Alex Ford
|
977ceb89fd
|
Ruby: rack - remove PotentialResponseNode#getAStatusCode
|
2023-06-13 12:42:46 +01:00 |
|
Alex Ford
|
af1ca7fec7
|
Update ruby/ql/lib/codeql/ruby/frameworks/rack/internal/App.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2023-06-13 12:37:31 +01:00 |
|
Alex Ford
|
b4620042a5
|
Ruby: fix use of deprecated predicate
|
2023-06-08 12:09:22 +01:00 |
|
Alex Ford
|
397a809426
|
Merge remote-tracking branch 'origin/main' into rb/rack-redirect
|
2023-06-08 12:07:57 +01:00 |
|
Alex Ford
|
21b4f885a6
|
ruby: fix qldoc
|
2023-06-08 12:01:42 +01:00 |
|
Alex Ford
|
c531b94594
|
Ruby: add a change note for rack redirect support
|
2023-06-08 11:59:10 +01:00 |
|
Alex Ford
|
22b9ab43c6
|
Merge pull request #13259 from alexrford/rb/actiondispatch-refactor
Ruby: Refactor and slightly expand `ActionDispatch` modelling
|
2023-06-08 11:08:36 +01:00 |
|
Tom Hvitved
|
cee70883f0
|
Merge pull request #12964 from hvitved/ruby/remove-synth-returns
Ruby: Remove canonical return nodes
|
2023-06-08 10:07:48 +02:00 |
|
Alex Ford
|
0a7ae58710
|
Ruby: revert to simpler Rack PotentialResponseNode def and use TypeBackTracker to track instances
|
2023-06-07 16:30:53 +01:00 |
|
Alex Ford
|
a5d8db6317
|
Ruby: fix qldoc
|
2023-06-07 15:55:28 +01:00 |
|
Alex Ford
|
57508b2b3b
|
ruby: Limit rack PotentialResponseNode to things that look like they occur in a rack application
|
2023-06-07 15:55:05 +01:00 |
|
Erik Krogh Kristensen
|
6ba7f9a238
|
Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp
delete old deprecations
|
2023-06-07 13:00:57 +02:00 |
|
Tom Hvitved
|
88c5700c24
|
Ruby: Use CallGraphConstruction in call graph construction
|
2023-06-07 09:02:03 +02:00 |
|
Tom Hvitved
|
4bf124bffe
|
Ruby/Python: Add CallGraphConstruction module for recursive type-tracking based call graph construction
|
2023-06-07 09:02:03 +02:00 |
|
Alex Ford
|
c95cf5ad6f
|
Merge pull request #13062 from maikypedia/maikypedia/sqli-sink
Ruby: Add MySQL as SQL Injection Sink
|
2023-06-02 17:06:35 +01:00 |
|
Erik Krogh Kristensen
|
219ec9d05d
|
Merge pull request #13127 from erik-krogh/polReDoS
ReDoS: revert new superlinear algorithm.
