7 Commits

Author	SHA1	Message	Date
Alex Ford	76864a82be	remove an incorrect test case	2021-09-15 20:50:46 +01:00
Alex Ford	3445a6a5e7	fix flow steps from controller instance var assignement to view read access	2021-09-15 20:50:46 +01:00
Alex Ford	b993723595	remove spurious ivar -> locals hash mapping (actionview/controller)	2021-09-15 20:50:46 +01:00
Alex Ford	3430a46440	fix some local variable mappings between view and controller	2021-09-15 20:50:46 +01:00
Alex Ford	b264a05288	Update ql/lib/codeql/ruby/security/ReflectedXSSCustomizations.qll ... Co-authored-by: Harry Maclean <hmac@github.com>	2021-09-15 20:50:46 +01:00
Alex Ford	d71dd3f6c7	rb/reflected-xss	2021-09-15 20:50:46 +01:00
Harry Maclean	87253032e2	Add a query for URL redirect vulnerabilities ... This query finds instances of CWE-601: Redirection to Untrusted Site. The structure is copied from a query of the same name in the Python library. We add customisations specific to `ActionController`.	2021-09-03 13:17:14 +01:00