "Archive::Tar::Minitar::Reader"
- "Archive::Tar::Minitar::Reader!"
- "Method[open].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Archive::Tar::Minitar::Input!"
- "Method[new].Parameter[0]"
- "request-forgery"
- - "Archive::Tar::Minitar::Output!"
- "Method[new].Parameter[0]"
- "request-forgery"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Archive::Tar::Minitar::PosixHeader"
- "Method[oct]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Archive::Tar::Minitar::PosixHeader"
- "Method[oct]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Archive::Tar::Minitar::PosixHeader"
- "Method[header]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Archive::Tar::Minitar::Writer::WriteOnlyStream!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Archive::Tar::Minitar::PosixHeader!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"

594
ruby/ql/lib/codeql/ruby/frameworks/models/net-ssh/model.yml Normal file
View File

@@ -0,0 +1,594 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "String"
- "Net::SSH::Buffer"
- "Method[to_s].ReturnValue"
- - "String"
- "Net::SSH::Transport::CTR"
- "Method[update].ReturnValue"
- - "String"
- "Net::SSH::Transport::CTR"
- "Method[reset].ReturnValue"
- - "String"
- "Net::SSH::Connection::Channel"
- "Method[[]=].ReturnValue"
- - "String"
- "Net::SSH::Connection::Channel"
- "Method[[]=].Parameter[1]"
- - "OpenSSL::BN"
- "Net::SSH::Buffer"
- "Method[read_bignum].ReturnValue"
- - "OpenSSL::BN"
- "Net::SSH::Transport::Kex::Curve25519Sha256"
- "Method[compute_shared_secret].ReturnValue"
- - "OpenSSL::BN"
- "Net::SSH::Transport::Kex::EcdhSHA2NistP256"
- "Method[compute_shared_secret].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[append].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[read_all].Argument[block].Parameter[0]"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[consume!].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[remainder_as_buffer].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[read_buffer].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[write].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[write_long].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[write_byte].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[write_string].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[write_bool].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[write_bignum].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer"
- "Method[write_key].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Transport::Kex::DiffieHellmanGroupExchangeSHA1"
- "Method[build_signature_buffer].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Transport::Algorithms"
- "Method[build_client_algorithm_packet].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Transport::Session"
- "Method[service_request].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Authentication::Methods::Abstract"
- "Method[userauth_request].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Authentication::Methods::Publickey"
- "Method[build_request].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Transport::Kex::Abstract5656"
- "Method[build_signature_buffer].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Transport::Kex::DiffieHellmanGroup1SHA1"
- "Method[build_signature_buffer].ReturnValue"
- - "Net::SSH::Buffer"
- "Net::SSH::Buffer!"
- "Method[from].ReturnValue"
- - "Net::SSH::Packet"
- "Net::SSH::Buffer"
- "Method[read_all].Argument[block].Parameter[0]"
- - "Net::SSH::Packet"
- "Net::SSH::Transport::PacketStream"
- "Method[next_packet].ReturnValue"
- - "Net::SSH::Packet"
- "Net::SSH::Transport::PacketStream"
- "Method[poll_next_packet].ReturnValue"
- - "Net::SSH::Prompt"
- "Net::SSH::Prompt!"
- "Method[default].ReturnValue"
- - "Net::SSH::Transport::OpenSSLAESCTR"
- "Net::SSH::Transport::CipherFactory!"
- "Method[get].ReturnValue"
- - "OpenSSL::PKey::DH"
- "Net::SSH::Transport::Kex::DiffieHellmanGroup1SHA1"
- "Method[generate_key].ReturnValue"
- - "OpenSSL::PKey::RSA"
- "Net::SSH::Buffer"
- "Method[read_keyblob].ReturnValue"
- - "OpenSSL::PKey::RSA"
- "Net::SSH::Buffer"
- "Method[read_key].ReturnValue"
- - "OpenSSL::PKey::RSA"
- "Net::SSH::Buffer"
- "Method[read_private_keyblob].ReturnValue"
- - "OpenSSL::PKey::RSA"
- "Net::SSH::Authentication::Certificate"
- "Method[sign!].Parameter[0]"
- - "OpenSSL::PKey::RSA"
- "Net::SSH::Authentication::Certificate"
- "Method[sign!].ReturnValue"
- - "OpenSSL::PKey::RSA"
- "Net::SSH::Authentication::ED25519::OpenSSHPrivateKeyLoader!"
- "Method[read].ReturnValue"
- - "OpenSSL::PKey::RSA"
- "Net::SSH::Authentication::ED25519::PrivKey!"
- "Method[read].ReturnValue"
- - "OpenSSL::PKey::DSA"
- "Net::SSH::Buffer"
- "Method[read_keyblob].ReturnValue"
- - "OpenSSL::PKey::DSA"
- "Net::SSH::Buffer"
- "Method[read_key].ReturnValue"
- - "OpenSSL::PKey::DSA"
- "Net::SSH::Authentication::Certificate"
- "Method[sign!].Parameter[0]"
- - "OpenSSL::PKey::DSA"
- "Net::SSH::Authentication::Certificate"
- "Method[sign!].ReturnValue"
- - "Net::SSH::Version"
- "Net::SSH::Version!"
- "Method[[]].ReturnValue"
- - "OpenSSL::PKey::EC"
- "Net::SSH::Buffer"
- "Method[read_keyblob].ReturnValue"
- - "OpenSSL::PKey::EC"
- "Net::SSH::Buffer"
- "Method[read_key].ReturnValue"
- - "OpenSSL::PKey::EC"
- "Net::SSH::Buffer"
- "Method[read_private_keyblob].ReturnValue"
- - "OpenSSL::PKey::EC"
- "Net::SSH::Authentication::Certificate"
- "Method[sign!].ReturnValue"
- - "OpenSSL::PKey::EC"
- "Net::SSH::Authentication::ED25519::OpenSSHPrivateKeyLoader!"
- "Method[read].ReturnValue"
- - "OpenSSL::PKey::EC"
- "Net::SSH::Authentication::ED25519::PrivKey!"
- "Method[read].ReturnValue"
- - "OpenSSL::PKey::EC"
- "OpenSSL::PKey::EC!"
- "Method[read_keyblob].ReturnValue"
- - "Net::SSH::Authentication::Certificate"
- "Net::SSH::Buffer"
- "Method[read_keyblob].ReturnValue"
- - "Net::SSH::Authentication::Certificate"
- "Net::SSH::Buffer"
- "Method[read_key].ReturnValue"
- - "Net::SSH::Authentication::Certificate"
- "Net::SSH::Authentication::Certificate"
- "Method[sign!].ReturnValue"
- - "Net::SSH::Authentication::Certificate"
- "Net::SSH::Authentication::Certificate!"
- "Method[read_certblob].ReturnValue"
- - "Net::SSH::Authentication::KeyManager"
- "Net::SSH::Authentication::KeyManager"
- "Method[add].ReturnValue"
- - "Net::SSH::Authentication::KeyManager"
- "Net::SSH::Authentication::KeyManager"
- "Method[add_keycert].ReturnValue"
- - "Net::SSH::Authentication::KeyManager"
- "Net::SSH::Authentication::KeyManager"
- "Method[add_key_data].ReturnValue"
- - "Net::SSH::Authentication::KeyManager"
- "Net::SSH::Authentication::KeyManager"
- "Method[each_identity].ReturnValue"
- - "Net::SSH::Authentication::Agent"
- "Net::SSH::Authentication::KeyManager"
- "Method[agent].ReturnValue"
- - "Net::SSH::Authentication::Agent"
- "Net::SSH::Authentication::Agent!"
- "Method[connect].ReturnValue"
- - "Net::SSH::Connection::Channel"
- "Net::SSH::Connection::Session"
- "Method[exec].ReturnValue"
- - "Net::SSH::Connection::Channel"
- "Net::SSH::Connection::Session"
- "Method[open_channel].ReturnValue"
- - "Net::SSH::Connection::Channel"
- "Net::SSH::Connection::Session"
- "Method[cleanup_channel].ReturnValue"
- - "Net::SSH::Connection::EventLoop"
- "Net::SSH::Connection::EventLoop"
- "Method[ev_preprocess].Argument[block].Parameter[0]"
- - "Net::SSH::Connection::Session"
- "Net::SSH::Test"
- "Method[connection].ReturnValue"
- - "Net::SSH::Connection::Session"
- "Net::SSH::Connection::Session"
- "Method[preprocess].Argument[block].Parameter[0]"
- - "Net::SSH::Connection::Session"
- "Net::SSH::Connection::Session"
- "Method[send_global_request].ReturnValue"
- - "Net::SSH::Connection::Session"
- "Net::SSH!"
- "Method[start].ReturnValue"
- - "Net::SSH::Prompt::Prompter"
- "Net::SSH::Prompt"
- "Method[start].ReturnValue"
- - "Net::SSH::Service::Forward"
- "Net::SSH::Connection::Session"
- "Method[forward].ReturnValue"
- - "Net::SSH::Verifiers::AcceptNew"
- "Net::SSH::Transport::Session"
- "Method[select_host_key_verifier].ReturnValue"
- - "Net::SSH::Transport::Session"
- "Net::SSH::Test"
- "Method[transport].ReturnValue"
- - "Net::SSH::Verifiers::AcceptNewOrLocalTunnel"
- "Net::SSH::Transport::Session"
- "Method[select_host_key_verifier].ReturnValue"
- - "Net::SSH::Verifiers::Never"
- "Net::SSH::Transport::Session"
- "Method[select_host_key_verifier].ReturnValue"
- - "Net::SSH::Verifiers::Always"
- "Net::SSH::Transport::Session"
- "Method[select_host_key_verifier].ReturnValue"
- - "Net::SSH::Authentication::ED25519::PubKey"
- "Net::SSH::Buffer"
- "Method[read_keyblob].ReturnValue"
- - "Net::SSH::Authentication::ED25519::PubKey"
- "Net::SSH::Buffer"
- "Method[read_key].ReturnValue"
- - "Net::SSH::Authentication::ED25519::PubKey"
- "Net::SSH::Authentication::Certificate"
- "Method[sign!].ReturnValue"
- - "Net::SSH::Authentication::ED25519::PubKey"
- "Net::SSH::Authentication::ED25519::PrivKey"
- "Method[public_key].ReturnValue"
- - "Net::SSH::Authentication::ED25519::PubKey"
- "Net::SSH::Authentication::ED25519::PubKey!"
- "Method[read_keyblob].ReturnValue"
- - "Net::SSH::Authentication::ED25519::PrivKey"
- "Net::SSH::Authentication::ED25519::OpenSSHPrivateKeyLoader!"
- "Method[read].ReturnValue"
- - "Net::SSH::Authentication::ED25519::PrivKey"
- "Net::SSH::Authentication::ED25519::PrivKey!"
- "Method[read].ReturnValue"
- - "Net::SSH::Authentication::Pageant::Socket"
- "Net::SSH::Authentication::Agent"
- "Method[connect!].ReturnValue"
- - "Net::SSH::Authentication::Pageant::Socket"
- "Net::SSH::Authentication::Pageant::Socket!"
- "Method[open].ReturnValue"
- - "Net::SSH::Connection::Session::StringWithExitstatus"
- "Net::SSH::Connection::Session"
- "Method[exec!].ReturnValue"
- - "Net::SSH::Transport::ChaCha20Poly1305Cipher::ImplicitHMac"
- "Net::SSH::Transport::ChaCha20Poly1305Cipher"
- "Method[implicit_mac].ReturnValue"
- - "Net::SSH::Transport::Session::CompatibleVerifier"
- "Net::SSH::Transport::Session"
- "Method[select_host_key_verifier].ReturnValue"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Net::SSH::Buffer"
- "Method[==]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::KnownHosts"
- "Method[match]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::KnownHosts"
- "Method[match]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::CTR"
- "Method[iv=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::KeyManager"
- "Method[use_agent=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::Agent"
- "Method[agent_failed]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Connection::Channel"
- "Method[env]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[env]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[exec]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[exec]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[subsystem]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[subsystem]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[request_pty]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[request_pty]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[send_channel_request]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[send_channel_request]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Channel"
- "Method[do_window_adjust]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::EventLoop"
- "Method[register]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Session"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Connection::Session"
- "Method[listen_to]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Connection::Session"
- "Method[listen_to]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Net::SSH::Connection::Session"
- "Method[on_open_channel]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Connection::Session"
- "Method[on_open_channel]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Net::SSH::Connection::Session"
- "Method[io_select_wait]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Service::Forward"
- "Method[local_socket]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Transport::Algorithms"
- "Method[compose_algorithm_list]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Transport::State"
- "Method[decompress]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::State"
- "Method[increment]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::State"
- "Method[compress]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::State"
- "Method[update_next_iv]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Transport::Session"
- "Method[hint]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Transport::Session"
- "Method[select_host_key_verifier]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Transport::HMAC::Abstract"
- "Method[key=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Authentication::KeyManager!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::Agent!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::ED25519::OpenSSHPrivateKeyLoader::DecryptError!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::ED25519::OpenSSHPrivateKeyLoader::DecryptError!"
- "Method[new]"
- "Argument[encrypted_key:]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::Session!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Connection::Session::NilChannel!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::HostKeyEntries::PubKey!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::HostKeyEntries::PubKey!"
- "Method[new]"
- "Argument[comment:]"
- "ReturnValue"
- "value"
- - "Net::SSH::HostKeyEntries::CertAuthority!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::HostKeyEntries::CertAuthority!"
- "Method[new]"
- "Argument[comment:]"
- "ReturnValue"
- "value"
- - "Net::SSH::HostKeys!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Net::SSH::KnownHosts!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Proxy::HTTP!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Net::SSH::Proxy::HTTPS!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Net::SSH::Proxy::Jump!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Connection::Session::StringWithExitstatus!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Proxy::SOCKS4!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Net::SSH::Proxy::SOCKS5!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Net::SSH::Transport::ChaCha20Poly1305Cipher!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::ChaCha20Poly1305Cipher!"
- "Method[new]"
- "Argument[key:]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Authentication::Pageant::Win!"
- "Method[set_ptr_data]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::Pageant::Win!"
- "Method[ptr_to_s]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Authentication::Pageant::Win!"
- "Method[to_struct_ptr]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Authentication::Pageant::Win!"
- "Method[get_cstr]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::KeyExpander!"
- "Method[expand_key]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Net::SSH!"
- "Method[_support_deprecated_option_paranoid]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::HMAC::Abstract!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Net::SSH::Transport::Kex::Abstract!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Net::SSH::Transport::Session::CompatibleVerifier!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"

1866
ruby/ql/lib/codeql/ruby/frameworks/models/newrelic-ruby-agent/model.yml
View File

