408 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	2c43d0c5a4	Ruby: Update expected output (interesting).	2024-04-12 09:20:38 +02:00
Anders Schack-Mulligen	7cc8fd00aa	Ruby: Update expected output (uninteresting).	2024-04-12 09:20:35 +02:00
Tom Hvitved	5f8eb7b138	Merge pull request #16110 from hvitved/dataflow/param-flow-no-expects-content ... Data flow: Block flow at `expectsContents` nodes in `parameterValueFlow`	2024-04-09 11:26:24 +02:00
Tom Hvitved	2d4cf55c87	Merge pull request #15985 from hvitved/ruby/phi-barrier-guards ... Ruby: Extend barrier guards to handle phi inputs	2024-04-03 15:22:39 +02:00
Tom Hvitved	7871fb8ce6	Data flow: Block flow at expectsContents nodes in parameterValueFlow	2024-04-03 15:19:34 +02:00
Tom Hvitved	137594cf36	Ruby: Add regression test	2024-04-03 15:19:34 +02:00
Tom Hvitved	90779f4413	Ruby: Extend barrier guards to handle phi inputs	2024-03-20 10:02:20 +01:00
Tom Hvitved	0f0acc0428	Ruby: Add barrier guard flow tests	2024-03-20 09:25:20 +01:00
Harry Maclean	219cd4e415	Merge pull request #14426 from hmac/hmac-ar-scopes ... Ruby: Track flow into ActiveRecord scopes	2024-03-19 14:19:14 +00:00
Harry Maclean	7e479e3c8e	Ruby: Fix Hash#keys flow summary	2024-03-19 13:47:45 +00:00
Harry Maclean	32b80f8cb1	Ruby: Add tests for hash flow	2024-03-19 08:38:14 +00:00
Tom Hvitved	8899d66132	Merge pull request #15734 from hvitved/dataflow/hidden-subpath ... Data flow: Account for hidden `subpath` wrappers	2024-03-18 20:17:16 +01:00
Joe Farebrother	4177c38ed4	Merge pull request #15907 from joefarebrother/ruby-uploaded-file ... Ruby: Model ActiveDispatch::Http::UploadedFile	2024-03-18 14:02:33 +00:00
Tom Hvitved	e53357d376	Update expected test output	2024-03-18 14:49:32 +01:00
Tom Hvitved	e7b00a7b42	Ruby: Add post-update argument nodes for string constants	2024-03-15 10:47:39 +01:00
Joe Farebrother	b4ed77343b	Add change note + fix qldoc	2024-03-14 22:25:36 +00:00
Joe Farebrother	3e61be1b6a	Add test cases	2024-03-14 22:25:36 +00:00
Tom Hvitved	24e35f6f3d	Update expected test output	2024-03-08 10:00:43 +01:00
Tom Hvitved	e793a1e9fe	Ruby: Add variable capture spurious flow test	2024-03-08 10:00:42 +01:00
Tom Hvitved	bd7b2c4cc6	Update expected output	2024-03-05 10:44:13 +01:00
Joe Farebrother	0b7b7ea1b8	Add test cases and improve controller model	2024-03-01 09:57:24 +00:00
Tom Hvitved	914a605a87	Ruby: Rework hidden synthetic data-flow nodes	2024-02-27 15:33:58 +01:00
Tom Hvitved	994d990f37	Ruby: Add another data flow test	2024-02-27 15:33:58 +01:00
Joe Farebrother	386defc3c7	Update test output	2024-02-26 11:21:03 +00:00
Tom Hvitved	23869fc8e6	Ruby: Fix bug in allowParameterReturnInSelf	2024-02-22 09:43:52 +01:00
Tom Hvitved	007d08ea63	Ruby: Add another variable capture test	2024-02-22 09:39:01 +01:00
Tom Hvitved	1ea7717714	Capture flow: Take overwrites in nested scopes into account	2024-02-09 14:49:23 +01:00
Tom Hvitved	0c43ad45b4	Ruby: Add another captured variable data flow test	2024-02-09 14:48:36 +01:00
Anders Schack-Mulligen	35a3aa0a09	Ruby: Add empty provenance column to expected files.	2024-02-09 11:32:08 +01:00
Tom Hvitved	8972133d4b	Merge pull request #15498 from hvitved/ruby/ctx-sensitivity-test ... Ruby: Add another dataflow test	2024-02-01 12:46:53 +01:00
Tom Hvitved	792f302bd4	Ruby: Add another dataflow test	2024-02-01 10:52:06 +01:00
Harry Maclean	4cfdf8b7a3	Ruby: Add test case for view without ERB template	2024-01-30 20:30:59 +01:00
Tom Hvitved	d2d017dd64	Ruby: Model flow through ViewComponent render methods	2024-01-30 20:30:58 +01:00
Tom Hvitved	817a2b71a8	Add more tests	2024-01-30 20:30:58 +01:00
Harry Maclean	5b3a2b35b7	Update expected file	2024-01-30 20:30:58 +01:00
Harry Maclean	75a37486c9	Add WIP query for erb flow	2024-01-30 20:30:58 +01:00
Harry Maclean	bf3b86b402	Add test for erb flow	2024-01-30 20:30:58 +01:00
Tom Hvitved	2d95ac9d5f	Merge pull request #15468 from hvitved/ruby/ctx-sensitivity-rework	2024-01-30 20:27:43 +01:00
Harry Maclean	f230e618a3	Ruby: Update tests	2024-01-30 09:43:56 +00:00
Tom Hvitved	503d2f7b95	Ruby: Rework mayBenefitFromCallContext	2024-01-30 09:57:29 +01:00
Tom Hvitved	295198744b	Ruby: Handle captured yield calls	2024-01-10 14:25:15 +01:00
Tom Hvitved	55be4c39ef	Ruby: Add data flow call sensitivity test	2024-01-10 14:25:12 +01:00
Tom Hvitved	f90201eb56	Data flow: Remove column from mayBenefitFromCallContext	2024-01-09 11:34:43 +01:00
Tom Hvitved	25a676ac6a	Ruby: Model simple pattern matching as value steps instead of taint steps	2023-12-14 20:18:24 +01:00
Tom Hvitved	0e81577269	Ruby: Use FlowSummaryImpl from dataflow pack	2023-12-10 11:25:43 +01:00
Tom Hvitved	dde83b6415	Merge pull request #14709 from hvitved/ruby/shared-type-tracking ... Ruby: Adopt shared type tracking library	2023-12-05 20:12:06 +01:00
Tom Hvitved	9eaebfcf60	Merge pull request #14859 from hvitved/ruby/missing-flow-tests ... Ruby: Add tests illustrating missing flow	2023-11-24 14:57:15 +01:00
Tom Hvitved	8ccce5891d	Ruby: Add tests illustrating missing flow	2023-11-24 14:28:04 +01:00
Harry Maclean	288fbfd2ec	Ruby: Add test for missing block flow	2023-11-22 09:59:55 +00:00
Tom Hvitved	6ce8e0510f	Ruby: Adopt shared type tracking library	2023-11-20 16:03:24 +01:00