731 Commits

Author	SHA1	Message	Date
Alex Ford	39af2d2870	Ruby: configsig rb/user-controlled-file-decompression	2023-09-03 17:20:06 +01:00
Alex Ford	cdc788b162	Ruby: configsig rb/hardcoded-credentials	2023-09-03 17:20:06 +01:00
Alex Ford	4d1684e37b	Ruby: configsig rb/overly-permissive-file	2023-09-03 17:20:06 +01:00
Alex Ford	b6d12f8b1c	Ruby: configsig rb/zip-slip	2023-09-03 17:20:05 +01:00
Alex Ford	ebf2a2e1f5	Ruby: configsig rb/unicode-bypass-validation	2023-09-03 17:20:05 +01:00
Alex Ford	7445fc43f9	Ruby: configsig rb/regexp-injection	2023-09-03 17:20:05 +01:00
Alex Ford	494b7b3fdf	Ruby: configsig rb/polynomial-redos	2023-09-03 17:20:05 +01:00
Alex Ford	04d3d04317	Ruby: configsig rb/regex/badly-anchored-regexp	2023-09-03 17:20:05 +01:00
Alex Ford	77f3a70376	Ruby: renames for rb/xpath-injection	2023-09-03 17:20:05 +01:00
Alex Ford	42cd58695d	Ruby: configsig rb/url-redirection	2023-09-03 17:20:05 +01:00
Alex Ford	f79796a644	Ruby: configsig rb/shell-command-constructed-from-input	2023-09-03 17:20:05 +01:00
Alex Ford	f03f670312	Ruby: configsig rb/html-constructed-from-input	2023-09-03 17:20:05 +01:00
Alex Ford	8ad6c72ba2	Ruby: configsig rb/unsafe-deserialization	2023-09-03 17:20:05 +01:00
Alex Ford	461bc0d359	Ruby: configsig rb/unsafe-code-construction	2023-09-03 17:20:05 +01:00
Alex Ford	3e23a6e021	Ruby: configsig rb/server-side-template-injection	2023-09-03 17:20:05 +01:00
Alex Ford	0a73ebdbee	Ruby: configsig rb/tainted-format-string	2023-09-03 17:20:05 +01:00
Alex Ford	f5e433940f	Ruby: renames for rb/stored-xss	2023-09-03 17:20:05 +01:00
Alex Ford	030aae5693	Ruby: configsig rb/stack-trace-exposure	2023-09-03 17:20:05 +01:00
Alex Ford	bf1cb33be3	Ruby: configsig rb/sql-injection	2023-09-03 17:20:05 +01:00
Alex Ford	ba8ff0710d	Ruby: configsig rb/request-forgery	2023-09-03 17:20:05 +01:00
Alex Ford	df9173502e	Ruby: configsig rb/sensitive-get-query	2023-09-03 17:20:05 +01:00
Alex Ford	593d9a48d4	Ruby: configsig rb/reflected-xss	2023-09-03 17:20:05 +01:00
Alex Ford	ad2bbfb265	Ruby: configsig rb/path-injection	2023-09-03 17:20:05 +01:00
Alex Ford	867e47bcdd	Ruby: renames for rb/log-injection	2023-09-03 17:20:04 +01:00
Alex Ford	eb34bbbfd2	Ruby: renames for rb/ldap-injection	2023-09-03 17:20:04 +01:00
Alex Ford	d46eceb5f4	Ruby: configsig rb/kernel-open	2023-09-03 17:20:04 +01:00
Alex Ford	a8ad0d8ff5	Ruby: renames for rb/insecure-download	2023-09-03 17:20:04 +01:00
Alex Ford	c973fc1274	Ruby: configsig rb/http-to-file-access	2023-09-03 17:20:04 +01:00
Alex Ford	2536f1a0cd	Ruby: configsig rb/user-controlled-bypass	2023-09-03 17:20:04 +01:00
Alex Ford	377570f361	Ruby: configsig rb/command-line-injection	2023-09-03 17:20:04 +01:00
Alex Ford	b1a49ddb0d	Ruby: configsig rb/code-injection	2023-09-03 17:20:04 +01:00
Alex Ford	6fa267a820	Ruby: configsig rb/clear-text-storage-sensitive-data	2023-09-03 17:20:04 +01:00
Alex Ford	2a2f21d3a9	Ruby: configsig rb/clear-text-logging-sensitive-data	2023-09-03 17:20:04 +01:00
Alex Ford	ce35d6921f	Ruby: configsig rb/hardcoded-data-interpreted-as-code	2023-08-31 16:20:18 +01:00
Brandon Stewart	56f0387613	Merge branch 'main' into add-cwe-208	2023-08-29 13:09:59 -04:00
Dave Bartolomeo	3343b78015	Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3 ... Post-release preparation for codeql-cli-2.14.3	2023-08-28 13:34:10 -04:00
github-actions[bot]	3eba77421a	Post-release preparation for codeql-cli-2.14.3	2023-08-28 15:53:49 +00:00
Alex Ford	9957e2683b	Merge pull request #13313 from maikypedia/maikypedia/ldap-improper-auth ... Ruby: Add Improper LDAP Authentication query (CWE-287)	2023-08-25 20:52:34 +01:00
Maiky	17565cde75	Add JWT Security Queries	2023-08-25 21:28:53 +02:00
Maiky	ffd618d6cc	Revert "Add "" and nil as sources" ... This reverts commit 664c1eba72.	2023-08-25 15:23:55 +02:00
Maiky	664c1eba72	Add "" and nil as sources	2023-08-22 18:10:33 +02:00
github-actions[bot]	098dfb4242	Release preparation for version 2.14.3	2023-08-18 14:48:15 +00:00
Maiky	5f502ec6bb	rename change-note	2023-08-16 15:32:53 +02:00
Brandon Stewart	01577dac32	format document	2023-08-10 13:59:47 +00:00
Brandon Stewart	b899b648e5	Update ruby/ql/src/experimental/cwe-208/UnsafeHmacComparison.ql ... Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>	2023-08-10 09:21:16 -04:00
Brandon Stewart	7882cf0bf0	Update ruby/ql/src/experimental/cwe-208/UnsafeHmacComparison.ql ... Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>	2023-08-10 09:21:02 -04:00
Brandon Stewart	74567041a7	remove pathgraph	2023-08-09 19:51:07 +00:00
Brandon Stewart	cca4c35cf8	add pathgraph	2023-08-09 19:23:21 +00:00
Brandon Stewart	7f07422a5d	Merge branch 'main' into add-cwe-208	2023-08-09 14:52:51 -04:00
Brandon Stewart	07d5beca34	run format document	2023-08-09 18:51:55 +00:00