hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Model Argument[1] of ActiveRecord from

Browse Source
This commit is contained in:
Joe Farebrother
2024-03-08 14:04:01 +00:00
parent 2896bfbd9f
commit dbd33d1cf0
4 changed files with 86 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ruby/ql/lib/change-notes/2024-03-08-activerecord-from.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* The second argument, `subquery_name`, of the `ActiveRecord::QueryMethods::from` method, is now recognized as an sql injection sink.