32 Commits

Author	SHA1	Message	Date
Nick Rolfe	d99b5510e5	Merge pull request #219 from github/regex ... Add regexp parser and exponential ReDoS query	2021-06-30 17:23:29 +01:00
Alex Ford	31cbf818ab	fix rb/sql-injection FPs due to not accounting for overridden ActiveRecord methods	2021-06-29 13:54:15 +01:00
Nick Rolfe	ba7021086b	Merge remote-tracking branch 'origin/main' into regex	2021-06-25 15:00:26 +01:00
Nick Rolfe	bee94757dd	Add query test for ReDoS.ql, ported from JS	2021-06-25 12:51:35 +01:00
Alex Ford	9883a9b606	update SqlInjection tests	2021-06-24 18:12:26 +01:00
Alex Ford	d62f4f5bd4	Address review comments	2021-06-24 18:12:26 +01:00
Alex Ford	12e4c9ee90	update SqlInjection tests	2021-06-24 18:12:25 +01:00
Alex Ford	5386c776b3	Implement rb/sql-injection	2021-06-24 18:12:25 +01:00
Alex Ford	f74dff560b	Merge pull request #187 from github/hardcoded-credentials ... Add rb/hardcoded-credentials query	2021-06-10 16:12:32 +01:00
Alex Ford	e26afe91b5	move rb/hardcoded-credential alert location to the source	2021-06-07 14:53:04 +01:00
Alex Ford	5d79a8cec0	account for keyword args in rb/hardcoded-credentials and simplify query	2021-06-07 14:49:49 +01:00
Alex Ford	8a3ffb6dca	add missing toString	2021-06-04 13:25:03 +01:00
Alex Ford	b2d36babc4	report rb/weak-file-permission alerts at source rather than sink and improve alert message	2021-06-04 13:10:18 +01:00
Alex Ford	fdd4f7f616	attempt to use typetracker in rb/hardcoded-credentials	2021-06-01 12:22:04 +01:00
Alex Ford	f1303e0ced	remove WIP files	2021-06-01 12:22:04 +01:00
Alex Ford	4fdd072603	WIP: HardcodedCredentials query	2021-06-01 12:22:04 +01:00
Alex Ford	3c0f20cec8	Merge pull request #170 from github/weak-file-permissions ... Add `rb/overly-permissive-file` query	2021-05-14 17:04:15 +01:00
Alex Ford	6bd2e4e4b7	Merge pull request #175 from github/loc-summary-queries-1 ... Summary queries for total LOC and user-code LOC	2021-05-14 15:51:45 +01:00
Alex Ford	49d9bb798c	revamp the diagnostics tests	2021-05-11 19:53:00 +01:00
Alex Ford	d1d8cff915	tests for some more diagnostics queries	2021-05-11 19:14:22 +01:00
Alex Ford	de497dd1ba	tests for NumberOfFiles* summary queries	2021-05-11 19:14:22 +01:00
Alex Ford	e5896047d8	summary LOC query tests	2021-05-06 19:54:23 +01:00
Alex Ford	2c8a4f833f	make rb/overly-permissive-file a proper path-problem	2021-04-29 19:11:39 +01:00
Alex Ford	0a6dc6f150	update WeakFilePermissions.expected	2021-04-28 16:31:07 +01:00
Alex Ford	e5862a942f	WIP rb/overly-permissive-file query	2021-04-27 21:22:17 +01:00
Alex Ford	c6b6a83501	extend FLines* tests	2021-04-21 10:42:53 +01:00
Alex Ford	a1c91e28da	move FLines* tests to a common directory	2021-04-21 10:34:58 +01:00
Alex Ford	50a0f282bf	add basic tests for FLines queries	2021-04-20 17:36:16 +01:00
Calum Grant	855d190800	Ruby: Test local data flow	2021-03-09 10:25:24 +00:00
Calum Grant	5b4bf584a1	Ruby: Update qltest output for new select format	2021-03-09 10:20:23 +00:00
Calum Grant	ca497479c2	Ruby: Finish the test for UseDetect	2021-03-04 15:44:05 +00:00
Calum Grant	522bcff79d	Ruby: Initial test case	2021-03-04 15:38:09 +00:00