hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

format QL

Browse Source
This commit is contained in:
Alex Ford
2021-06-04 16:12:39 +01:00
parent 57c04266e3
commit f8a77b9854
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ql/src/codeql_ruby/frameworks/ActiveRecord.qll
View File

@@ -104,7 +104,9 @@ class ActiveRecordSqlExecutionRange extends SqlExecution::Range {
ExprCfgNode sql;
ActiveRecordSqlExecutionRange() {
exists(PotentiallyUnsafeSqlExecutingMethodCall mc | this.asExpr().getNode() = mc.getSqlFragmentSinkArgument())
exists(PotentiallyUnsafeSqlExecutingMethodCall mc |
this.asExpr().getNode() = mc.getSqlFragmentSinkArgument()
)
}
override DataFlow::Node getSql() { result.asExpr() = sql }

4
ql/test/library-tests/frameworks/ActiveRecord.ql
View File

@@ -7,4 +7,6 @@ query predicate activeRecordSqlExecutionRanges(ActiveRecordSqlExecutionRange ran
query predicate activeRecordModelClassMethodCalls(ActiveRecordModelClassMethodCall call) { any() }
query predicate potentiallyUnsafeSqlExecutingMethodCall(PotentiallyUnsafeSqlExecutingMethodCall call) { any() }
query predicate potentiallyUnsafeSqlExecutingMethodCall(PotentiallyUnsafeSqlExecutingMethodCall call) {
any()
}