File diff suppressed because it is too large Load Diff

204
ruby/ql/lib/codeql/ruby/frameworks/models/nokogiri/model.yml
View File

@@ -30,6 +30,27 @@
- - "Nokogiri::HTML5::Document"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Builder"
- "Nokogiri::XML::Builder"
- "Method[insert].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Builder"
- "Nokogiri::XML::Builder!"
- "Method[new].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Builder"
- "Nokogiri::XML::Builder!"
- "Method[with].ReturnValue"
- - "Nokogiri::XML::Node"
- "Nokogiri::HTML4::Document"
- "Method[set_metadata_element].Parameter[0]"
- - "Nokogiri::XML::Node"
- "Nokogiri::XML::Document"
- "Method[add_child].Parameter[0]"
- - "Nokogiri::XML::Node"
- "Nokogiri::XML::Node"
- "Method[add_child].Parameter[0]"
- - "Nokogiri::XML::Node"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::CSS::Node"
- "Nokogiri::CSS::Parser"
- "Method[_reduce_17].ReturnValue"
@@ -197,10 +218,10 @@
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::CDATA"
- "Nokogiri::XML::Document"
- "Method[create_cdata].ReturnValue"
- "Method[document].ReturnValue"
- - "Nokogiri::XML::CDATA"
- "Nokogiri::XML::Document"
- "Method[document].ReturnValue"
- "Method[create_cdata].ReturnValue"
- - "Nokogiri::XML::CDATA"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
@@ -209,31 +230,25 @@
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::DocumentFragment"
- "Nokogiri::XML::Document"
- "Method[fragment].ReturnValue"
- "Method[document].ReturnValue"
- - "Nokogiri::XML::DocumentFragment"
- "Nokogiri::XML::Document"
- "Method[document].ReturnValue"
- "Method[fragment].ReturnValue"
- - "Nokogiri::XML::DocumentFragment"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::DocumentFragment"
- "Nokogiri::XML::Node"
- "Method[coerce].ReturnValue"
- - "Nokogiri::XML::DocumentFragment"
- "Nokogiri::XML::Node"
- "Method[prepend_child].ReturnValue"
- - "Nokogiri::XML::DocumentFragment"
- "Nokogiri::XML::DocumentFragment!"
- "Method[parse].ReturnValue"
- - "Nokogiri::XML::DTD"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Builder"
- "Nokogiri::XML::Builder"
- "Method[insert].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Builder"
- "Nokogiri::XML::Builder!"
- "Method[with].ReturnValue"
- - "Nokogiri::XML::Builder"
- "Nokogiri::XML::Builder!"
- "Method[new].Argument[block].Parameter[0]"
- - "Nokogiri::XML::ElementDecl"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
@@ -243,27 +258,9 @@
- - "Nokogiri::XML::EntityReference"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Node"
- "Nokogiri::HTML4::Document"
- "Method[set_metadata_element].Parameter[0]"
- - "Nokogiri::XML::Node"
- "Nokogiri::XML::Document"
- "Method[add_child].Parameter[0]"
- - "Nokogiri::XML::Node"
- "Nokogiri::XML::Node"
- "Method[add_child].Parameter[0]"
- - "Nokogiri::XML::Node"
- "Nokogiri::XML::Node"
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::Document"
- "Method[document].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::DocumentFragment"
- "Method[css].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::EntityReference"
- "Method[children].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::Node"
- "Method[parse].ReturnValue"
@@ -271,17 +268,23 @@
- "Nokogiri::XML::Node"
- "Method[ancestors].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::NodeSet"
- "Method[wrap].ReturnValue"
- "Nokogiri::XML::DocumentFragment"
- "Method[css].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::EntityReference"
- "Method[children].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::NodeSet"
- "Method[reverse].ReturnValue"
- "Method[each].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::NodeSet"
- "Method[wrap].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::NodeSet"
- "Method[children].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::NodeSet"
- "Method[each].ReturnValue"
- "Method[reverse].ReturnValue"
- - "Nokogiri::XML::NodeSet"
- "Nokogiri::XML::Searchable"
- "Method[css].ReturnValue"
@@ -308,10 +311,10 @@
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Text"
- "Nokogiri::XML::Document"
- "Method[create_text_node].ReturnValue"
- "Method[document].ReturnValue"
- - "Nokogiri::XML::Text"
- "Nokogiri::XML::Document"
- "Method[document].ReturnValue"
- "Method[create_text_node].ReturnValue"
- - "Nokogiri::XML::Text"
- "Nokogiri::XML::Node"
- "Method[add_child].Parameter[0]"
@@ -320,10 +323,10 @@
- "Method[traverse].Argument[block].Parameter[0]"
- - "Nokogiri::XML::Text"
- "Nokogiri::XML::Node"
- "Method[add_child].ReturnValue"
- "Method[coerce].ReturnValue"
- - "Nokogiri::XML::Text"
- "Nokogiri::XML::Node"
- "Method[coerce].ReturnValue"
- "Method[add_child].ReturnValue"
- - "Nokogiri::XML::Text"
- "Nokogiri::XML::NodeSet"
- "Method[each].ReturnValue"
@@ -371,63 +374,8 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Nokogiri::CSS::Node"
- "Method[to_xpath]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::XPathVisitor"
- "Method[css_class]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::XPathVisitor"
- "Method[css_class]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_none]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[unescape_css_identifier]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[unescape_css_string]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_9]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_11]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_26]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_45]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Nokogiri::XML::DocumentFragment"
- "Method[errors=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Nokogiri::XML::Node"
- "Method[replace]"
- - "Nokogiri::XML::Document"
- "Method[add_child]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -436,6 +384,11 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Nokogiri::XML::Node"
- "Method[replace]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::XML::Node"
- "Method[coerce]"
- "Argument[0]"
@@ -486,16 +439,71 @@
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Nokogiri::XML::Text"
- "Method[content=]"
- - "Nokogiri::CSS::Node"
- "Method[to_xpath]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_none]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[unescape_css_identifier]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[unescape_css_string]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_9]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_11]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_26]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::Parser"
- "Method[_reduce_45]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Nokogiri::CSS::XPathVisitor"
- "Method[css_class]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::CSS::XPathVisitor"
- "Method[css_class]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Nokogiri::HTML5::Node"
- "Method[write_to]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::XML::DocumentFragment"
- "Method[errors=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Nokogiri::XML::Text"
- "Method[content=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Nokogiri::XML::Builder::NodeBuilder"
- "Method[[]=]"
- "Argument[1]"

178
ruby/ql/lib/codeql/ruby/frameworks/models/octokit.rb/model.yml Normal file
View File

@@ -0,0 +1,178 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Octokit::Client"
- "Octokit::Configurable"
- "Method[configure].Argument[block].Parameter[0]"
- - "Octokit::EnterpriseAdminClient"
- "Octokit::Configurable"
- "Method[configure].Argument[block].Parameter[0]"
- - "Octokit::EnterpriseManagementConsoleClient"
- "Octokit::Configurable"
- "Method[configure].Argument[block].Parameter[0]"
- - "Octokit::Gist"
- "Octokit::Gist!"
- "Method[from_url].ReturnValue"
- - "Octokit::RateLimit"
- "Octokit::Error"
- "Method[build_error_context].ReturnValue"
- - "Octokit::RateLimit"
- "Octokit::Client::RateLimit"
- "Method[rate_limit].ReturnValue"
- - "Octokit::RateLimit"
- "Octokit::Client::RateLimit"
- "Method[rate_limit!].ReturnValue"
- - "Octokit::RateLimit"
- "Octokit::RateLimit!"
- "Method[from_response].ReturnValue"
- - "Octokit::Repository"
- "Octokit::EnterpriseAdminClient::SearchIndexing"
- "Method[queue_index].Parameter[0]"
- - "Octokit::Repository"
- "Octokit::Repository!"
- "Method[from_url].ReturnValue"
- - "Octokit::ClientError"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::BadRequest"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::MethodNotAllowed"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::NotAcceptable"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::Conflict"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::UnsupportedMediaType"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::UnavailableForLegalReasons"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::ServerError"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::InternalServerError"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::NotImplemented"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::BadGateway"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- - "Octokit::ServiceUnavailable"
- "Octokit::Error!"
- "Method[from_response].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Octokit::Client::CodeScanning"
- "Method[compress_sarif_data].Parameter[0]"
- "path-injection"
- - "Octokit::EnterpriseManagementConsoleClient::ManagementConsole"
- "Method[add_authorized_key].Parameter[0]"
- "path-injection"
- - "Octokit::EnterpriseManagementConsoleClient::ManagementConsole"
- "Method[remove_authorized_key].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Octokit::Client"
- "Method[user_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Octokit::Client"
- "Method[user_path]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Octokit::Client"
- "Method[login=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Client"
- "Method[password=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Client"
- "Method[access_token=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Client"
- "Method[bearer_token=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Client"
- "Method[client_id=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Client"
- "Method[client_secret=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::EnterpriseManagementConsoleClient"
- "Method[management_console_password=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::EnterpriseManagementConsoleClient"
- "Method[management_console_endpoint=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Error"
- "Method[redact_url]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Middleware::FollowRedirects"
- "Method[update_env]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Octokit::Middleware::FollowRedirects"
- "Method[safe_escape]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Octokit::Client::Organizations"
- "Method[remove_organization_membership]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Octokit::Gist!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Octokit::Organization!"
- "Method[path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Octokit::User!"
- "Method[path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Octokit::Middleware::RedirectLimitReached!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"

36
ruby/ql/lib/codeql/ruby/frameworks/models/oj/model.yml
View File

@@ -3,12 +3,12 @@
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Oj::MimicDumpOption"
- "JSON!"
- "Method[dump_default_options].ReturnValue"
- - "JSON::Ext::Generator::State"
- "JSON::Ext::Generator::State!"
- "Method[from_state].ReturnValue"
- - "Oj::MimicDumpOption"
- "JSON!"
- "Method[dump_default_options].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
@@ -20,21 +20,6 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "JSON!"
- "Method[parser=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON!"
- "Method[generator=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Oj::ScHandler"
- "Method[hash_key]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON::Ext::Generator::State"
- "Method[[]=]"
- "Argument[1]"
@@ -50,6 +35,21 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON!"
- "Method[parser=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON!"
- "Method[generator=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Oj::ScHandler"
- "Method[hash_key]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JSON::Ext::Parser!"
- "Method[new]"
- "Argument[0]"

191
ruby/ql/lib/codeql/ruby/frameworks/models/omniauth/model.yml Normal file
View File

@@ -0,0 +1,191 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "OmniAuth::Form"
- "OmniAuth::Form"
- "Method[label_field].ReturnValue"
- - "OmniAuth::Form"
- "OmniAuth::Form"
- "Method[input_field].ReturnValue"
- - "OmniAuth::Form"
- "OmniAuth::Form"
- "Method[text_field].ReturnValue"
- - "OmniAuth::Form"
- "OmniAuth::Form"
- "Method[password_field].ReturnValue"
- - "OmniAuth::Form"
- "OmniAuth::Form"
- "Method[fieldset].ReturnValue"
- - "OmniAuth::Form"
- "OmniAuth::Form"
- "Method[footer].ReturnValue"
- - "OmniAuth::Form"
- "OmniAuth::Form!"
- "Method[build].ReturnValue"
- - "OmniAuth::AuthHash"
- "OmniAuth::Strategy"
- "Method[auth_hash].ReturnValue"
- - "OmniAuth::Strategy::Options"
- "OmniAuth::Strategy::ClassMethods"
- "Method[configure].Argument[block].Parameter[0]"
- - "OmniAuth::Strategy::Options"
- "OmniAuth::Strategy::ClassMethods"
- "Method[default_options].ReturnValue"
- "addsTo":
"extensible": "sourceModel"
"pack": "codeql/ruby-all"
"data":
- - "OmniAuth::Strategy"
- "Method[ssl?].ReturnValue"
- "remote"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "OmniAuth::Strategy"
- "Method[log].Parameter[0]"
- "code-injection"
- - "OmniAuth::Strategy::ClassMethods"
- "Method[compile_stack].Parameter[1]"
- "code-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "OmniAuth::Form"
- "Method[button]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "OmniAuth::Form"
- "Method[html]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "OmniAuth::Builder"
- "Method[on_failure]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[on_failure]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[before_options_phase]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[before_options_phase]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[before_request_phase]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[before_request_phase]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[before_callback_phase]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[before_callback_phase]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Builder"
- "Method[options]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[on_failure]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[on_failure]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[before_options_phase]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[before_options_phase]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[before_request_phase]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[before_request_phase]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[before_callback_phase]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[before_callback_phase]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[request_validation_phase]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[request_validation_phase]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "OmniAuth::Configuration"
- "Method[add_camelization]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "OmniAuth::Utils"
- "Method[camelize]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "OmniAuth::Utils"
- "Method[deep_merge]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "OmniAuth::Utils"
- "Method[deep_merge]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "OmniAuth::Strategy::ClassMethods"
- "Method[option]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "OmniAuth::FailureEndpoint!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"

1
ruby/ql/lib/codeql/ruby/frameworks/models/pages-gem/model.yml Normal file
View File

@@ -0,0 +1 @@
"extensions": []

567
ruby/ql/lib/codeql/ruby/frameworks/models/psych/model.yml Normal file
View File

