21 Commits

Author	SHA1	Message	Date
Tom Hvitved	978a816f11	Ruby: Track types in data flow	2025-01-06 13:26:10 +01:00
Michael Nebel	138e294dae	Ruby: Update all test util paths to point to the new location.	2024-12-12 13:54:37 +01:00
Tom Hvitved	5b5ca05e87	Ruby: Post-processing query for inline test expectations	2024-10-29 13:35:33 +01:00
Tom Hvitved	04de315e0e	Ruby: Deprecate models-as-data CSV interface	2024-04-12 13:40:14 +02:00
Anders Schack-Mulligen	2c43d0c5a4	Ruby: Update expected output (interesting).	2024-04-12 09:20:38 +02:00
Anders Schack-Mulligen	35a3aa0a09	Ruby: Add empty provenance column to expected files.	2024-02-09 11:32:08 +01:00
Tom Hvitved	48e2dcfa35	Ruby: Reimplement flow through captured variables using field flow	2023-09-06 11:00:55 +02:00
Anders Schack-Mulligen	09d4fe21e8	Ruby: Update more expected output.	2023-04-26 13:37:07 +02:00
Tom Hvitved	b816c79248	Ruby: Include all assignments in data flow paths	2023-03-24 10:09:30 +01:00
erik-krogh	8f0c0f3c17	add support for super calls to Kernel	2022-12-06 14:25:51 +01:00
erik-krogh	66946ebf6a	add Kernel methods as sinks to path-injection	2022-12-06 14:09:15 +01:00
erik-krogh	85cd7f9121	add model for Dir.glob and other Dir methods	2022-10-24 12:05:26 +02:00
Harry Maclean	24a10aa5ff	Recognise send_file as a FileSystemAccess ... This method is available in ActionController actions, and sends the file at the given path to the client.	2022-09-28 12:14:22 +13:00
erik-krogh	063c76b6d1	apply suggestions from review	2022-09-13 10:52:23 +02:00
erik-krogh	79a048968e	make the alert messages of taint-tracking queries more consistent	2022-09-07 12:22:50 +02:00
erik-krogh	7e0bd5bde4	update expected output of tests	2022-08-22 21:41:47 +02:00
thiggy1342	b078430faf	add Zip::File.new query to tests	2022-06-16 00:51:50 +00:00
thiggy1342	0832e299f2	move archive api path traversal tests to cwe-022	2022-06-15 01:39:47 +00:00
Asger Feldthaus	e6a3747656	Ruby: add test for ActiveStorage.Filename.new	2022-03-01 14:08:21 +01:00
Tom Hvitved	400802c5ce	Ruby: Add flow summaries for Array/Enumerable methods	2021-12-22 15:56:20 +01:00
Nick Rolfe	86da3c2db3	Add rb/path-injection query	2021-10-20 12:31:16 +01:00