29 Commits

Author	SHA1	Message	Date
Tom Hvitved	55492ef348	Ruby: Update expected test output after rebase	2021-12-22 15:56:20 +01:00
Tom Hvitved	400802c5ce	Ruby: Add flow summaries for Array/Enumerable methods	2021-12-22 15:56:20 +01:00
Tom Hvitved	27f786b41e	Merge pull request #7442 from hvitved/ruby/dataflow/keyword-params ... Ruby: Data flow for keyword arguments/parameters	2021-12-22 15:23:22 +01:00
Tom Hvitved	1e27ddf7c7	Ruby: Data flow for keyword arguments/parameters	2021-12-17 15:42:29 +01:00
Nick Rolfe	a4da528812	Ruby: query to find user-controlled bypass of sensitive actions	2021-12-10 11:41:09 +00:00
Tom Hvitved	5735bb698d	Ruby: Hide desugared nodes in data-flow paths	2021-12-08 09:00:16 +01:00
Nick Rolfe	05415768c9	Merge remote-tracking branch 'origin/main' into nickrolfe/regexp_g_anchor	2021-12-02 12:07:13 +00:00
Arthur Baars	ec0bd24b64	Update diagnostic tests	2021-11-25 12:55:50 +01:00
Erik Krogh Kristensen	87a1ccd428	Merge branch 'main' into getRubyInSync	2021-11-23 20:20:37 +01:00
Nick Rolfe	1a90b388a9	Merge remote-tracking branch 'origin/main' into nickrolfe/regex_injection	2021-11-23 15:42:05 +00:00
Alex Ford	055641e684	Merge pull request #7062 from github/ruby/rails-csrf ... Ruby: Add `rb/csrf-protection-disabled` query	2021-11-23 13:46:42 +00:00
Erik Krogh Kristensen	b2e40ac603	fix typo in test ... Co-authored-by: Nick Rolfe <nickrolfe@github.com>	2021-11-23 13:09:22 +01:00
Nick Rolfe	e5f473052d	Ruby: add Regexp.{compile,quote} to regex injection test	2021-11-23 11:05:41 +00:00
Nick Rolfe	752b126862	Merge remote-tracking branch 'origin/main' into nickrolfe/regex_injection	2021-11-22 17:05:27 +00:00
Alex Ford	68c3c16ab3	Ruby: enable forgery protection checks for development environments	2021-11-22 15:00:32 +00:00
Nick Rolfe	f63c768d9f	Ruby: parse \G, \b, and \B anchors as special characters, not escapes	2021-11-19 14:20:51 +00:00
Harry Maclean	ac20eafecc	Add qhelp for Ruby SSRF	2021-11-19 11:28:08 +00:00
Harry Maclean	2bba31eb02	Update metadata of Ruby SSRF query	2021-11-19 11:28:08 +00:00
Harry Maclean	dc464879a2	Add a query for server-side request forgery	2021-11-19 11:28:08 +00:00
Erik Krogh Kristensen	ee858d840e	get ReDoSUtil in sync for ruby	2021-11-18 16:49:34 +01:00
Erik Krogh Kristensen	1cca377e7d	Merge pull request #6561 from erik-krogh/htmlReg ... JS/Py/Ruby: add a bad-tag-filter query	2021-11-18 09:39:13 +01:00
Tom Hvitved	34fdf11b4b	Ruby: Update expected test output	2021-11-10 15:11:13 +01:00
Alex Ford	25da904314	test cases for rb/csrf-protection-disabled	2021-11-04 19:56:56 +00:00
Nick Rolfe	11154a9409	Ruby: add regex injection query	2021-10-27 15:58:12 +01:00
Erik Krogh Kristensen	97264b5dda	add the bad tag filter query to ruby	2021-10-26 15:25:12 +02:00
Tom Hvitved	f020b2e437	Merge pull request #335 from github/hmac/self-flow	2021-10-22 19:14:20 +02:00
Harry Maclean	356828cd51	Update stored XSS fixture ... The change to `self` modelling finds more true positives in this query.	2021-10-20 13:30:51 +01:00
Nick Rolfe	86da3c2db3	Add rb/path-injection query	2021-10-20 12:31:16 +01:00
Arthur Baars	976daddd36	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00