@@ -0,0 +1,567 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Object"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Object"
- "Psych!"
- "Method[safe_dump].Parameter[0]"
- - "Psych::Omap"
- "Psych::Visitors::ToRuby"
- "Method[register].Parameter[1]"
- - "Psych::Omap"
- "Psych::Visitors::ToRuby"
- "Method[register].ReturnValue"
- - "Psych::Omap"
- "Psych::Visitors::ToRuby"
- "Method[visit_Psych_Nodes_Sequence].ReturnValue"
- - "Psych::Omap"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Hash"
- "Psych!"
- "Method[load].ReturnValue"
- - "Hash"
- "Psych!"
- "Method[load].Parameter[5]"
- - "Hash"
- "Psych!"
- "Method[unsafe_load].Parameter[2]"
- - "Hash"
- "Psych!"
- "Method[safe_load].Parameter[5]"
- - "Hash"
- "Psych!"
- "Method[parse_file].Parameter[1]"
- - "Hash"
- "Psych!"
- "Method[load_stream].Parameter[2]"
- - "Hash"
- "Psych!"
- "Method[load].Parameter[fallback:]"
- - "Hash"
- "Psych!"
- "Method[unsafe_load].Parameter[fallback:]"
- - "Hash"
- "Psych!"
- "Method[safe_load].Parameter[fallback:]"
- - "Hash"
- "Psych!"
- "Method[parse_file].Parameter[fallback:]"
- - "Hash"
- "Psych!"
- "Method[load_stream].Parameter[fallback:]"
- - "Hash"
- "Psych!"
- "Method[safe_load].ReturnValue"
- - "PsychStructWithIvar"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::Exception"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::Coder"
- "Psych::Coder"
- "Method[map].Argument[block].Parameter[0]"
- - "Psych::Coder"
- "Psych::Visitors::YAMLTree"
- "Method[emit_coder].Parameter[0]"
- - "Psych::Stream"
- "Psych::Streaming"
- "Method[start].Argument[block].Parameter[0]"
- - "Psych::Parser"
- "Psych!"
- "Method[parser].ReturnValue"
- - "Psych::TreeBuilder"
- "Psych::Streaming::ClassMethods"
- "Method[new].Parameter[0]"
- - "Psych::Tagged"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::Foo"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::JSON::Stream"
- "Psych::Streaming"
- "Method[start].Argument[block].Parameter[0]"
- - "Psych::JSON::TreeBuilder"
- "Psych::Streaming::ClassMethods"
- "Method[new].Parameter[0]"
- - "Psych::Nodes::Alias"
- "Psych::TreeBuilder"
- "Method[set_location].Parameter[0]"
- - "Psych::Nodes::Alias"
- "Psych::TreeBuilder"
- "Method[alias].ReturnValue"
- - "Psych::Nodes::Alias"
- "Psych::Visitors::JSONTree"
- "Method[accept].ReturnValue"
- - "Psych::Nodes::Alias"
- "Psych::Visitors::YAMLTree"
- "Method[accept].ReturnValue"
- - "Psych::Nodes::Alias"
- "Psych::Visitors::YAMLTree"
- "Method[dump_coder].ReturnValue"
- - "Psych::Nodes::Alias"
- "Psych::Visitors::YAMLTree"
- "Method[emit_coder].ReturnValue"
- - "Psych::Nodes::Alias"
- "Psych::Visitors::RestrictedYAMLTree"
- "Method[accept].ReturnValue"
- - "Psych::Nodes::Document"
- "Psych::TreeBuilder"
- "Method[push].Parameter[0]"
- - "Psych::Nodes::Document"
- "Psych::TreeBuilder"
- "Method[set_start_location].Parameter[0]"
- - "Psych::Nodes::Document"
- "Psych::TreeBuilder"
- "Method[start_document].ReturnValue"
- - "Psych::Nodes::Document"
- "Psych::TreeBuilder"
- "Method[end_document].ReturnValue"
- - "Psych::Nodes::Document"
- "Psych::TreeBuilder"
- "Method[push].ReturnValue"
- - "Psych::Nodes::Document"
- "Psych::TreeBuilder"
- "Method[pop].ReturnValue"
- - "Psych::Nodes::Document"
- "Psych::Handlers::DocumentStream"
- "Method[start_document].ReturnValue"
- - "Psych::Nodes::Document"
- "Psych::Visitors::YAMLTree"
- "Method[push].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::TreeBuilder"
- "Method[set_location].Parameter[0]"
- - "Psych::Nodes::Scalar"
- "Psych::TreeBuilder"
- "Method[scalar].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::JSONTree"
- "Method[accept].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[accept].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[register].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Encoding].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Regexp].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Date].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_DateTime].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Time].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Integer].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Float].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_BigDecimal].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_String].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Module].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Class].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_NilClass].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[visit_Symbol].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[dump_coder].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree"
- "Method[emit_coder].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::ToRuby"
- "Method[accept].Parameter[0]"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::RestrictedYAMLTree"
- "Method[visit_Symbol].ReturnValue"
- - "Psych::Nodes::Scalar"
- "Psych::Visitors::YAMLTree::Registrar"
- "Method[register].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::TreeBuilder"
- "Method[end_document].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::TreeBuilder"
- "Method[start_stream].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::TreeBuilder"
- "Method[end_stream].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::TreeBuilder"
- "Method[push].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::TreeBuilder"
- "Method[pop].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::Visitors::Visitor"
- "Method[accept].Parameter[0]"
- - "Psych::Nodes::Stream"
- "Psych::Visitors::YAMLTree"
- "Method[start].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::Visitors::YAMLTree"
- "Method[push].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::Visitors::YAMLTree"
- "Method[finish].ReturnValue"
- - "Psych::Nodes::Stream"
- "Psych::Visitors::YAMLTree"
- "Method[tree].ReturnValue"
- - "Psych::Visitors::JSONTree"
- "Psych::Visitors::JSONTree!"
- "Method[create].ReturnValue"
- - "Psych::Visitors::YAMLTree"
- "Psych::Visitors::YAMLTree!"
- "Method[create].ReturnValue"
- - "Psych::Visitors::ToRuby"
- "Psych::Visitors::ToRuby!"
- "Method[create].ReturnValue"
- - "Psych::TestArray::X"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::InitApi"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::InitApi"
- "Psych!"
- "Method[to_json].Parameter[0]"
- - "Psych::TestCoder::TaggingCoder"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::ScalarCoder"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::Represent"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::RepresentWithInit"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::RepresentWithSeq"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestHash::X"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestHash::HashWithIvar"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::RepresentWithMap"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestHash::HashWithCustomInit"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestHash::HashWithCustomInitNoIvar"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::RepresentWithObject"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::Referential"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestCoder::CustomEncode"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestJSONTree::Bar"
- "Psych!"
- "Method[to_json].Parameter[0]"
- - "Psych::TestMarshalable::PsychCustomMarshalable"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestSafeLoad::Foo"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestSerializeSubclasses::SomeObject"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestSerializeSubclasses::StructSubclass"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestString::X"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestString::Z"
- "Psych!"
- "Method[dump].Parameter[0]"
- - "Psych::TestStruct::StructSubclass"
- "Psych!"
- "Method[dump].Parameter[0]"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Psych!"
- "Method[load_file].Parameter[0]"
- "path-injection"
- - "Psych!"
- "Method[parse_file].Parameter[0]"
- "path-injection"
- - "Psych!"
- "Method[unsafe_load_file].Parameter[0]"
- "path-injection"
- - "Psych!"
- "Method[safe_load_file].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Psych::Coder"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::Coder"
- "Method[represent_scalar]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::Coder"
- "Method[represent_seq]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::Coder"
- "Method[represent_map]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::Coder"
- "Method[represent_object]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::Coder"
- "Method[scalar=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Coder"
- "Method[map=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Coder"
- "Method[seq=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::ScalarScanner"
- "Method[tokenize]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::TreeBuilder"
- "Method[push]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::TreeBuilder"
- "Method[event_location]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Psych::Nodes::Node"
- "Method[yaml]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::DepthFirst"
- "Method[nary]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Psych::Visitors::DepthFirst"
- "Method[terminal]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Psych::Visitors::YAMLTree"
- "Method[register]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::ToRuby"
- "Method[register]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::ToRuby"
- "Method[revive_hash]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::ToRuby"
- "Method[deduplicate]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::ToRuby"
- "Method[init_with]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::YAMLTree::Registrar"
- "Method[register]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Object!"
- "Method[yaml_tag]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Handlers::DocumentStream!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Handlers::DocumentStream!"
- "Method[new]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Psych::Nodes::Alias!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Nodes::Mapping!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Psych::Nodes::Scalar!"
- "Method[new]"
- "Argument[5]"
- "ReturnValue"
- "value"
- - "Psych::Nodes::Sequence!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Psych::Nodes::Stream!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::ScalarScanner!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych::ScalarScanner!"
- "Method[new]"
- "Argument[strict_integer:]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::DepthFirst!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::ToRuby!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::ToRuby!"
- "Method[new]"
- "Argument[freeze:]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[load]"
- "Argument[5]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[load]"
- "Argument[fallback:]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[unsafe_load]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Psych!"
- "Method[unsafe_load]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[unsafe_load]"
- "Argument[fallback:]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[safe_load]"
- "Argument[5]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[safe_load]"
- "Argument[fallback:]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[parse_file]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[parse_file]"
- "Argument[fallback:]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[load_stream]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[load_stream]"
- "Argument[fallback:]"
- "ReturnValue"
- "value"
- - "Psych!"
- "Method[add_tag]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Psych::Visitors::RestrictedYAMLTree!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "taint"

391
ruby/ql/lib/codeql/ruby/frameworks/models/puma/model.yml
View File

@@ -12,6 +12,12 @@
- - "Object"
- "Puma::Events"
- "Method[register].Parameter[1]"
- - "Puma::Events"
- "Puma::UserFileDefaultOptions"
- "Method[[]].ReturnValue"
- - "Puma::Events"
- "Puma::UserFileDefaultOptions"
- "Method[fetch].ReturnValue"
- - "TestPuma::PumaInfo"
- "TestPuma::ResponseTimeBase"
- "Method[run].ReturnValue"
@@ -27,24 +33,18 @@
- - "Puma::ErrorLogger"
- "Puma::ErrorLogger!"
- "Method[stdio].ReturnValue"
- - "Puma::Events"
- "Puma::UserFileDefaultOptions"
- "Method[[]].ReturnValue"
- - "Puma::Events"
- "Puma::UserFileDefaultOptions"
- "Method[fetch].ReturnValue"
- - "Puma::LogWriter"
- "Puma::UserFileDefaultOptions"
- "Method[[]].ReturnValue"
- - "Puma::LogWriter"
- "Puma::UserFileDefaultOptions"
- "Method[fetch].ReturnValue"
- - "Puma::LogWriter"
- "Puma::LogWriter!"
- "Method[null].ReturnValue"
- - "Puma::LogWriter"
- "Puma::LogWriter!"
- "Method[stdio].ReturnValue"
- - "Puma::LogWriter"
- "Puma::LogWriter!"
- "Method[null].ReturnValue"
- - "Puma::LogWriter"
- "Puma::LogWriter!"
- "Method[strings].ReturnValue"
@@ -69,6 +69,9 @@
- - "Puma::MiniSSL::Socket"
- "Puma::MiniSSL::Server"
- "Method[accept_nonblock].ReturnValue"
- - "Puma::MiniSSL::Context"
- "Puma::Server"
- "Method[add_ssl_listener].Parameter[2]"
- - "Puma::MiniSSL::Context"
- "Puma::Binder"
- "Method[localhost_authority_context].ReturnValue"
@@ -101,111 +104,6 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Puma::Binder"
- "Method[socket_activation_fd]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Binder"
- "Method[synthesize_binds_from_activated_fs]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::Binder"
- "Method[inherit_tcp_listener]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Puma::Binder"
- "Method[inherit_ssl_listener]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::Binder"
- "Method[inherit_unix_listener]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::CLI"
- "Method[configure_control_url]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::Cluster"
- "Method[cull_start_index]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Client"
- "Method[set_timeout]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Client"
- "Method[expect_proxy_proto=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::CommonLogger"
- "Method[write]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log_hijacking]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log_hijacking]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[extract_content_length]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::UserFileDefaultOptions"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::UserFileDefaultOptions"
- "Method[fetch]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::ErrorLogger"
- "Method[title]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::ErrorLogger"
- "Method[request_parsed?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::DSL"
- "Method[load]"
- "Argument[0]"
@@ -218,12 +116,12 @@
- "taint"
- - "Puma::DSL"
- "Method[app]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::DSL"
- "Method[app]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::DSL"
@@ -443,12 +341,12 @@
- "value"
- - "Puma::DSL"
- "Method[lowlevel_error_handler]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::DSL"
- "Method[lowlevel_error_handler]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::DSL"
@@ -551,31 +449,51 @@
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Puma::PluginRegistry"
- "Method[register]"
- - "Puma::Cluster"
- "Method[cull_start_index]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma!"
- "Method[stats_object=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma!"
- "Method[set_thread_name]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::CLI"
- "Method[configure_control_url]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::RackHandler"
- "Method[set_host_port_to_config]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::ErrorLogger"
- "Method[title]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::ErrorLogger"
- "Method[request_parsed?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::UserFileDefaultOptions"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::PluginRegistry"
- "Method[add_background]"
- "Argument[0]"
- - "Puma::UserFileDefaultOptions"
- "Method[fetch]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Puma::Reactor"
- "Method[register]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Plugin"
- "Method[in_background]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Plugin"
- "Method[in_background]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- "value"
- - "Puma::Server"
- "Method[inherit_binder]"
- "Argument[0]"
@@ -591,31 +509,16 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Request"
- "Method[normalize_env]"
- "Argument[0]"
- - "Puma::Rack::Builder"
- "Method[map]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Puma::Request"
- "Method[illegal_header_key?]"
- "Argument[0]"
- "value"
- - "Puma::Rack::Builder"
- "Method[map]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Puma::Request"
- "Method[illegal_header_value?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::RackHandler"
- "Method[set_host_port_to_config]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Rack::Options"
- "Method[handler_opts]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- "value"
- - "Puma::Rack::Builder"
- "Method[run]"
- "Argument[0]"
@@ -623,12 +526,12 @@
- "value"
- - "Puma::Rack::Builder"
- "Method[warmup]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::Rack::Builder"
- "Method[warmup]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::Rack::Builder"
@@ -636,26 +539,6 @@
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Puma::Rack::Builder"
- "Method[map]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::Rack::Builder"
- "Method[map]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Puma::LogWriter::DefaultFormatter"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::LogWriter::PidFormatter"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::MiniSSL::Context"
- "Method[keystore=]"
- "Argument[0]"
@@ -726,6 +609,136 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::Binder"
- "Method[socket_activation_fd]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Binder"
- "Method[synthesize_binds_from_activated_fs]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::Binder"
- "Method[inherit_tcp_listener]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Puma::Binder"
- "Method[inherit_ssl_listener]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::Binder"
- "Method[inherit_unix_listener]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::CommonLogger"
- "Method[write]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log_hijacking]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[log_hijacking]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Puma::CommonLogger"
- "Method[extract_content_length]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Client"
- "Method[set_timeout]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Client"
- "Method[expect_proxy_proto=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::PluginRegistry"
- "Method[register]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Puma::PluginRegistry"
- "Method[add_background]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Reactor"
- "Method[register]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Plugin"
- "Method[in_background]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Plugin"
- "Method[in_background]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Puma::Request"
- "Method[normalize_env]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Request"
- "Method[illegal_header_key?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Request"
- "Method[illegal_header_value?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::Rack::Options"
- "Method[handler_opts]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::LogWriter::DefaultFormatter"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma::LogWriter::PidFormatter"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::App::Status!"
- "Method[new]"
- "Argument[1]"
@@ -771,16 +784,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma!"
- "Method[stats_object=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Puma!"
- "Method[set_thread_name]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Puma::MiniSSL::Server!"
- "Method[new]"
- "Argument[1]"

14
ruby/ql/lib/codeql/ruby/frameworks/models/rack-cors/model.yml
View File

@@ -32,13 +32,18 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Cors::Result"
- "Method[miss]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Cors::Resource"
- "Method[match?]"
- "Method[matches_path?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Cors::Resource"
- "Method[matches_path?]"
- "Method[match?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -52,8 +57,3 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Cors::Result"
- "Method[miss]"
- "Argument[0]"
- "ReturnValue"
- "value"