|
2023-06-02 16:10:24 +02:00 |
|
Jeroen Ketema
|
5f64354a70
|
Merge pull request #13353 from jketema/expecation
Fix typo in spelling of expectation
|
2023-06-02 12:29:49 +02:00 |
|
erik-krogh
|
ac9ede4ec0
|
add change-notes
|
2023-06-02 11:58:11 +02:00 |
|
erik-krogh
|
c3e57382f7
|
Ruby: fix compilation
|
2023-06-02 11:58:08 +02:00 |
|
erik-krogh
|
44b6366586
|
delete old deprecations
|
2023-06-02 11:58:08 +02:00 |
|
Jeroen Ketema
|
7b17b92aca
|
Fix typo in spelling of expectation
|
2023-06-02 10:36:11 +02:00 |
|
Alex Ford
|
6fa9e13a2e
|
Ruby: update TaintStep output
|
2023-06-01 16:27:20 +01:00 |
|
Alex Ford
|
606d601923
|
qlformat
|
2023-06-01 16:26:05 +01:00 |
|
Alex Ford
|
d09f6d318c
|
Merge branch 'main' into maikypedia/sqli-sink
|
2023-06-01 15:02:44 +01:00 |
|
Alex Ford
|
40cf09996a
|
Merge pull request #13066 from maikypedia/maikypedia/sqli-sink-2
Ruby: Add Sequel as SQL Injection Sink
|
2023-06-01 15:01:38 +01:00 |
|
Erik Krogh Kristensen
|
96a720cfa0
|
Merge pull request #13285 from erik-krogh/redoshelp
ReDoS: fix whitespace in the samples in ReDoS.qhelp
|
2023-06-01 15:53:58 +02:00 |
|
Alex Ford
|
b62a02f0ad
|
ruby: remove unused field
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
23e22799a9
|
ruby: rack - modelling -> modeling
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
24635df1a3
|
ruby: add some qldoc for rack
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
40da7d45c2
|
ruby: make a predicate private
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
4905a70e21
|
Ruby: update rack test output
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
19664879c8
|
ruby: slightly expand a TODO
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
a5a15f3804
|
Ruby: restructure rack model
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
b2958f87b2
|
ruby: rack - add redirect responses
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
c3ab867595
|
ruby: start restructuring rack
|
2023-06-01 14:01:40 +01:00 |
|
Alex Ford
|
f8d2cbbe79
|
ruby: rack responses implement are HTTP responses
|
2023-06-01 14:01:39 +01:00 |
|
Alex Ford
|
c87c266871
|
ruby: add Rack::ResponseNode#getAStatusCode
|
2023-06-01 14:01:39 +01:00 |
|
Alex Ford
|
e7e0cf5cb3
|
ruby: add Rack::ResponseNode class
|
2023-06-01 14:01:39 +01:00 |
|
Alex Ford
|
7d943c7621
|
Ruby: update test output
|
2023-06-01 13:50:32 +01:00 |
|
Alex Ford
|
4794066d3c
|
Merge branch 'main' into maikypedia/sqli-sink-2
|
2023-06-01 13:04:54 +01:00 |
|
Maiky
|
7579f182ad
|
Add requested changes
|
2023-06-01 11:00:35 +02:00 |
|
Maiky
|
13ce6a6d8e
|
Update Frameworks.qll
|
2023-06-01 00:53:01 +02:00 |
|
Arthur Baars
|
c211b704f3
|
Merge pull request #13272 from github/post-release-prep/codeql-cli-2.13.3
Post-release preparation for codeql-cli-2.13.3
|
2023-05-31 15:33:12 +02:00 |
|
Michael Nebel
|
2266e28583
|
Merge pull request #13262 from michaelnebel/flowsummary/refactorgetcomponentstack
C#: Re-factor getComponent.
|
2023-05-31 08:22:44 +02:00 |
|
Arthur Baars
|
490d22d123
|
Merge remote-tracking branch 'upstream/main' into post-release-prep/codeql-cli-2.13.3
|
2023-05-30 21:31:28 +02:00 |
|
Arthur Baars
|
d91fa2d038
|
Ruby: add print-cfg query
|
2023-05-30 17:30:04 +02:00 |
|
Asger F
|
3831dc7785
|
Merge pull request #13288 from asgerf/rb/super-and-flow-through
Ruby: two bug fixes
|
2023-05-26 15:04:52 +02:00 |
|
Asger F
|
cfaa27ab5d
|
Ruby: change note
|
2023-05-26 14:44:00 +02:00 |
|
yoff
|
af1f4c30fb
|
Merge pull request #13299 from asgerf/rb/meta-query-summarised-callable-sites
Ruby/Python: add meta-queries for calls to summarised callables
|
2023-05-26 13:27:56 +02:00 |
|
Arthur Baars
|
e0466900ad
|
Merge pull request #12992 from Sim4n6/ruby-UBV
[Ruby] Add Unicode Bypass Validation query, test and help file
|
2023-05-26 13:00:21 +02:00 |
|