mirror of
https://github.com/github/codeql.git
synced 2026-04-25 16:55:19 +02:00
Ruby: Add test for AR PersistentWriteAccesses
This commit is contained in:
@@ -1,5 +1,7 @@
|
||||
import codeql.ruby.controlflow.CfgNodes
|
||||
import codeql.ruby.frameworks.ActiveRecord
|
||||
import codeql.ruby.Concepts
|
||||
import codeql.ruby.DataFlow
|
||||
|
||||
query predicate activeRecordModelClasses(ActiveRecordModelClass cls) { any() }
|
||||
|
||||
@@ -18,3 +20,7 @@ query predicate activeRecordModelInstantiations(
|
||||
) {
|
||||
i.getClass() = cls
|
||||
}
|
||||
|
||||
query predicate persistentWriteAccesses(PersistentWriteAccess w, DataFlow::Node value) {
|
||||
w.getValue() = value
|
||||
}
|
||||
|
||||
@@ -67,6 +67,22 @@ class BazController < BarController
|
||||
def yet_another_handler
|
||||
Admin.delete_by(params[:admin_condition])
|
||||
end
|
||||
|
||||
def create1
|
||||
Admin.create(params)
|
||||
end
|
||||
|
||||
def create2
|
||||
Admin.create(name: params[:name])
|
||||
end
|
||||
|
||||
def update1
|
||||
Admin.update(params)
|
||||
end
|
||||
|
||||
def update2
|
||||
Admin.update(name: params[:name])
|
||||
end
|
||||
end
|
||||
|
||||
class AnnotatedController < ActionController::Base
|
||||
|
||||
Reference in New Issue
Block a user