127
ruby/ql/lib/codeql/ruby/frameworks/models/rack-mini-profiler/model.yml
View File

@@ -27,24 +27,27 @@
- - "Rack::MiniProfiler::TimerStruct::Custom"
- "Rack::MiniProfiler::TimerStruct::Request"
- "Method[add_custom].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Page"
- "SampleStorage"
- "Method[create_fake_snapshot].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Page"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Rack::MiniProfiler::TimerStruct::Base"
- "Method[[]=].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Rack::MiniProfiler::TimerStruct::Base"
- "Method[[]].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Rack::MiniProfiler::TimerStruct::Base"
- "Method[[]=].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Rack::MiniProfiler::TimerStruct::Request"
- "Method[add_child].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Rack::MiniProfiler::TimerStruct::Request!"
- "Method[createRoot].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Page"
- "SampleStorage"
- "Method[create_fake_snapshot].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Page"
- "Rack::MiniProfiler::TimerStruct::Base"
- "Method[[]=].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Page"
- "Rack::MiniProfiler::TimerStruct::Request!"
- "Method[createRoot].ReturnValue"
- - "Rack::MiniProfiler::TimerStruct::Sql"
- "Rack::MiniProfiler::TimerStruct::Base"
- "Method[[]=].ReturnValue"
@@ -92,6 +95,71 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::ClientSettings"
- "Method[handle_cookie]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Client!"
- "Method[instrument]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[add_child]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[move_sql]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[move_custom]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[move_custom]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[record_time]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[add_custom]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[add_sql]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Request!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Request!"
- "Method[createRoot]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Request!"
- "Method[createRoot]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Sql"
- "Method[report_reader_duration]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfilerRailsMethods"
- "Method[should_move?]"
- "Argument[0]"
@@ -102,11 +170,6 @@
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::ClientSettings"
- "Method[handle_cookie]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::Config"
- "Method[authorization_mode=]"
- "Argument[0]"
@@ -147,31 +210,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[move_sql]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[move_custom]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[move_custom]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request"
- "Method[record_time]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Sql"
- "Method[report_reader_duration]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::MemcacheStore!"
- "Method[new]"
- "Argument[0]"
@@ -192,18 +230,13 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfiler::TimerStruct::Client!"
- "Method[instrument]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Request!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::MiniProfilerRails!"
- "Method[shorten_identifier]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MiniProfiler::TimerStruct::Page!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"

415
ruby/ql/lib/codeql/ruby/frameworks/models/rack/model.yml
View File

@@ -9,12 +9,6 @@
- - "Hash"
- "Rack::MockResponse"
- "Method[identify_cookie_attributes].ReturnValue"
- - "Rack::Headers"
- "Rack::Headers!"
- "Method[[]].ReturnValue"
- - "Rack::QueryParser"
- "Rack::QueryParser!"
- "Method[make_default].ReturnValue"
- - "Rack::Request"
- "Rack::Files"
- "Method[serving].Parameter[0]"
@@ -27,12 +21,18 @@
- - "Rack::Request"
- "Rack::Auth::AbstractRequest"
- "Method[request].ReturnValue"
- - "Rack::Response"
- "Rack::Response!"
- - "Rack::Headers"
- "Rack::Headers!"
- "Method[[]].ReturnValue"
- - "Rack::QueryParser"
- "Rack::QueryParser!"
- "Method[make_default].ReturnValue"
- - "Rack::Response"
- "Rack::Response!"
- "Method[new].Argument[block].Parameter[0]"
- - "Rack::Response"
- "Rack::Response!"
- "Method[[]].ReturnValue"
- - "Rack::URLMap"
- "Rack::Builder"
- "Method[generate_map].ReturnValue"
@@ -129,10 +129,10 @@
- "Method[safe_load].Parameter[0]"
- "path-injection"
- - "Rack::Builder!"
- "Method[parse_file].Parameter[0]"
- "Method[load_file].Parameter[0]"
- "path-injection"
- - "Rack::Builder!"
- "Method[load_file].Parameter[0]"
- "Method[parse_file].Parameter[0]"
- "path-injection"
- - "Rack::Builder!"
- "Method[new_from_string].Parameter[0]"
@@ -141,108 +141,8 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Rack::Cascade"
- "Method[add]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[extract_content_length]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[fresh?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[fresh?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[etag_matches?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[etag_matches?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[modified_since?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Builder"
- "Method[run]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[run]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[run]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[warmup]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[warmup]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[warmup]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[map]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[map]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Rack::Directory"
- "Method[filesize_format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ETag"
- "Method[etag_status?]"
- - "Rack::MockResponse"
- "Method[=~]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -251,16 +151,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::MethodOverride"
- "Method[method_override]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::MockResponse"
- "Method[=~]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::QueryParser"
- "Method[normalize_params]"
- "Argument[0]"
@@ -276,6 +166,21 @@
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Rack::QueryParser!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Events"
- "Method[make_response]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::MethodOverride"
- "Method[method_override]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Response"
- "Method[set_header]"
- "Argument[1]"
@@ -286,86 +191,46 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Sendfile"
- "Method[variation]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Sendfile"
- "Method[map_accel_path]"
- - "Rack::Builder"
- "Method[map]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Mime"
- "Method[match?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::Mime"
- "Method[match?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Mime"
- "Method[mime_type]"
- "Argument[1]"
- - "Rack::Builder"
- "Method[map]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Rack::Utils"
- "Method[best_q_match]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::Utils"
- "Method[select_best_encoding]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Utils"
- "Method[set_cookie_header!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Generator"
- "Method[content_for_tempfile]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Generator"
- "Method[content_for_other]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Generator"
- "Method[content_for_other]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Parser"
- "Method[dequote]"
- - "Rack::Builder"
- "Method[run]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Multipart::Parser"
- "Method[normalize_filename]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Parser"
- "Method[tag_multipart_encoding]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::ParamList"
- "Method[<<]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Response::Raw"
- "Method[set_header]"
- - "Rack::Builder"
- "Method[run]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[run]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[warmup]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[warmup]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Builder"
- "Method[warmup]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Rack::Request::Env"
- "Method[set_header]"
- "Argument[1]"
@@ -416,13 +281,163 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Multipart::ParamList"
- "Method[<<]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::ParamList!"
- "Method[normalize_params]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Parser"
- "Method[dequote]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Multipart::Parser"
- "Method[normalize_filename]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Parser"
- "Method[tag_multipart_encoding]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Rack::Cascade"
- "Method[add]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[log]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Rack::CommonLogger"
- "Method[extract_content_length]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[fresh?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[fresh?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[etag_matches?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[etag_matches?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::ConditionalGet"
- "Method[modified_since?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Directory"
- "Method[filesize_format]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::ETag"
- "Method[etag_status?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Sendfile"
- "Method[variation]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Sendfile"
- "Method[map_accel_path]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Mime"
- "Method[match?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Mime"
- "Method[match?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::Mime"
- "Method[mime_type]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Utils"
- "Method[best_q_match]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::Utils"
- "Method[select_best_encoding]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Utils"
- "Method[set_cookie_header!]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Generator"
- "Method[content_for_tempfile]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Generator"
- "Method[content_for_other]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Multipart::Generator"
- "Method[content_for_other]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rack::Response::Raw"
- "Method[set_header]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::Response::Helpers"
- "Method[append]"
- "Method[location=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Response::Helpers"
- "Method[etag=]"
- "Method[append]"
- "Argument[0]"
- "ReturnValue"
- "value"
@@ -432,12 +447,12 @@
- "ReturnValue"
- "taint"
- - "Rack::Response::Helpers"
- "Method[content_type=]"
- "Method[etag=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Response::Helpers"
- "Method[location=]"
- "Method[content_type=]"
- "Argument[0]"
- "ReturnValue"
- "value"
@@ -561,21 +576,11 @@
- "Argument[content_type:]"
- "ReturnValue"
- "value"
- - "Rack::Multipart::ParamList!"
- "Method[normalize_params]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::NullLogger!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::QueryParser!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rack::RewindableInput::Middleware!"
- "Method[new]"
- "Argument[0]"

548
ruby/ql/lib/codeql/ruby/frameworks/models/rb-readline/model.yml Normal file
View File

@@ -0,0 +1,548 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Installer"
- "ToplevelInstaller"
- "Method[init_installers].ReturnValue"
- - "ConfigTable::BoolItem"
- "ConfigTable"
- "Method[add].ReturnValue"
- - "ConfigTable::BoolItem"
- "ConfigTable"
- "Method[add].Parameter[0]"
- - "ConfigTable::BoolItem"
- "ConfigTable::MetaConfigEnvironment"
- "Method[add_bool_config].ReturnValue"
- - "ConfigTable::PathItem"
- "ConfigTable"
- "Method[add].ReturnValue"
- - "ConfigTable::PathItem"
- "ConfigTable"
- "Method[add].Parameter[0]"
- - "ConfigTable::PathItem"
- "ConfigTable::MetaConfigEnvironment"
- "Method[add_path_config].ReturnValue"
- - "ConfigTable::ExecItem"
- "ConfigTable"
- "Method[add].ReturnValue"
- - "ConfigTable::PackageSelectionItem"
- "ConfigTable"
- "Method[add].ReturnValue"
- - "Installer::Shebang"
- "Installer"
- "Method[new_shebang].ReturnValue"
- - "Installer::Shebang"
- "Installer::Shebang!"
- "Method[parse].ReturnValue"
- - "Installer::Shebang"
- "Installer::Shebang!"
- "Method[load].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "RbReadline"
- "Method[rl_completion_matches].Parameter[1]"
- "code-injection"
- - "RbReadline"
- "Method[rl_variable_bind].Parameter[1]"
- "code-injection"
- - "ConfigTable"
- "Method[load_script].Parameter[0]"
- "path-injection"
- - "FileOperations"
- "Method[install].Parameter[0]"
- "path-injection"
- - "FileOperations"
- "Method[install].Parameter[1]"
- "path-injection"
- - "FileOperations"
- "Method[remove_tree0].Parameter[0]"
- "path-injection"
- - "FileOperations"
- "Method[move_file].Parameter[1]"
- "path-injection"
- - "FileOperations"
- "Method[move_file].Parameter[0]"
- "path-injection"
- - "FileOperations"
- "Method[diff?].Parameter[1]"
- "path-injection"
- - "FileOperations"
- "Method[files_of].Parameter[0]"
- "path-injection"
- - "FileOperations"
- "Method[directories_of].Parameter[0]"
- "path-injection"
- - "Installer"
- "Method[update_shebang_line].Parameter[0]"
- "path-injection"
- - "Installer::Shebang!"
- "Method[load].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "RbReadline"
- "Method[rl_filename_completion_function]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_username_completion_function]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[compute_lcd_of_matches]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_set_insert_mode]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_move_cursor_relative]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_move_cursor_relative]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_move_vert]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[rl_setstate]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_unsetstate]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_isstate]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[sh_set_lines_and_columns]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_function_of_keyseq]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_variable_bind]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[cr_faster]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[cr_faster]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[meta_char]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[ctrl_char]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[isprint]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[whitespace]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[w_offset]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[m_offset]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[update_line]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[update_line]"
- "Argument[4]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[update_line]"
- "Argument[5]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_col_width]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_col_width]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[endsrch_char]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_isearch_cleanup]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_clear_to_eol]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[space_to_eol]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_delete_text]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_delete_text]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[__rl_fix_point]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[replace_history_data]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_char_value]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[rl_character_len]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[remove_duplicate_matches]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[make_quoted_replacement]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[printable_part]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_internal_pager]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[history_arg_extract]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[trans]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[history_search_pos]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[noninc_search_from_pos]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_nsearch_cleanup]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[stifle_history]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_adjust_point]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_find_next_mbchar]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_find_next_mbchar]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_find_prev_mbchar]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "RbReadline"
- "Method[_rl_compare_chars]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_compare_chars]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "RbReadline"
- "Method[_rl_read_mbstring]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable"
- "Method[add]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "FileOperations"
- "Method[diff?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "HookScriptAPI"
- "Method[set_config]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "HookScriptAPI"
- "Method[srcfile]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ToplevelInstaller"
- "Method[valid_task?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ToplevelInstallerMulti"
- "Method[packages=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ToplevelInstallerMulti"
- "Method[extract_selection]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Installer"
- "Method[traverse]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Installer"
- "Method[new_shebang]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Installer"
- "Method[globs2re]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Installer"
- "Method[dive_into]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Installer::Shebang!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[add_config]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[set_config_default]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[declare_packages]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[add_bool_config]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[add_path_config]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "ConfigTable::PathItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::PackageSelectionItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::Item"
- "Method[resolve]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ConfigTable::Item"
- "Method[set]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::Item"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::SelectItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ConfigTable::Item!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "ConfigTable::SelectItem!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ConfigTable::ExecItem!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "ConfigTable::ExecItem!"
- "Method[new]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "ConfigTable::PackageSelectionItem!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Readline::History!"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[input=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[output=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[completion_proc=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[completion_case_fold=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[basic_word_break_characters=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[completer_word_break_characters=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[basic_quote_characters=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[completer_quote_characters=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Readline!"
- "Method[filename_quote_characters=]"
- "Argument[0]"
- "ReturnValue"
- "value"

112
ruby/ql/lib/codeql/ruby/frameworks/models/redcarpet/model.yml Normal file
View File

@@ -0,0 +1,112 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Redcarpet::Markdown"
- "Redcarpet::CLI!"
- "Method[parser_object].ReturnValue"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Redcarpet::Render::StripDown"
- "Method[table_cell]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[header]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[link]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[link]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[image]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[image]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[paragraph]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[table]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[table]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::StripDown"
- "Method[table_row]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[list]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[emphasis]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[header]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[paragraph]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[normal_text]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[block_code]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[codespan]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[double_emphasis]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::ManPage"
- "Method[list_item]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redcarpet::Render::Safe"
- "Method[html_escape]"
- "Argument[0]"
- "ReturnValue"
- "taint"

37
ruby/ql/lib/codeql/ruby/frameworks/models/redis-namespace/model.yml Normal file
View File

@@ -0,0 +1,37 @@
"extensions":
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Redis::Namespace"
- "Method[wrapped_send].Parameter[1]"
- "code-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Redis::Namespace"
- "Method[redis=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Redis::Namespace"
- "Method[ruby2_keywords_hash]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Redis::Namespace"
- "Method[clone_args]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Redis::Namespace"
- "Method[add_namespace]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Redis::Namespace"
- "Method[rem_namespace]"
- "Argument[0]"
- "ReturnValue"
- "value"

