1049 Commits

Author	SHA1	Message	Date
Harry Maclean	71d703f2a5	Ruby: Add ActiveSupport extensions	2022-10-28 11:31:55 +13:00
Harry Maclean	cb37a0e835	Ruby: Add summaries for Hash#deep_merge(!)	2022-10-28 11:31:55 +13:00
Harry Maclean	3dea1d6a60	Ruby: Add flow summary for Hash#except!	2022-10-28 11:31:55 +13:00
Harry Maclean	0454642220	Ruby: Model deep_dup and presence	2022-10-28 11:31:55 +13:00
Harry Maclean	9f260853ac	Ruby: Model more ActiveSupport string extensions	2022-10-28 11:31:55 +13:00
Harry Maclean	b389d50943	Ruby: Identify safe_constantize	2022-10-28 11:31:54 +13:00
Rasmus Wriedt Larsen	adf109b624	Merge branch 'main' into inline-fail-tag	2022-10-27 13:42:32 +02:00
Rasmus Wriedt Larsen	6d43db43dd	Ruby: Fix tag missing from getARelevantTag	2022-10-27 09:12:06 +02:00
thiggy1342	952ad6ea46	Merge branch 'main' into expand-ruby-ssrf-sinks-faraday-connection-new	2022-10-24 09:52:24 -04:00
Asger F	bcfe4ece6f	Merge pull request #10918 from asgerf/rb/constant-compound-assignment ... Ruby: handle compound constant-assignment	2022-10-24 14:07:28 +02:00
Asger F	cac2e2e2e4	Merge pull request #10928 from asgerf/rb/assumed-global-const ... Ruby: assume some global constants are defined	2022-10-24 14:06:34 +02:00
Arthur Baars	b3855b089a	Ruby: some more tests	2022-10-22 14:15:29 +02:00
Arthur Baars	ccaa12998d	Ruby: desugar compound constant-assignments	2022-10-22 01:11:35 +02:00
Nick Rolfe	269c27757d	Ruby: include value-preserving flow in localTaintStep	2022-10-21 16:17:11 +01:00
Nick Rolfe	5319216c18	Ruby: add test of TaintTracking::localFlowStep	2022-10-21 16:04:04 +01:00
Asger F	84ae17dcbb	Ruby: ensure Object is a transitive superclass	2022-10-21 15:18:59 +02:00
Tom Hvitved	4422327c00	Ruby: Call-context sensitivity for singleton method calls	2022-10-21 11:48:25 +02:00
Asger F	db58e3357b	Ruby: allow speculative container qname resolution	2022-10-21 11:44:11 +02:00
Tom Hvitved	6feff7e3ed	Ruby: Add more data-flow call sensitivity tests	2022-10-21 09:36:34 +02:00
Asger F	d26b0892cf	Ruby: also add an AST test	2022-10-21 09:23:21 +02:00
Asger F	038bdecad7	Ruby: add test with compound assignment to a constant	2022-10-21 09:20:03 +02:00
thiggy1342	244a3329e0	Merge branch 'main' into expand-ruby-ssrf-sinks-faraday-connection-new	2022-10-20 16:37:57 -04:00
thiggy1342	4c3e3e442a	Add Faraday::Connection.new as sink for SSRF query	2022-10-20 20:32:08 +00:00
Asger F	8c2c28dd56	Ruby: add test showing missing superclass edge	2022-10-20 15:56:58 +02:00
Tom Hvitved	faaead682e	Ruby: Block for steps into self parameters in trackModuleAccess	2022-10-20 13:00:12 +02:00
Tom Hvitved	bda98261cc	Ruby: Add more call graph tests	2022-10-20 12:59:32 +02:00
erik-krogh	c13e8e4f48	Merge branch 'main' into formatTaint	2022-10-20 10:46:16 +02:00
erik-krogh	e29bf8ced2	Merge branch 'main' into html_safe	2022-10-18 19:49:37 +02:00
Tom Hvitved	61b9065135	Ruby: Fix syntax error in a test	2022-10-18 16:49:32 +02:00
erik-krogh	e47e20c5e7	remove use of HtmlSafeCall from tests	2022-10-18 10:43:24 +02:00
erik-krogh	bb4bc55c6a	update expected output	2022-10-17 15:52:21 +02:00
Arthur Baars	f7ff2cdc0d	Merge branch 'main' into actiondispatch-response	2022-10-17 13:22:17 +02:00
Harry Maclean	aa6c433529	Ruby: Update test fixture ... This change is due to a8fdda65fb.	2022-10-17 09:44:32 +13:00
Harry Maclean	0e6322d673	Ruby: Restrict XSS header sinks ... Not all header writes are relevant to XSS. Restrict these to just content-type and access-control-allow-origin.	2022-10-17 09:34:44 +13:00
Harry Maclean	73ca595b56	Ruby: Model ActionDispatch::Response	2022-10-17 08:17:37 +13:00
Arthur Baars	ae0c9b76e0	Merge pull request #10843 from aibaars/fix-self ... Ruby: fix self variables in blocks	2022-10-15 00:48:14 +02:00
Arthur Baars	a8fdda65fb	Ruby: fix self variables in blocks	2022-10-14 16:02:39 +02:00
Asger F	8cb4f230d8	Merge branch 'main' into rb/fix-spurious-singleton-calls	2022-10-14 15:52:38 +02:00
Asger F	1bd3d29409	Ruby: workaround issue with 'def self.method' in a block	2022-10-14 15:07:33 +02:00
Asger F	17a246b321	Ruby: more uninteresting test updates	2022-10-14 13:59:52 +02:00
Asger F	8228730634	Ruby: fix regression for methods in singleton classes	2022-10-14 11:57:35 +02:00
Asger F	30f7380f74	Ruby: Add regression test for lost calls	2022-10-14 11:49:55 +02:00
Harry Maclean	7d23170fb2	Merge pull request #10602 from hmac/hmac/actiondispatch-request ... Ruby: Model ActionDispatch::Request	2022-10-14 22:17:20 +13:00
Asger F	a06cc30f05	Ruby: fix some more spurious call edges	2022-10-14 10:11:22 +02:00
Asger F	b1dadc224c	Ruby: uninteresting test output update	2022-10-14 10:10:39 +02:00
Asger F	ae71828fc4	Ruby: add more tests for singleton up/down calls	2022-10-14 10:09:59 +02:00
Asger F	789f591de4	Ruby: add another spurious call edge test	2022-10-14 10:09:57 +02:00
Asger F	1476efbe2c	Ruby: restrict to a use of 'self' in singleton methods	2022-10-14 10:09:11 +02:00
Asger F	329ab9156a	Ruby: add test showing spurious call	2022-10-14 10:07:34 +02:00
Harry Maclean	e6dc27a7b5	Add content_mime_type, fix env/filtered_env	2022-10-14 19:49:22 +13:00