338 Commits

Author	SHA1	Message	Date
Harry Maclean	9b998a39b4	Ruby: Add tags to GenerateModel query ... This allows the model editor to find this query in a more robust way than by file path.	2023-11-27 09:18:00 +00:00
Rasmus Wriedt Larsen	43d9d2ceb7	Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link ... JavaScript/Python/Ruby: Improve alert message for `*/weak-cryptographic-algorithm`.	2023-11-08 14:29:24 +01:00
Geoffrey White	e8a466a02c	Update dead link.	2023-11-07 09:26:07 +00:00
Alex Ford	f6ac63b259	Ruby: modgen - use FeatureEqualSourceSinkCallContext feature rather than late filtering for method context	2023-10-27 14:48:50 +01:00
Alex Ford	0818354ad7	Ruby: modgen - fix unbound variable	2023-10-27 11:46:09 +01:00
Max Schaefer	104700f6d3	Address review comment.	2023-10-27 10:19:28 +01:00
Alex Ford	5a1a3f0727	Ruby: modgen - deduplicate getAnyParameter logic	2023-10-26 17:45:47 +01:00
Alex Ford	86ba75cadf	Ruby: modgen - support self arguments	2023-10-26 17:42:46 +01:00
Alex Ford	6203887645	fixup	2023-10-26 17:38:43 +01:00
Alex Ford	24946c0dfd	Ruby: modgen - restrict flow summaries to public methods	2023-10-26 17:05:31 +01:00
Alex Ford	fef2932f56	Apply suggestions from code review ... Co-authored-by: Harry Maclean <hmac@github.com>	2023-10-26 17:04:51 +01:00
Max Schaefer	08cc8b8e80	Autoformat.	2023-10-26 15:36:06 +01:00
Max Schaefer	f42bd28ca9	Port changes to Ruby.	2023-10-26 15:06:45 +01:00
Alex Ford	16c5edd3ca	Ruby: add a query and script for autogenerating typeModel and summaryModel data extensions entries	2023-10-25 15:52:02 +01:00
Asger F	89bd00a4ec	Ruby: port queries to ConfigSig-style	2023-10-11 10:06:19 +02:00
Erik Krogh Kristensen	7e7852eff6	Merge pull request #13641 from erik-krogh/multi-char ... JS/RB: write qhelp for `incomplete-multi-character-sanitization`	2023-09-14 14:48:30 +02:00
Alex Ford	4a01de13ef	Ruby: avoid toString in query warning	2023-09-07 14:54:50 +01:00
Alex Ford	13300a2e2f	Ruby: un-private PathGraph imports	2023-09-07 14:24:46 +01:00
Alex Ford	0d7d5a35c9	Ruby: Use a newtype instead of DataFlow::FlowState for code-injection	2023-09-07 13:39:10 +01:00
Alex Ford	98851736d6	Revert "Ruby: configsig rb/tainted-format-string" ... This reverts commit f5860cb4818dc3c07eeb6731e75bf5df203dd48f.	2023-09-03 17:20:06 +01:00
Alex Ford	bf6837cca0	Revert "Ruby: configsig rb/http-to-file-access" ... This reverts commit e77ba1589663905c952cdb643ab66885760b27bd.	2023-09-03 17:20:06 +01:00
Alex Ford	73ed5696f3	Ruby: configsig rb/xxe	2023-09-03 17:20:06 +01:00
Alex Ford	956207b7d9	Ruby: configsig rb/meta/tainted-nodes	2023-09-03 17:20:06 +01:00
Alex Ford	cdc788b162	Ruby: configsig rb/hardcoded-credentials	2023-09-03 17:20:06 +01:00
Alex Ford	4d1684e37b	Ruby: configsig rb/overly-permissive-file	2023-09-03 17:20:06 +01:00
Alex Ford	7445fc43f9	Ruby: configsig rb/regexp-injection	2023-09-03 17:20:05 +01:00
Alex Ford	494b7b3fdf	Ruby: configsig rb/polynomial-redos	2023-09-03 17:20:05 +01:00
Alex Ford	04d3d04317	Ruby: configsig rb/regex/badly-anchored-regexp	2023-09-03 17:20:05 +01:00
Alex Ford	42cd58695d	Ruby: configsig rb/url-redirection	2023-09-03 17:20:05 +01:00
Alex Ford	f79796a644	Ruby: configsig rb/shell-command-constructed-from-input	2023-09-03 17:20:05 +01:00
Alex Ford	f03f670312	Ruby: configsig rb/html-constructed-from-input	2023-09-03 17:20:05 +01:00
Alex Ford	8ad6c72ba2	Ruby: configsig rb/unsafe-deserialization	2023-09-03 17:20:05 +01:00
Alex Ford	461bc0d359	Ruby: configsig rb/unsafe-code-construction	2023-09-03 17:20:05 +01:00
Alex Ford	0a73ebdbee	Ruby: configsig rb/tainted-format-string	2023-09-03 17:20:05 +01:00
Alex Ford	f5e433940f	Ruby: renames for rb/stored-xss	2023-09-03 17:20:05 +01:00
Alex Ford	030aae5693	Ruby: configsig rb/stack-trace-exposure	2023-09-03 17:20:05 +01:00
Alex Ford	bf1cb33be3	Ruby: configsig rb/sql-injection	2023-09-03 17:20:05 +01:00
Alex Ford	ba8ff0710d	Ruby: configsig rb/request-forgery	2023-09-03 17:20:05 +01:00
Alex Ford	df9173502e	Ruby: configsig rb/sensitive-get-query	2023-09-03 17:20:05 +01:00
Alex Ford	593d9a48d4	Ruby: configsig rb/reflected-xss	2023-09-03 17:20:05 +01:00
Alex Ford	ad2bbfb265	Ruby: configsig rb/path-injection	2023-09-03 17:20:05 +01:00
Alex Ford	867e47bcdd	Ruby: renames for rb/log-injection	2023-09-03 17:20:04 +01:00
Alex Ford	d46eceb5f4	Ruby: configsig rb/kernel-open	2023-09-03 17:20:04 +01:00
Alex Ford	a8ad0d8ff5	Ruby: renames for rb/insecure-download	2023-09-03 17:20:04 +01:00
Alex Ford	c973fc1274	Ruby: configsig rb/http-to-file-access	2023-09-03 17:20:04 +01:00
Alex Ford	377570f361	Ruby: configsig rb/command-line-injection	2023-09-03 17:20:04 +01:00
Alex Ford	b1a49ddb0d	Ruby: configsig rb/code-injection	2023-09-03 17:20:04 +01:00
Alex Ford	6fa267a820	Ruby: configsig rb/clear-text-storage-sensitive-data	2023-09-03 17:20:04 +01:00
Alex Ford	2a2f21d3a9	Ruby: configsig rb/clear-text-logging-sensitive-data	2023-09-03 17:20:04 +01:00
Alex Ford	ce35d6921f	Ruby: configsig rb/hardcoded-data-interpreted-as-code	2023-08-31 16:20:18 +01:00