156
ruby/ql/lib/codeql/ruby/frameworks/models/redis-rb/model.yml
View File

@@ -18,13 +18,16 @@
- - "Redis::Cluster"
- "Redis::Commands::Transactions"
- "Method[watch].Argument[block].Parameter[0]"
- - "Redis::PipelinedConnection"
- "Redis::Commands::Transactions"
- "Method[watch].Argument[block].Parameter[0]"
- - "Redis::PipelinedConnection"
- "Redis::PipelinedConnection"
- "Method[pipelined].Argument[block].Parameter[0]"
- - "Redis::PipelinedConnection"
- "Redis::PipelinedConnection"
- "Method[synchronize].Argument[block].Parameter[0]"
- - "Redis::PipelinedConnection"
- - "Redis::MultiConnection"
- "Redis::Commands::Transactions"
- "Method[watch].Argument[block].Parameter[0]"
- - "Redis::MultiConnection"
@@ -33,15 +36,21 @@
- - "Redis::MultiConnection"
- "Redis::PipelinedConnection"
- "Method[synchronize].Argument[block].Parameter[0]"
- - "Redis::MultiConnection"
- "Redis::Commands::Transactions"
- "Method[watch].Argument[block].Parameter[0]"
- - "Redis::FutureNotReady"
- "Redis::Future"
- "Method[_set].ReturnValue"
- - "Redis::FutureNotReady"
- "Redis::Future"
- "Method[value].ReturnValue"
- - "Redis::FutureNotReady"
- "Redis::Future"
- "Method[_set].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Transactions"
- "Method[unwatch].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Transactions"
- "Method[exec].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Transactions"
- "Method[discard].ReturnValue"
- - "Redis::Future"
- "Redis::PipelinedConnection"
- "Method[send_command].ReturnValue"
@@ -53,10 +62,10 @@
- "Method[send_blocking_command].ReturnValue"
- - "Redis::Future"
- "Redis::Commands"
- "Method[method_missing].ReturnValue"
- "Method[call].ReturnValue"
- - "Redis::Future"
- "Redis::Commands"
- "Method[call].ReturnValue"
- "Method[method_missing].ReturnValue"
- - "Redis::Future"
- "Redis::Commands"
- "Method[sentinel].ReturnValue"
@@ -171,6 +180,18 @@
- - "Redis::Future"
- "Redis::Commands::HyperLogLog"
- "Method[pfmerge].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[restore].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[copy].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[object].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[move].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[type].ReturnValue"
@@ -201,9 +222,6 @@
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[dump].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[restore].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[migrate].ReturnValue"
@@ -222,15 +240,6 @@
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[keys].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[move].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[copy].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[object].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Keys"
- "Method[randomkey].ReturnValue"
@@ -332,19 +341,19 @@
- "Method[_eval].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Server"
- "Method[debug].ReturnValue"
- "Method[config].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Server"
- "Method[config].ReturnValue"
- "Method[client].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Server"
- "Method[debug].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Server"
- "Method[bgrewriteaof].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Server"
- "Method[bgsave].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Server"
- "Method[client].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Server"
- "Method[dbsize].ReturnValue"
@@ -582,6 +591,9 @@
- - "Redis::Future"
- "Redis::Commands::Strings"
- "Method[set].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Strings"
- "Method[get].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Strings"
- "Method[decr].ReturnValue"
@@ -618,9 +630,6 @@
- - "Redis::Future"
- "Redis::Commands::Strings"
- "Method[mapped_msetnx].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Strings"
- "Method[get].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Strings"
- "Method[mget].ReturnValue"
@@ -648,24 +657,15 @@
- - "Redis::Future"
- "Redis::Commands::Strings"
- "Method[strlen].ReturnValue"
- - "Redis::Future"
- - "Redis::MultiFuture"
- "Redis::Commands::Transactions"
- "Method[unwatch].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Transactions"
- "Method[exec].ReturnValue"
- - "Redis::Future"
- "Redis::Commands::Transactions"
- "Method[discard].ReturnValue"
- "Method[multi].ReturnValue"
- - "Redis::MultiFuture"
- "Redis::PipelinedConnection"
- "Method[multi].ReturnValue"
- - "Redis::MultiFuture"
- "Redis::PipelinedConnection"
- "Method[synchronize].ReturnValue"
- - "Redis::MultiFuture"
- "Redis::Commands::Transactions"
- "Method[multi].ReturnValue"
- - "Redis::Subscription"
- "Redis::Subscription!"
- "Method[new].Argument[block].Parameter[0]"
@@ -675,15 +675,15 @@
- - "Lint::BlockingCommands::FakeDuration"
- "Redis::Distributed"
- "Method[blmove].Parameter[timeout:]"
- - "Lint::BlockingCommands::FakeDuration"
- "Redis::Commands::Lists"
- "Method[brpoplpush].Parameter[2]"
- - "Lint::BlockingCommands::FakeDuration"
- "Redis::Commands::Lists"
- "Method[blmove].Parameter[4]"
- - "Lint::BlockingCommands::FakeDuration"
- "Redis::Commands::Lists"
- "Method[blmove].Parameter[timeout:]"
- - "Lint::BlockingCommands::FakeDuration"
- "Redis::Commands::Lists"
- "Method[brpoplpush].Parameter[2]"
- - "Lint::BlockingCommands::FakeDuration"
- "Redis::Commands::Lists"
- "Method[brpoplpush].Parameter[timeout:]"
@@ -714,11 +714,81 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Redis::PipelinedConnection"
- "Method[send_command]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Redis::PipelinedConnection"
- "Method[send_command]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Redis::PipelinedConnection"
- "Method[send_blocking_command]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Redis::PipelinedConnection"
- "Method[send_blocking_command]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Redis::MultiConnection"
- "Method[send_blocking_command]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Redis::MultiConnection"
- "Method[send_blocking_command]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Redis::Future"
- "Method[_set]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Hashes"
- "Method[hmget]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Hashes"
- "Method[hmget]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Keys"
- "Method[_scan]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Keys"
- "Method[_scan]"
- "Argument[6]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Lists"
- "Method[_bpop]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Lists"
- "Method[_bpop]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Strings"
- "Method[mget]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Redis::Commands::Strings"
- "Method[mget]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Redis::MultiFuture"
- "Method[_set]"
- "Argument[0]"

4
ruby/ql/lib/codeql/ruby/frameworks/models/require_all/model.yml
View File

@@ -15,12 +15,12 @@
"data":
- - "SpecHelper"
- "Method[fixture_path]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "SpecHelper"
- "Method[fixture_path]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "SpecHelper"

114
ruby/ql/lib/codeql/ruby/frameworks/models/rest-client/model.yml
View File

@@ -24,30 +24,15 @@
- - "RestClient::Windows::RootCerts"
- "RestClient::Windows::RootCerts!"
- "Method[instance].ReturnValue"
- - "RestClient::RawResponse"
- "RestClient::Request"
- "Method[process_result].ReturnValue"
- - "RestClient::RawResponse"
- "RestClient::AbstractResponse"
- "Method[return!].ReturnValue"
- - "RestClient::ParamsArray"
- "RestClient::Payload"
- "Method[generate].ReturnValue"
- - "RestClient::ParamsArray"
- "RestClient::Payload"
- "Method[generate].Parameter[0]"
- - "RestClient::ParamsArray"
- "RestClient::Payload::Streamed"
- "Method[build_stream].ReturnValue"
- - "RestClient::Response"
- "Helpers"
- "Method[response_from_res_double].ReturnValue"
- - "RestClient::Response"
- "RestClient::Request"
- "Method[process_result].Argument[block].Parameter[0]"
- "Method[process_result].ReturnValue"
- - "RestClient::Response"
- "RestClient::Request"
- "Method[process_result].ReturnValue"
- "Method[process_result].Argument[block].Parameter[0]"
- - "RestClient::Response"
- "RestClient::Response"
- "Method[body].ReturnValue"
@@ -66,10 +51,19 @@
- - "RestClient::Response"
- "RestClient::Response!"
- "Method[fix_encoding].ReturnValue"
- - "RestClient::Payload::Base"
- - "RestClient::RawResponse"
- "RestClient::Request"
- "Method[process_result].ReturnValue"
- - "RestClient::RawResponse"
- "RestClient::AbstractResponse"
- "Method[return!].ReturnValue"
- - "RestClient::ParamsArray"
- "RestClient::Payload"
- "Method[generate].ReturnValue"
- - "RestClient::Payload::Base"
- - "RestClient::ParamsArray"
- "RestClient::Payload"
- "Method[generate].Parameter[0]"
- - "RestClient::ParamsArray"
- "RestClient::Payload::Streamed"
- "Method[build_stream].ReturnValue"
- - "RestClient::Payload::Streamed"
@@ -78,6 +72,12 @@
- - "RestClient::Payload::Streamed"
- "RestClient::Payload::Streamed"
- "Method[build_stream].ReturnValue"
- - "RestClient::Payload::Base"
- "RestClient::Payload"
- "Method[generate].ReturnValue"
- - "RestClient::Payload::Base"
- "RestClient::Payload::Streamed"
- "Method[build_stream].ReturnValue"
- - "RestClient::Payload::UrlEncoded"
- "RestClient::Payload"
- "Method[generate].ReturnValue"
@@ -95,10 +95,10 @@
"pack": "codeql/ruby-all"
"data":
- - "RestClient!"
- "Method[delete].Parameter[0]"
- "Method[get].Parameter[0]"
- "request-forgery"
- - "RestClient!"
- "Method[get].Parameter[0]"
- "Method[delete].Parameter[0]"
- "request-forgery"
- - "RestClient!"
- "Method[head].Parameter[0]"
@@ -149,16 +149,31 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient::Resource"
- "Method[concat_urls]"
- "Argument[1]"
- - "RestClient!"
- "Method[create_log]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RestClient::Resource"
- "Method[concat_urls]"
- "value"
- - "RestClient!"
- "Method[log=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient!"
- "Method[add_before_execution_proc]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RestClient!"
- "Method[add_before_execution_proc]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "RestClient::Windows::RootCerts!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient::Payload"
- "Method[generate]"
- "Argument[0]"
@@ -169,11 +184,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient::Payload::Multipart"
- "Method[handle_key]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient::Response!"
- "Method[create]"
- "Argument[0]"
@@ -184,6 +194,21 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient::Payload::Multipart"
- "Method[handle_key]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient::Resource"
- "Method[concat_urls]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RestClient::Resource"
- "Method[concat_urls]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RestClient::Resource!"
- "Method[new]"
- "Argument[1]"
@@ -194,11 +219,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RestClient::Windows::RootCerts!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient::Payload::Base!"
- "Method[new]"
- "Argument[0]"
@@ -224,23 +244,3 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient!"
- "Method[log=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient!"
- "Method[create_log]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RestClient!"
- "Method[add_before_execution_proc]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RestClient!"
- "Method[add_before_execution_proc]"
- "Argument[block]"
- "ReturnValue"
- "taint"

622
ruby/ql/lib/codeql/ruby/frameworks/models/rollbar-gem/model.yml Normal file
View File

