Ruby: Fix StringSubstitutionCall charpred

Some missing parens meant this class targeted way more things than intended.
2026-05-02 04:05:14 +02:00 · 2024-05-01 16:13:39 +01:00
parent 397e641f2f
commit f7fc2e0b00
2 changed files with 10 additions and 3 deletions
--- a/ruby/ql/test/query-tests/security/cwe-116/IncompleteSanitization/tst.rb
+++ b/ruby/ql/test/query-tests/security/cwe-116/IncompleteSanitization/tst.rb
@@ -268,3 +268,8 @@ def bad_path_sanitizer(p1, p2)
  p1.sub! "/../", "" # NOT OK
  p2.sub  "/../", "" # NOT OK
 end
+
+def each_line_sanitizer(p1)
+  p1.each_line("\n") do |l| # OK - does no sanitization
+  end
+end