18 Commits

Author	SHA1	Message	Date
Alex Ford	13300a2e2f	Ruby: un-private PathGraph imports	2023-09-07 14:24:46 +01:00
Alex Ford	f24102e0e7	Ruby: configsig rb/weak-params	2023-09-03 17:20:06 +01:00
turbo	4ec401a3f6	Tag all security queries in supported languages' experimental directories with an experimental tag	2022-12-14 17:15:50 +01:00
Asger F	b4b34cc994	Ruby: port part of ActionController model	2022-10-31 13:33:41 +01:00
Tom Hvitved	007ab2b7ce	Ruby: Do not expose AST layer through ruby.qll	2022-09-13 19:59:56 +02:00
thiggy1342	0c0ba925a7	this one should have no tag	2022-07-22 18:44:03 +00:00
thiggy1342	f39ca1aad2	correct cwe tagged	2022-07-22 18:36:25 +00:00
thiggy1342	486a394a7f	Update ruby/ql/src/experimental/weak-params/WeakParams.ql ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-21 17:26:09 -04:00
thiggy1342	9586259706	style tweak for checking multiple method names	2022-07-19 00:29:30 +00:00
thiggy1342	7facc63699	remove predicate	2022-07-12 22:59:48 +00:00
thiggy1342	5d3232c614	refactor to use data flow	2022-07-08 18:53:24 +00:00
thiggy1342	6ea1aad5fc	more style fixes	2022-06-23 22:57:51 -04:00
thiggy1342	ce2edd4b28	style tweaks	2022-06-24 02:46:48 +00:00
thiggy1342	ca074e2275	add qhelp file	2022-06-24 02:19:06 +00:00
thiggy1342	45dd38df6e	polish up dataflow query	2022-06-24 01:50:20 +00:00
thiggy1342	e838b83f5f	attempt to introduce dataflow tracking	2022-06-23 02:21:47 +00:00
thiggy1342	53729f99c5	restrict findings to just controller classes	2022-06-21 20:28:29 +00:00
thiggy1342	83b720d730	first draft of weak params query	2022-06-21 19:28:53 +00:00