@@ -0,0 +1,622 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "User"
- "HomeController"
- "Method[custom_current_user].ReturnValue"
- - "Rollbar::Configuration"
- "Rollbar::Plugin"
- "Method[configuration].ReturnValue"
- - "Rollbar::Item"
- "Rollbar::Notifier"
- "Method[build_item_with_payload].ReturnValue"
- - "Rollbar::Item"
- "Rollbar::Notifier"
- "Method[build_item].ReturnValue"
- - "Rollbar::LazyStore"
- "Rollbar::Notifier"
- "Method[reset!].ReturnValue"
- - "Rollbar::LazyStore"
- "Rollbar::Util!"
- "Method[deep_merge].ReturnValue"
- - "Rollbar::LoggerProxy"
- "Rollbar::Notifier"
- "Method[logger].ReturnValue"
- - "Rollbar::Notifier"
- "Rollbar::Notifier"
- "Method[scope!].ReturnValue"
- - "Rollbar::Delay::Sidekiq"
- "Rollbar::Configuration"
- "Method[use_sidekiq].ReturnValue"
- - "Rollbar::Delay::Sidekiq"
- "Rollbar::Configuration"
- "Method[use_sidekiq=].ReturnValue"
- - "Rollbar::JSON::JsOptionsState"
- "Rollbar::JSON::Value"
- "Method[to_json].Parameter[0]"
- - "Rollbar::Notifier::TraceWithBindings"
- "Rollbar::Notifier"
- "Method[trace_with_bindings].ReturnValue"
- - "Rollbar::Middleware::Js::SecureHeadersFalse"
- "Rollbar::Middleware::Js"
- "Method[secure_headers].ReturnValue"
- - "Rollbar::Middleware::Js::SecureHeaders3To5"
- "Rollbar::Middleware::Js"
- "Method[secure_headers].ReturnValue"
- - "Rollbar::Middleware::Js::SecureHeaders6"
- "Rollbar::Middleware::Js"
- "Method[secure_headers].ReturnValue"
- - "Delayed::Backend::Test::Job"
- "Delayed::Backend::Test::Job!"
- "Method[create].ReturnValue"
- - "Delayed::Backend::Test::Job"
- "Delayed::Backend::Test::Job!"
- "Method[create!].ReturnValue"
- "addsTo":
"extensible": "sourceModel"
"pack": "codeql/ruby-all"
"data":
- - "Rollbar::RequestDataExtractor"
- "Method[rollbar_request_cookies].ReturnValue"
- "remote"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "Rollbar::Configuration"
- "Method[[]].Parameter[0]"
- "code-injection"
- - "Rollbar::LazyStore"
- "Method[method_missing].Parameter[0]"
- "code-injection"
- - "Rollbar::LoggerProxy"
- "Method[log].Parameter[0]"
- "code-injection"
- - "Rollbar::Notifier"
- "Method[update_file].Parameter[1]"
- "path-injection"
- - "Rollbar::Plugin"
- "Method[require_dependency].Parameter[0]"
- "path-injection"
- - "Rollbar::ConfiguredOptions"
- "Method[method_missing].Parameter[0]"
- "code-injection"
- - "Rollbar::LanguageSupport"
- "Method[const_get].Parameter[1]"
- "code-injection"
- - "Rollbar::Item::Backtrace"
- "Method[read_file].Parameter[0]"
- "path-injection"
- - "Rollbar::Middleware::Js"
- "Method[html_safe_if_needed].Parameter[0]"
- "html-injection"
- - "Rollbar::Util::Hash!"
- "Method[map_value].Parameter[1]"
- "code-injection"
- - "YAML!"
- "Method[load_dj].Parameter[0]"
- "path-injection"
- - "YAML!"
- "Method[load_dj].Parameter[0]"
- "unsafe-deserialization"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "HomeController"
- "Method[build_hash_with_locals]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "RollbarAPI"
- "Method[result]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "RollbarAPI"
- "Method[result]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "RollbarAPI"
- "Method[result]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "SinatraDummy"
- "Method[build_hash_with_locals]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "EncodingHelpers"
- "Method[force_to_ascii]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "FixtureHelpers"
- "Method[fixture_file]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Configuration"
- "Method[use_eventmachine=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Configuration"
- "Method[send_extra_frame_data=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Configuration"
- "Method[logger_level=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Configuration"
- "Method[hook]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rollbar::Configuration"
- "Method[hook]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Rollbar::Item"
- "Method[scrub]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Item"
- "Method[add_access_token_to_payload]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::LazyStore"
- "Method[==]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Logger"
- "Method[blank?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Notifier"
- "Method[add_original_message]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Notifier"
- "Method[add_original_host]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Notifier"
- "Method[add_original_uuid]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Notifier"
- "Method[use_exception_level_filters?]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Notifier"
- "Method[lookup_exception_level]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Notifier"
- "Method[log_and_return_item_data]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Notifier"
- "Method[pack_ruby260_bytes]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Notifier"
- "Method[failsafe_reason]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Notifier"
- "Method[failsafe_exception_reason]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Notifier"
- "Method[failsafe_body]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Plugin"
- "Method[execute]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Plugin"
- "Method[execute]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Rollbar::Plugin"
- "Method[revert]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Plugin"
- "Method[revert]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Rollbar::Plugin"
- "Method[dependency]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Plugin"
- "Method[dependency]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "DeployAPI::Report"
- "Method[valid_data?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "DeployAPI::Report"
- "Method[authorized?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::JSON"
- "Method[load]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::LanguageSupport"
- "Method[version?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::RequestDataExtractor"
- "Method[extract_person_data_from_controller]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::RequestDataExtractor"
- "Method[rollbar_request_method]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::RequestDataExtractor"
- "Method[rollbar_url]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::RequestDataExtractor"
- "Method[rollbar_user_ip]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::RequestDataExtractor"
- "Method[user_ip_at_configured_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::RequestDataExtractor"
- "Method[find_not_private_ip]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Encoding::Encoder"
- "Method[force_encoding]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Item::Frame"
- "Method[skip_extra_frame_data?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Item::Frame"
- "Method[code_data]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Item::Frame"
- "Method[post_data]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Rack"
- "Method[framework_error]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Js"
- "Method[html_safe_if_needed]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Js"
- "Method[html?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Js"
- "Method[add_js?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Js"
- "Method[add_js?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Js"
- "Method[build_response]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Js"
- "Method[build_body_with_js]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Js"
- "Method[add_person_data]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Js"
- "Method[script_tag]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Sinatra"
- "Method[framework_error]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Scrubbers::URL"
- "Method[ascii_encode]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Scrubbers::URL"
- "Method[filter_user]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Scrubbers::URL"
- "Method[filter_password]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Scrubbers::URL"
- "Method[filter_query]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Scrubbers::URL"
- "Method[restore_square_brackets]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Scrubbers::URL"
- "Method[filter_key?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Scrubbers::URL"
- "Method[filter_key?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Scrubbers::URL"
- "Method[filter_key?]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Rollbar::Scrubbers::URL"
- "Method[filter_key?]"
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Rollbar::Scrubbers::Params"
- "Method[call]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Scrubbers::Params"
- "Method[scrub]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Scrubbers::Params"
- "Method[rollbar_filtered_param_value]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Truncation::FramesStrategy"
- "Method[truncate_trace]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Truncation::MinBodyStrategy"
- "Method[truncate_trace_data]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Truncation::RemoveAnyKeyStrategy"
- "Method[extract_title]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Truncation::RemoveAnyKeyStrategy"
- "Method[extract_title_from_trace]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Truncation::RemoveExtraStrategy"
- "Method[delete_message_extra]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Truncation::RemoveExtraStrategy"
- "Method[delete_trace_chain_extra]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Truncation::RemoveExtraStrategy"
- "Method[delete_trace_extra]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Truncation::Mixin"
- "Method[select_frames]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Rails::RollbarMiddleware"
- "Method[request_data=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Rails::RollbarMiddleware"
- "Method[context]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Js::SecureHeadersResolver"
- "Method[csp_needs_nonce?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Js::SecureHeaders3To5"
- "Method[opt_out?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Middleware::Rails::ShowExceptions"
- "Method[extract_scope_from]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Encoding::Encoder!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Item::Frame!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Rollbar::Item!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::LoggerProxy!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::JSON::Value!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Rack!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Rails::RollbarMiddleware!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Middleware::Js!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Rollbar::Delayed::JobData!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Sidekiq!"
- "Method[skip_report?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Sidekiq!"
- "Method[job_hash_from_msg]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Truncation::RemoveAnyKeyStrategy!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rollbar::Encoding!"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util::Hash!"
- "Method[map_value]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util::IPAnonymizer!"
- "Method[anonymize_ip]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util::IPObfuscator!"
- "Method[obfuscate_ip]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util!"
- "Method[deep_copy]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util!"
- "Method[deep_copy]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Rollbar::Util!"
- "Method[deep_merge]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util!"
- "Method[truncate]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util!"
- "Method[clone_obj]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rollbar::Util!"
- "Method[uuid_rollbar_url]"
- "Argument[0]"
- "ReturnValue"
- "taint"

14
ruby/ql/lib/codeql/ruby/frameworks/models/ruby-jwt/model.yml
View File

@@ -25,6 +25,11 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "JWT::Encode"
- "Method[resolve_algorithm]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JWT::Decode"
- "Method[sort_by_alg_header]"
- "Argument[0]"
@@ -35,11 +40,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "JWT::Encode"
- "Method[resolve_algorithm]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "JWT::X5cKeyFinder"
- "Method[parse_certificates]"
- "Argument[0]"
@@ -92,12 +92,12 @@
- "value"
- - "JWT::Decode!"
- "Method[new]"
- "Argument[block]"
- "Argument[4]"
- "ReturnValue"
- "value"
- - "JWT::Decode!"
- "Method[new]"
- "Argument[4]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "JWT::JWK::HMAC!"

26
ruby/ql/lib/codeql/ruby/frameworks/models/ruby-pg/model.yml
View File

@@ -21,6 +21,12 @@
- - "PG::Connection"
- "PG!"
- "Method[connect].ReturnValue"
- - "PG::BasicTypeRegistry"
- "PG::BasicTypeRegistry::Checker"
- "Method[build_coder_maps].Parameter[1]"
- - "PG::BasicTypeRegistry"
- "PG::BasicTypeRegistry::Checker"
- "Method[build_coder_maps].Parameter[registry:]"
- - "PG::BasicTypeRegistry"
- "PG::BasicTypeRegistry"
- "Method[register_coder].ReturnValue"
@@ -33,12 +39,6 @@
- - "PG::BasicTypeRegistry"
- "PG::BasicTypeRegistry"
- "Method[register_default_types].ReturnValue"
- - "PG::BasicTypeRegistry"
- "PG::BasicTypeRegistry::Checker"
- "Method[build_coder_maps].Parameter[1]"
- - "PG::BasicTypeRegistry"
- "PG::BasicTypeRegistry::Checker"
- "Method[build_coder_maps].Parameter[registry:]"
- - "PG::BasicTypeRegistry"
- "PG::BasicTypeMapForQueries!"
- "Method[new].Parameter[1]"
@@ -105,6 +105,11 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "PG!"
- "Method[make_shareable]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "PG::TextDecoder::Date"
- "Method[decode]"
- "Argument[0]"
@@ -157,12 +162,12 @@
- "value"
- - "Helpers::TcpGateScheduler::Connection"
- "Method[other_side_of?]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Helpers::TcpGateScheduler::Connection"
- "Method[other_side_of?]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Helpers::TcpGateScheduler::Connection"
@@ -210,8 +215,3 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "PG!"
- "Method[make_shareable]"
- "Argument[0]"
- "ReturnValue"
- "taint"

617
ruby/ql/lib/codeql/ruby/frameworks/models/rubyzip/model.yml Normal file
View File

@@ -0,0 +1,617 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Time"
- "Zip::Entry"
- "Method[time].ReturnValue"
- - "Time"
- "Zip::Entry"
- "Method[time=].Parameter[0]"
- - "Time"
- "Zip::Entry"
- "Method[atime=].Parameter[0]"
- - "Time"
- "Zip::Entry"
- "Method[ctime=].Parameter[0]"
- - "Time"
- "Zip::Entry"
- "Method[atime].ReturnValue"
- - "Time"
- "Zip::Entry"
- "Method[ctime].ReturnValue"
- - "Time"
- "Zip::DOSTime!"
- "Method[from_time].Parameter[0]"
- - "Zip::DecryptedIo"
- "Zip::InputStream"
- "Method[get_decrypted_io].ReturnValue"
- - "Zip::Deflater"
- "Zip::OutputStream"
- "Method[init_next_entry].ReturnValue"
- - "Zip::Deflater"
- "Zip::OutputStream"
- "Method[get_compressor].ReturnValue"
- - "Zip::Entry"
- "Zip::Entry"
- "Method[create_file].Argument[block].Parameter[0]"
- - "Zip::Entry"
- "Zip::Entry"
- "Method[create_directory].Argument[block].Parameter[0]"
- - "Zip::Entry"
- "Zip::EntrySet"
- "Method[delete].ReturnValue"
- - "Zip::Entry"
- "Zip::EntrySet"
- "Method[delete].Parameter[0]"
- - "Zip::Entry"
- "Zip::EntrySet"
- "Method[include?].Parameter[0]"
- - "Zip::Entry"
- "Zip::File"
- "Method[add].Parameter[0]"
- - "Zip::Entry"
- "Zip::File"
- "Method[get_output_stream].Parameter[0]"
- - "Zip::Entry"
- "Zip::File"
- "Method[remove].ReturnValue"
- - "Zip::Entry"
- "Zip::File"
- "Method[check_entry_exists].ReturnValue"
- - "Zip::Entry"
- "Zip::InputStream"
- "Method[get_next_entry].ReturnValue"
- - "Zip::Entry"
- "Zip::InputStream"
- "Method[rewind].ReturnValue"
- - "Zip::Entry"
- "Zip::InputStream"
- "Method[open_entry].ReturnValue"
- - "Zip::Entry"
- "Zip::OutputStream"
- "Method[put_next_entry].Parameter[0]"
- - "Zip::Entry"
- "Zip::OutputStream"
- "Method[init_next_entry].Parameter[0]"
- - "Zip::Entry"
- "Zip::OutputStream"
- "Method[put_next_entry].ReturnValue"
- - "Zip::EntrySet"
- "Zip::EntrySet"
- "Method[dup].ReturnValue"
- - "Zip::TraditionalEncrypter"
- "Zip::OutputStream!"
- "Method[new].Parameter[2]"
- - "Zip::TraditionalEncrypter"
- "Zip::OutputStream!"
- "Method[new].Parameter[encrypter:]"
- - "Zip::TraditionalDecrypter"
- "Zip::InputStream!"
- "Method[new].Parameter[2]"
- - "Zip::TraditionalDecrypter"
- "Zip::InputStream!"
- "Method[new].Parameter[decrypter:]"
- - "Zip::ExtraField"
- "Zip::Entry"
- "Method[read_extra_field].ReturnValue"
- - "Zip::ExtraField"
- "Zip::File"
- "Method[get_output_stream].Parameter[3]"
- - "Zip::ExtraField"
- "Zip::File"
- "Method[get_output_stream].Parameter[extra:]"
- - "Zip::ExtraField"
- "Zip::Entry!"
- "Method[new].Parameter[extra:]"
- - "Zip::ExtraField"
- "Zip::Entry!"
- "Method[new].Parameter[9]"
- - "Zip::File"
- "ZipFileGenerator"
- "Method[write].ReturnValue"
- - "Zip::File"
- "ZipDialog"
- "Method[each].ReturnValue"
- - "Zip::File"
- "ZipDialog"
- "Method[refresh].ReturnValue"
- - "Zip::File"
- "ZipDialog"
- "Method[load].ReturnValue"
- - "Zip::File"
- "ZipDialog"
- "Method[zipfile].ReturnValue"
- - "Zip::File"
- "ZipDialog"
- "Method[add_files].ReturnValue"
- - "Zip::File"
- "ZipDialog"
- "Method[extract_files].ReturnValue"
- - "Zip::InputStream"
- "Zip::Entry"
- "Method[get_input_stream].ReturnValue"
- - "Zip::InputStream"
- "Zip::Entry"
- "Method[write_to_zip_output_stream].ReturnValue"
- - "Zip::PassThruCompressor"
- "Zip::OutputStream"
- "Method[init_next_entry].ReturnValue"
- - "Zip::PassThruCompressor"
- "Zip::OutputStream"
- "Method[get_compressor].ReturnValue"
- - "Zip::StreamableDirectory"
- "Zip::Entry"
- "Method[create_file].Argument[block].Parameter[0]"
- - "Zip::StreamableDirectory"
- "Zip::Entry"
- "Method[create_directory].Argument[block].Parameter[0]"
- - "Zip::StreamableDirectory"
- "Zip::File"
- "Method[remove].ReturnValue"
- - "Zip::StreamableDirectory"
- "Zip::File"
- "Method[check_entry_exists].ReturnValue"
- - "Zip::FileSystem::DirectoryIterator"
- "Zip::FileSystem::Dir"
- "Method[new].ReturnValue"
- - "Zip::FileSystem::DirectoryIterator"
- "Zip::FileSystem::Dir"
- "Method[open].Argument[block].Parameter[0]"
- - "Zip::FileSystem::File::Stat"
- "Zip::FileSystem::File"
- "Method[stat].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "ZipFileGenerator"
- "Method[recursively_deflate_directory].Parameter[0]"
- "path-injection"
- - "MainApp"
- "Method[open_zip].Parameter[0]"
- "path-injection"
- - "Zip::Entry"
- "Method[create_file].Parameter[0]"
- "path-injection"
- - "Zip::InputStream"
- "Method[get_io].Parameter[0]"
- "path-injection"
- - "Zip::FileSplit"
- "Method[split].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "ZipFileGenerator"
- "Method[put_into_archive]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[write_to_stream]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[write_e_o_c_d]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[write_64_e_o_c_d]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[write_64_e_o_c_d]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[write_64_e_o_c_d]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[write_64_eocd_locator]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[write_64_eocd_locator]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[unpack_64_e_o_c_d]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::CentralDirectory"
- "Method[unpack_e_o_c_d]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::NullEncrypter"
- "Method[encrypt]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::Entry"
- "Method[<=>]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::Entry"
- "Method[compression_method=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::Entry"
- "Method[file_type_is?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::Entry"
- "Method[write_c_dir_entry]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::DOSTime"
- "Method[dos_equals]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::NullDecrypter"
- "Method[decrypt]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::EntrySet"
- "Method[<<]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::EntrySet"
- "Method[delete]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::EntrySet"
- "Method[to_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::TraditionalEncrypter"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::TraditionalEncrypter"
- "Method[header]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::TraditionalEncrypter"
- "Method[data_descriptor]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::TraditionalEncrypter"
- "Method[data_descriptor]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Zip::TraditionalEncrypter"
- "Method[data_descriptor]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Zip::TraditionalDecrypter"
- "Method[decode]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::File"
- "Method[add]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::File"
- "Method[replace]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::InputStream"
- "Method[get_io]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::PassThruCompressor"
- "Method[<<]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::OutputStream"
- "Method[put_next_entry]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSplit"
- "Method[get_segment_size_for_split]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSplit"
- "Method[get_partial_zip_file_name]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSplit"
- "Method[get_partial_zip_file_name]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::FileSplit"
- "Method[put_split_signature]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "ExtraField::UniversalTime"
- "Method[atime=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ExtraField::UniversalTime"
- "Method[ctime=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ExtraField::UniversalTime"
- "Method[mtime=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ExtraField::Unknown"
- "Method[merge]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ExtraField::Zip64"
- "Method[merge]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::FileSystem::DirectoryIterator"
- "Method[seek]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSystem::File"
- "Method[expand_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSystem::File"
- "Method[dirname]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::FileSystem::File"
- "Method[unix_mode_cmp]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Zip::FileSystem::File"
- "Method[exists?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::FileSystem::File"
- "Method[directory?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::FileSystem::ZipFileNameMapper"
- "Method[expand_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSystem::ZipFileNameMapper"
- "Method[expand_to_entry]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::DOSTime::JRubyCMP"
- "Method[<=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::DOSTime::JRubyCMP"
- "Method[>=]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::IOExtras::AbstractInputStream"
- "Method[read]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::IOExtras::AbstractOutputStream"
- "Method[putc]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::IOExtras::FakeIO"
- "Method[kind_of?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::ExtraField::UniversalTime"
- "Method[atime=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::ExtraField::UniversalTime"
- "Method[ctime=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::ExtraField::UniversalTime"
- "Method[mtime=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::ExtraField::Unknown"
- "Method[merge]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::ExtraField::Zip64"
- "Method[merge]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::FileSystem::File::Stat"
- "Method[kind_of?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Zip::DecryptedIo!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::Deflater!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "Zip::Decompressor!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::Decompressor!"
- "Method[register]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::CentralDirectory!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::CompressionMethodError!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::DecompressionError!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ExtraField::NTFS!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::ExtraField::NTFS!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ExtraField::OldUnix!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::ExtraField::OldUnix!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::DestinationExistsError!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::EntryExistsError!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::EntryNameError!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::EntrySizeError!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::StreamingError!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ExtraField::IUnix!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::ExtraField::IUnix!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ExtraField::Zip64!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::ExtraField::Zip64!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSystem::Dir!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSystem::File!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::FileSystem::File::Stat!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::StreamableDirectory!"
- "Method[new]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "ZipFileGenerator!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Zip::Dirtyable!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Zip::Dirtyable!"
- "Method[new]"
- "Argument[dirty_on_create:]"
- "ReturnValue"
- "value"

