14 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	09d4fe21e8	Ruby: Update more expected output.	2023-04-26 13:37:07 +02:00
Tom Hvitved	b816c79248	Ruby: Include all assignments in data flow paths	2023-03-24 10:09:30 +01:00
erik-krogh	8f0c0f3c17	add support for super calls to Kernel	2022-12-06 14:25:51 +01:00
erik-krogh	66946ebf6a	add Kernel methods as sinks to path-injection	2022-12-06 14:09:15 +01:00
erik-krogh	85cd7f9121	add model for Dir.glob and other Dir methods	2022-10-24 12:05:26 +02:00
Harry Maclean	24a10aa5ff	Recognise send_file as a FileSystemAccess ... This method is available in ActionController actions, and sends the file at the given path to the client.	2022-09-28 12:14:22 +13:00
erik-krogh	063c76b6d1	apply suggestions from review	2022-09-13 10:52:23 +02:00
erik-krogh	79a048968e	make the alert messages of taint-tracking queries more consistent	2022-09-07 12:22:50 +02:00
erik-krogh	7e0bd5bde4	update expected output of tests	2022-08-22 21:41:47 +02:00
thiggy1342	b078430faf	add Zip::File.new query to tests	2022-06-16 00:51:50 +00:00
thiggy1342	0832e299f2	move archive api path traversal tests to cwe-022	2022-06-15 01:39:47 +00:00
Asger Feldthaus	e6a3747656	Ruby: add test for ActiveStorage.Filename.new	2022-03-01 14:08:21 +01:00
Tom Hvitved	400802c5ce	Ruby: Add flow summaries for Array/Enumerable methods	2021-12-22 15:56:20 +01:00
Nick Rolfe	86da3c2db3	Add rb/path-injection query	2021-10-20 12:31:16 +01:00