12 Commits

Author	SHA1	Message	Date
Tom Hvitved	978a816f11	Ruby: Track types in data flow	2025-01-06 13:26:10 +01:00
Tom Hvitved	f287216060	Update expected test output	2024-09-24 14:21:38 +02:00
Anders Schack-Mulligen	7cc8fd00aa	Ruby: Update expected output (uninteresting).	2024-04-12 09:20:35 +02:00
Anders Schack-Mulligen	35a3aa0a09	Ruby: Add empty provenance column to expected files.	2024-02-09 11:32:08 +01:00
Tom Hvitved	e258324960	Ruby: Allow for implicit array reads at all sinks during taint tracking	2023-09-14 09:40:05 +02:00
Tom Hvitved	48e2dcfa35	Ruby: Reimplement flow through captured variables using field flow	2023-09-06 11:00:55 +02:00
Anders Schack-Mulligen	09d4fe21e8	Ruby: Update more expected output.	2023-04-26 13:37:07 +02:00
Tom Hvitved	b816c79248	Ruby: Include all assignments in data flow paths	2023-03-24 10:09:30 +01:00
Harry Maclean	2e2fcd49bf	Ruby: Consider Object#inspect a log sanitizer ... The behaviour of `Object#inspect` depends on whether it has been overridden by a subclass, but it will typically produce output on a single line. Calling `inspect` on a String will replace newlines with `\n`, which is then safe for interpolation into a log line.	2022-11-16 13:46:51 +13:00
erik-krogh	063c76b6d1	apply suggestions from review	2022-09-13 10:52:23 +02:00
erik-krogh	79a048968e	make the alert messages of taint-tracking queries more consistent	2022-09-07 12:22:50 +02:00
Alex Ford	44c4b9ba5c	Ruby: add rb/log-injection test cases	2022-08-10 16:17:37 +01:00