1048
ruby/ql/lib/codeql/ruby/frameworks/models/sentry-ruby/model.yml Normal file
View File

File diff suppressed because it is too large Load Diff

8464
ruby/ql/lib/codeql/ruby/frameworks/models/sequel/model.yml Normal file
View File

File diff suppressed because it is too large Load Diff

331
ruby/ql/lib/codeql/ruby/frameworks/models/sidekiq/model.yml
View File

@@ -5,25 +5,16 @@
"data":
- - "Logger"
- "Sidekiq::Config"
- "Method[logger].ReturnValue"
- "Method[logger=].ReturnValue"
- - "Logger"
- "Sidekiq::Config"
- "Method[logger=].ReturnValue"
- "Method[logger].ReturnValue"
- - "Logger"
- "Sidekiq::Web::CsrfProtection"
- "Method[logger].ReturnValue"
- - "Hash"
- "Sidekiq::Metrics::Query::JobResult"
- "Method[series_avg].ReturnValue"
- - "Sidekiq::Client"
- "Sidekiq::Job::ClassMethods"
- "Method[build_client].ReturnValue"
- - "Sidekiq::Stats"
- "Sidekiq::WebHelpers"
- "Method[stats].ReturnValue"
- - "Sidekiq::Stats"
- "Sidekiq::Monitor::Status"
- "Method[stats].ReturnValue"
- - "Sidekiq::Config"
- "Sidekiq!"
- "Method[configure_server].Argument[block].Parameter[0]"
@@ -36,30 +27,42 @@
- - "Sidekiq::Config"
- "Sidekiq!"
- "Method[default_configuration].ReturnValue"
- - "Sidekiq::Config"
- "Sidekiq!"
- "Method[configure_embed].ReturnValue"
- - "Sidekiq::Client"
- "Sidekiq::Job::ClassMethods"
- "Method[build_client].ReturnValue"
- - "Sidekiq::Stats"
- "Sidekiq::Monitor::Status"
- "Method[stats].ReturnValue"
- - "Sidekiq::Stats"
- "Sidekiq::WebHelpers"
- "Method[stats].ReturnValue"
- - "Sidekiq::Embedded"
- "Sidekiq!"
- "Method[configure_embed].ReturnValue"
- - "Sidekiq::Logger"
- "Sidekiq::Config"
- "Method[logger].ReturnValue"
- - "Sidekiq::Logger"
- "Sidekiq!"
- "Method[logger].ReturnValue"
- - "Sidekiq::Logger"
- "Sidekiq::Component"
- "Method[logger].ReturnValue"
- - "Sidekiq::Logger"
- "Sidekiq::Job"
- "Method[logger].ReturnValue"
- - "Sidekiq::Logger"
- "Sidekiq!"
- "Method[logger].ReturnValue"
- - "Sidekiq::ProcessSet"
- "Sidekiq::Monitor::Status"
- "Method[process_set].ReturnValue"
- - "Sidekiq::ProcessSet"
- "Sidekiq::WebHelpers"
- "Method[processes].ReturnValue"
- - "Sidekiq::ProcessSet"
- "Sidekiq::WebHelpers"
- "Method[sorted_processes].ReturnValue"
- - "Sidekiq::ProcessSet"
- "Sidekiq::Monitor::Status"
- "Method[process_set].ReturnValue"
- - "Sidekiq::Process"
- "Sidekiq::ProcessSet!"
- "Method[[]].ReturnValue"
@@ -75,18 +78,18 @@
- - "Sidekiq::Middleware::Chain"
- "Sidekiq::Config"
- "Method[server_middleware].ReturnValue"
- - "Sidekiq::Middleware::Chain"
- "Sidekiq::Middleware::Chain"
- "Method[copy_for].ReturnValue"
- - "Sidekiq::Middleware::Chain"
- "Sidekiq::Middleware::Chain!"
- "Method[new].Argument[block].Parameter[0]"
- - "Sidekiq::Middleware::Chain"
- "Sidekiq!"
- "Method[configure_server].ReturnValue"
- - "Sidekiq::Middleware::Chain"
- "Sidekiq!"
- "Method[configure_client].ReturnValue"
- - "Sidekiq::Middleware::Chain"
- "Sidekiq::Middleware::Chain"
- "Method[copy_for].ReturnValue"
- - "Sidekiq::Middleware::Chain"
- "Sidekiq::Middleware::Chain!"
- "Method[new].Argument[block].Parameter[0]"
- - "Sidekiq::Rails::Reloader"
- "Sidekiq!"
- "Method[configure_server].ReturnValue"
@@ -113,6 +116,36 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Sidekiq::CLI"
- "Method[set_environment]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::Monitor::Status"
- "Method[delimit]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Monitor::Status"
- "Method[split_multiline]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Monitor::Status"
- "Method[tags_for]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Config"
- "Method[on]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Config"
- "Method[on]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Config"
- "Method[logger=]"
- "Argument[0]"
@@ -133,60 +166,25 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::Config"
- "Method[on]"
- - "Sidekiq::Web::CsrfProtection"
- "Method[logger]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Web::CsrfProtection"
- "Method[session]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Web::CsrfProtection"
- "Method[decode_token]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Metrics::Query::JobResult"
- "Method[add_hist]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Config"
- "Method[on]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq::CLI"
- "Method[set_environment]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::JobRetry"
- "Method[retry_attempts_from]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sidekiq::JobRetry"
- "Method[retry_attempts_from]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::JobRecord"
- "Method[deserialize_argument]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::JobRecord"
- "Method[parse]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::RedisClientAdapter"
- "Method[client_opts]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::RingBuffer"
- "Method[<<]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::TransactionAwareClient"
- "Method[push]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::LoggingUtils"
- "Method[local_level=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::WebHelpers"
- "Method[truncate]"
@@ -198,16 +196,16 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::WebHelpers"
- "Method[t]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebHelpers"
- "Method[t]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::WebHelpers"
- "Method[t]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebHelpers"
- "Method[busy_weights]"
- "Argument[0]"
@@ -220,12 +218,12 @@
- "taint"
- - "Sidekiq::WebHelpers"
- "Method[job_params]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebHelpers"
- "Method[job_params]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebHelpers"
@@ -263,21 +261,66 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Monitor::Status"
- "Method[delimit]"
- - "Sidekiq!"
- "Method[load_json]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Monitor::Status"
- "Method[split_multiline]"
- - "Sidekiq!"
- "Method[dump_json]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq!"
- "Method[strict_args!]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::RedisClientAdapter"
- "Method[client_opts]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::Metrics::Query::Result"
- "Method[prepend_bucket]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::JobRetry"
- "Method[retry_attempts_from]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::JobRetry"
- "Method[retry_attempts_from]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Monitor::Status"
- "Method[tags_for]"
- "value"
- - "Sidekiq::JobRecord"
- "Method[parse]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::JobRecord"
- "Method[deserialize_argument]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::RingBuffer"
- "Method[<<]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::TransactionAwareClient"
- "Method[push]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::LoggingUtils"
- "Method[local_level=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::Scheduled::Poller"
- "Method[poll_interval_average]"
- "Argument[0]"
@@ -288,21 +331,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Web::CsrfProtection"
- "Method[logger]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Web::CsrfProtection"
- "Method[session]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Web::CsrfProtection"
- "Method[decode_token]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Logger::Formatters::Pretty"
- "Method[call]"
- "Argument[0]"
@@ -323,16 +351,6 @@
- "Argument[3]"
- "ReturnValue"
- "taint"
- - "Sidekiq::Metrics::Query::Result"
- "Method[prepend_bucket]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sidekiq::Metrics::Query::JobResult"
- "Method[add_hist]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sidekiq::Job::Options::ClassMethods"
- "Method[sidekiq_retry_in]"
- "Argument[0]"
@@ -378,16 +396,16 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::JobRecord!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sidekiq::JobRecord!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sidekiq::JobRecord!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sidekiq::CurrentAttributes::Save!"
- "Method[new]"
- "Argument[0]"
@@ -438,18 +456,73 @@
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sidekiq!"
- "Method[load_json]"
- "Argument[0]"
- - "Sidekiq::WebRouter"
- "Method[route]"
- "Argument[2]"
- "ReturnValue"
- "taint"
- - "Sidekiq!"
- "Method[dump_json]"
- "Argument[0]"
- - "Sidekiq::WebRouter"
- "Method[route]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq!"
- "Method[strict_args!]"
- "Argument[0]"
- - "Sidekiq::WebRouter"
- "Method[get]"
- "Argument[1]"
- "ReturnValue"
- "value"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[get]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[delete]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[delete]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[head]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[head]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[post]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[post]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[put]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[put]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[patch]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sidekiq::WebRouter"
- "Method[patch]"
- "Argument[block]"
- "ReturnValue"
- "taint"

151
ruby/ql/lib/codeql/ruby/frameworks/models/sinatra/model.yml
View File

@@ -30,15 +30,15 @@
- - "Subclass"
- "Sinatra::Base!"
- "Method[new].Argument[block].Parameter[0]"
- - "Sinatra::IndifferentHash"
- "Sinatra::IndifferentHash"
- "Method[merge!].ReturnValue"
- - "Sinatra::IndifferentHash"
- "Sinatra::IndifferentHash"
- "Method[compact].ReturnValue"
- - "Sinatra::IndifferentHash"
- "Sinatra::IndifferentHash"
- "Method[merge].ReturnValue"
- - "Sinatra::IndifferentHash"
- "Sinatra::IndifferentHash"
- "Method[merge!].ReturnValue"
- - "Sinatra::IndifferentHash"
- "Sinatra::ConfigFile"
- "Method[config_for_env].ReturnValue"
@@ -121,6 +121,9 @@
- - "Sinatra::Runner"
- "Method[get_https_url].ReturnValue"
- "remote"
- - "Sinatra::Runner"
- "Method[get_url].ReturnValue"
- "remote"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
@@ -145,12 +148,12 @@
"pack": "codeql/ruby-all"
"data":
- - "OkJson"
- "Method[unquote]"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "OkJson"
- "Method[encode]"
- "Method[unquote]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -186,12 +189,12 @@
- "taint"
- - "OkJson"
- "Method[subst]"
- "Argument[1]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "OkJson"
- "Method[subst]"
- "Argument[0]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "OkJson"
@@ -224,28 +227,73 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::ShowExceptions"
- "Method[bad_request?]"
- - "Sinatra::Templates"
- "Method[compile_template]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sinatra::Namespace::NamespacedMethods"
- "Method[prefixed_path]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::IndifferentHash"
- "Method[replace]"
- "value"
- - "Sinatra::Namespace::NamespacedMethods"
- "Method[prefixed_path]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sinatra::Base!"
- "Method[force_encoding]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- "value"
- - "Sinatra::IndifferentHash"
- "Method[convert_key]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sinatra::IndifferentHash"
- "Method[replace]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::IndifferentHash"
- "Method[convert_value]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sinatra::Response"
- "Method[body=]"
- - "Sinatra::ConfigFile"
- "Method[config_for_env]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::ConfigFile"
- "Method[from_environment_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::Helpers::Stream"
- "Method[callback]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::Helpers::Stream"
- "Method[callback]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sinatra::Helpers"
- "Method[etag_matches?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sinatra::Helpers"
- "Method[mime_type]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sinatra::Helpers"
- "Method[body]"
- "Argument[0]"
- "ReturnValue"
- "value"
@@ -254,11 +302,6 @@
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sinatra::Helpers"
- "Method[body]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sinatra::Helpers"
- "Method[body]"
- "Argument[block]"
@@ -270,7 +313,7 @@
- "ReturnValue"
- "value"
- - "Sinatra::Helpers"
- "Method[mime_type]"
- "Method[content_type]"
- "Argument[0]"
- "ReturnValue"
- "value"
@@ -279,16 +322,16 @@
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sinatra::Helpers"
- "Method[content_type]"
- - "Sinatra::ShowExceptions"
- "Method[bad_request?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::Response"
- "Method[body=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sinatra::Helpers"
- "Method[etag_matches?]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Sinatra::Capture"
- "Method[capture]"
- "Argument[1]"
@@ -299,16 +342,6 @@
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sinatra::ConfigFile"
- "Method[config_for_env]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::ConfigFile"
- "Method[from_environment_key]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::Reloader"
- "Method[after_reload]"
- "Argument[0]"
@@ -324,11 +357,11 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sinatra::Templates"
- "Method[compile_template]"
- "Argument[1]"
- - "Rack::Protection::AuthenticityToken"
- "Method[decode_token]"
- "Argument[0]"
- "ReturnValue"
- "value"
- "taint"
- - "Rack::Protection::AuthenticityToken"
- "Method[unmask_token]"
- "Argument[0]"
@@ -349,11 +382,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Protection::AuthenticityToken"
- "Method[decode_token]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Protection::Base"
- "Method[session]"
- "Argument[0]"
@@ -404,38 +432,18 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::Helpers::Stream"
- "Method[callback]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Sinatra::Helpers::Stream"
- "Method[callback]"
- "Argument[block]"
- "ReturnValue"
- "taint"
- - "Sinatra::Namespace::NamespacedMethods"
- "Method[prefixed_path]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Sinatra::Namespace::NamespacedMethods"
- "Method[prefixed_path]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Protection::EncryptedCookie::Base64"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Rack::Protection::EncryptedCookie::Identity"
- "Method[decode]"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Protection::EncryptedCookie::Identity"
- "Method[encode]"
- "Method[decode]"
- "Argument[0]"
- "ReturnValue"
- "value"
@@ -459,11 +467,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Sinatra::Base!"
- "Method[force_encoding]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Rack::Protection::Encryptor!"
- "Method[base64_encode]"
- "Argument[0]"

