hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 21:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12493 from hmac/ar-sinks

Browse Source
This commit is contained in:
Harry Maclean
2023-03-15 07:59:07 +13:00
committed by GitHub
parent 959f93a766 d814e15a2f
commit aaeb8a0aa0
5 changed files with 114 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ruby/ql/lib/change-notes/2023-03-13-rails-sinks.md Normal file
View File

@@ -0,0 +1,6 @@
---
category: minorAnalysis
---
* The Active Record query methods `reorder` and `count_by_sql` are now recognised as SQL executions.
* Calls to `ActiveRecord::Connection#execute`, including those via subclasses, are now recognised as SQL executions.
* Data flow through `ActionController::Parameters#require` is now tracked properly.