62
ruby/ql/lib/codeql/ruby/frameworks/models/spring/model.yml
View File

@@ -41,6 +41,26 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Spring!"
- "Method[watch_method=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Spring::Server"
- "Method[rails_env_for]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Spring::Commands::RailsConsole"
- "Method[env]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::Commands::Rake"
- "Method[env]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::Application"
- "Method[state]"
- "Argument[0]"
@@ -51,23 +71,13 @@
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Spring::Server"
- "Method[rails_env_for]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Spring::OkJson"
- "Method[unquote]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[encode]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[valenc]"
- "Method[unquote]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -81,21 +91,26 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[subst]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[subst]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[subst]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[surrogate?]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[valenc]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::OkJson"
- "Method[arrenc]"
- "Argument[0]"
@@ -111,16 +126,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::Commands::RailsConsole"
- "Method[env]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::Commands::Rake"
- "Method[env]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Spring::Watcher::Abstract"
- "Method[on_debug]"
- "Argument[0]"
@@ -171,8 +176,3 @@
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Spring!"
- "Method[watch_method=]"
- "Argument[0]"
- "ReturnValue"
- "value"

67
ruby/ql/lib/codeql/ruby/frameworks/models/sqlite3-ruby/model.yml
View File

@@ -3,6 +3,9 @@
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "Array"
- "SQLite3::Database"
- "Method[execute2].Argument[block].Parameter[0]"
- - "Array"
- "SQLite3::ResultSet"
- "Method[columns].ReturnValue"
@@ -18,30 +21,42 @@
- - "Array"
- "SQLite3::Statement"
- "Method[get_metadata].ReturnValue"
- - "Array"
- - "SQLite3::Database"
- "SQLite3::Database"
- "Method[execute2].Argument[block].Parameter[0]"
- - "SQLite3::ResultSet"
- "SQLite3::Statement"
- "Method[execute].ReturnValue"
- "Method[transaction].Argument[block].Parameter[0]"
- - "SQLite3::Database"
- "SQLite3::Database!"
- "Method[new].Argument[block].Parameter[0]"
- - "SQLite3::ResultSet"
- "SQLite3::Database"
- "Method[query].ReturnValue"
- - "SQLite3::ResultSet"
- "SQLite3::Database"
- "Method[query].Argument[block].Parameter[0]"
- - "SQLite3::Translator"
- "SQLite3::Database"
- "Method[translator].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Database"
- "Method[prepare].ReturnValue"
- - "SQLite3::ResultSet"
- "SQLite3::Statement"
- "Method[execute].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Database"
- "Method[execute].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Database"
- "Method[query].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Database"
- "Method[query].Argument[block].Parameter[0]"
- - "SQLite3::Statement"
- "SQLite3::Database"
- "Method[prepare].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Database"
- "Method[execute2].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Statement"
- "Method[execute].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Pragmas"
- "Method[stats].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Pragmas"
- "Method[set_boolean_pragma].ReturnValue"
@@ -198,9 +213,6 @@
- - "SQLite3::Statement"
- "SQLite3::Pragmas"
- "Method[soft_heap_limit=].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Pragmas"
- "Method[stats].ReturnValue"
- - "SQLite3::Statement"
- "SQLite3::Pragmas"
- "Method[synchronous=].ReturnValue"
@@ -237,12 +249,9 @@
- - "SQLite3::Statement"
- "SQLite3::Pragmas"
- "Method[writable_schema=].ReturnValue"
- - "SQLite3::Database"
- - "SQLite3::Translator"
- "SQLite3::Database"
- "Method[transaction].Argument[block].Parameter[0]"
- - "SQLite3::Database"
- "SQLite3::Database!"
- "Method[new].Argument[block].Parameter[0]"
- "Method[translator].ReturnValue"
- - "TC_Integration_Aggregate::AccumulateAggregator"
- "SQLite3::Database"
- "Method[define_aggregator].Parameter[1]"
@@ -284,16 +293,6 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "SQLite3::Translator"
- "Method[add_translator]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "SQLite3::Translator"
- "Method[add_translator]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "SQLite3::Database"
- "Method[type_translation=]"
- "Argument[0]"
@@ -309,6 +308,16 @@
- "Argument[block]"
- "ReturnValue"
- "value"
- - "SQLite3::Translator"
- "Method[add_translator]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "SQLite3::Translator"
- "Method[add_translator]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "SQLite3::Database::FunctionProxy"
- "Method[[]=]"
- "Argument[1]"

112
ruby/ql/lib/codeql/ruby/frameworks/models/therubyracer/model.yml Normal file
View File

@@ -0,0 +1,112 @@
"extensions":
- "addsTo":
"extensible": "typeModel"
"pack": "codeql/ruby-all"
"data":
- - "V8::Array"
- "V8::Conversion::NativeObject"
- "Method[to_ruby].ReturnValue"
- - "V8::Function"
- "V8::Conversion::NativeObject"
- "Method[to_ruby].ReturnValue"
- - "V8::Object"
- "V8::Context"
- "Method[[]=].ReturnValue"
- - "V8::Object"
- "V8::Context"
- "Method[[]=].Parameter[1]"
- - "V8::Object"
- "V8::Context"
- "Method[enter].ReturnValue"
- - "V8::Object"
- "V8::Conversion::NativeObject"
- "Method[to_ruby].ReturnValue"
- - "V8::Context"
- "V8::Context!"
- "Method[new].Argument[block].Parameter[0]"
- - "V8::Context"
- "V8::Context!"
- "Method[current=].ReturnValue"
- - "V8::Error"
- "V8!"
- "Method[Error].ReturnValue"
- - "V8::Weak::Ref"
- "V8::Weak::WeakValueMap"
- "Method[[]=].ReturnValue"
- - "V8::Weak::WeakValueMap"
- "V8::Conversion::Identity"
- "Method[v8_idmap].ReturnValue"
- - "V8::Weak::WeakValueMap"
- "V8::Conversion::Identity"
- "Method[rb_idmap].ReturnValue"
- "addsTo":
"extensible": "sinkModel"
"pack": "codeql/ruby-all"
"data":
- - "V8::Context"
- "Method[load].Parameter[0]"
- "path-injection"
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "V8::Object"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "V8::Context"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "V8::Context"
- "Method[link]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "V8::Conversion::Identity"
- "Method[equate]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "V8::Conversion::Method::MethodCache"
- "Method[[]=]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "V8::Access::Invocation::Aritize"
- "Method[aritize]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "V8::Context!"
- "Method[current=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "V8::Conversion::Code::InvocationHandler!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "V8::Conversion::Constructor!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "V8::StackTrace!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "V8::Error!"
- "Method[new]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "V8::StackFrame!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"

15
ruby/ql/lib/codeql/ruby/frameworks/models/turbolinks-rails/model.yml Normal file
View File

@@ -0,0 +1,15 @@
"extensions":
- "addsTo":
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "Turbolinks::Redirection"
- "Method[visit_location_with_turbolinks]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Turbolinks::Redirection"
- "Method[store_turbolinks_location_in_session]"
- "Argument[0]"
- "ReturnValue"
- "value"

34
ruby/ql/lib/codeql/ruby/frameworks/models/tzinfo-data/model.yml
View File

@@ -26,18 +26,8 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "TZInfo::Data::TZDataRuleSet"
- "Method[add_rule]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "TZInfo::Data::TZDataRule"
- "Method[parse_letter]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "TZInfo::Data::TZDataZone"
- "Method[add_observance]"
- - "TZInfo::Data::TZDataParserUtils"
- "Method[quote_str]"
- "Argument[0]"
- "ReturnValue"
- "taint"
@@ -51,6 +41,21 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "TZInfo::Data::TZDataZone"
- "Method[add_observance]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "TZInfo::Data::TZDataRule"
- "Method[parse_letter]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "TZInfo::Data::TZDataRuleSet"
- "Method[add_rule]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "TZInfo::Data::TZDataFormat"
- "Method[expand]"
- "Argument[2]"
@@ -61,11 +66,6 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "TZInfo::Data::TZDataParserUtils"
- "Method[quote_str]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "TZInfo::Data::TZDataRules!"
- "Method[new]"
- "Argument[0]"

198
ruby/ql/lib/codeql/ruby/frameworks/models/unicorn/model.yml
View File

@@ -9,15 +9,15 @@
- - "Unicorn::HttpServer"
- "Unicorn::HttpServer"
- "Method[start].ReturnValue"
- - "Unicorn::TmpIO"
- "Unicorn::TeeInput"
- "Method[new_tmpio].ReturnValue"
- - "Unicorn::Worker"
- "Unicorn::HttpServer"
- "Method[worker_spawn].Parameter[0]"
- - "Unicorn::Worker"
- "Unicorn::HttpServer"
- "Method[worker_loop].Parameter[0]"
- - "Unicorn::TmpIO"
- "Unicorn::TeeInput"
- "Method[new_tmpio].ReturnValue"
- - "ConfigTable::BoolItem"
- "ConfigTable"
- "Method[add].ReturnValue"
@@ -162,11 +162,106 @@
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Unicorn::HttpServer"
- "Method[logger=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[check_client_connection=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[pid=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[client_body_buffer_size=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[e100_response_write]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Unicorn::Worker"
- "Method[==]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Unicorn::Worker"
- "Method[tick=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Installer::Shebang!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Unicorn::TeeInput"
- "Method[tee]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[add_config]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[set_config_default]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[declare_packages]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[add_bool_config]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[add_path_config]"
- "Argument[2]"
- "ReturnValue"
- "value"
- - "ConfigTable::PathItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::PackageSelectionItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[logger]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[early_hints]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[before_fork]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[before_fork]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[after_fork]"
- "Argument[1]"
@@ -197,16 +292,6 @@
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[before_fork]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[before_fork]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[before_exec]"
- "Argument[1]"
@@ -237,11 +322,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[early_hints]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::Configurator"
- "Method[listeners]"
- "Argument[0]"
@@ -322,61 +402,21 @@
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[check_client_connection=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[logger=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[pid=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[client_body_buffer_size=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpServer"
- "Method[e100_response_write]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Unicorn::StreamInput"
- "Method[read]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Unicorn::TeeInput"
- "Method[tee]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::Worker"
- "Method[==]"
- - "Unicorn::HttpResponse"
- "Method[append_header]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Unicorn::Worker"
- "Method[tick=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpResponse"
- "Method[append_header]"
- "Argument[1]"
- "ReturnValue"
- "taint"
- - "Unicorn::HttpResponse"
- "Method[append_header]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "Unicorn::HttpResponse"
- "Method[append_header]"
- "Argument[2]"
@@ -397,36 +437,11 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::PathItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::SelectItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "ConfigTable::PackageSelectionItem"
- "Method[check]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[add_config]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[set_config_default]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "ConfigTable::MetaConfigEnvironment"
- "Method[declare_packages]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::SocketHelper"
- "Method[accf_arg]"
- "Argument[0]"
@@ -443,12 +458,12 @@
- "ReturnValue"
- "value"
- - "Unicorn::HttpParser!"
- "Method[input_class=]"
- "Method[check_client_connection=]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "Unicorn::HttpParser!"
- "Method[check_client_connection=]"
- "Method[input_class=]"
- "Argument[0]"
- "ReturnValue"
- "value"
@@ -474,12 +489,12 @@
- "taint"
- - "ConfigTable::ExecItem!"
- "Method[new]"
- "Argument[block]"
- "Argument[3]"
- "ReturnValue"
- "value"
- - "ConfigTable::ExecItem!"
- "Method[new]"
- "Argument[3]"
- "Argument[block]"
- "ReturnValue"
- "value"
- - "ConfigTable::PackageSelectionItem!"
@@ -492,11 +507,6 @@
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Installer::Shebang!"
- "Method[new]"
- "Argument[1]"
- "ReturnValue"
- "value"
- - "Unicorn::OobGC!"
- "Method[new]"
- "Argument[0]"

28
ruby/ql/lib/codeql/ruby/frameworks/models/web-console/model.yml
View File

@@ -32,18 +32,28 @@
"extensible": "summaryModel"
"pack": "codeql/ruby-all"
"data":
- - "WebConsole::ExceptionMapper!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "WebConsole::ExceptionMapper!"
- "Method[find_binding]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "WebConsole::Evaluator"
- "Method[format_exception]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "WebConsole::Permissions"
- "Method[coerce_network_to_ipaddr]"
- - "WebConsole::WhinyRequest"
- "Method[whine_unless]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "WebConsole::WhinyRequest"
- "Method[whine_unless]"
- - "WebConsole::Permissions"
- "Method[coerce_network_to_ipaddr]"
- "Argument[0]"
- "ReturnValue"
- "value"
@@ -57,16 +67,6 @@
- "Argument[0]"
- "ReturnValue"
- "value"
- - "WebConsole::ExceptionMapper!"
- "Method[new]"
- "Argument[0]"
- "ReturnValue"
- "value"
- - "WebConsole::ExceptionMapper!"
- "Method[find_binding]"
- "Argument[0]"
- "ReturnValue"
- "taint"
- - "WebConsole::Middleware!"
- "Method[new]"
- "Argument[0]"