Alex Ford
|
c95cf5ad6f
|
Merge pull request #13062 from maikypedia/maikypedia/sqli-sink
Ruby: Add MySQL as SQL Injection Sink
|
2023-06-02 17:06:35 +01:00 |
|
Erik Krogh Kristensen
|
219ec9d05d
|
Merge pull request #13127 from erik-krogh/polReDoS
ReDoS: revert new superlinear algorithm.
|
2023-06-02 16:10:24 +02:00 |
|
Jeroen Ketema
|
5f64354a70
|
Merge pull request #13353 from jketema/expecation
Fix typo in spelling of expectation
|
2023-06-02 12:29:49 +02:00 |
|
Jeroen Ketema
|
7b17b92aca
|
Fix typo in spelling of expectation
|
2023-06-02 10:36:11 +02:00 |
|
Alex Ford
|
6fa9e13a2e
|
Ruby: update TaintStep output
|
2023-06-01 16:27:20 +01:00 |
|
Alex Ford
|
d09f6d318c
|
Merge branch 'main' into maikypedia/sqli-sink
|
2023-06-01 15:02:44 +01:00 |
|
Alex Ford
|
7d943c7621
|
Ruby: update test output
|
2023-06-01 13:50:32 +01:00 |
|
Alex Ford
|
4794066d3c
|
Merge branch 'main' into maikypedia/sqli-sink-2
|
2023-06-01 13:04:54 +01:00 |
|
Arthur Baars
|
e0466900ad
|
Merge pull request #12992 from Sim4n6/ruby-UBV
[Ruby] Add Unicode Bypass Validation query, test and help file
|
2023-05-26 13:00:21 +02:00 |
|
Alex Ford
|
baabd2d1fa
|
Merge pull request #12832 from maikypedia/maikypedia/pg-sqli
Ruby: Add SQL Injection Sinks
|
2023-05-26 11:36:17 +01:00 |
|
Alex Ford
|
609319da20
|
ruby: update TaintStep.ql test output
|
2023-05-25 17:53:01 +01:00 |
|
Asger F
|
6d1a4451fb
|
Ruby: update a test expectation
|
2023-05-24 10:15:51 +02:00 |
|
Maiky
|
8dca585207
|
Expected
|
2023-05-23 20:04:34 +02:00 |
|
Maiky
|
ad5355a04a
|
Pg Library, change note and Frameworks.qll
|
2023-05-23 19:49:03 +02:00 |
|
Sim4n6
|
90c174de4e
|
Updated the .expected file accordingly
|
2023-05-23 17:36:50 +01:00 |
|
erik-krogh
|
c7e21ee9ae
|
add really long regex as a test-case
|
2023-05-23 09:56:06 +02:00 |
|
Sim4n6
|
f7f0564e36
|
added one more test
|
2023-05-20 18:00:27 +01:00 |
|
Sim4n6
|
d11cb9195c
|
Use of CGI.escapeHTML() in test samples
|
2023-05-20 12:57:50 +01:00 |
|
Tom Hvitved
|
826b6219a0
|
Ruby: Include self parameters in type tracking flow-through logic
|
2023-05-15 16:02:33 +02:00 |
|
Tom Hvitved
|
3cdb27725a
|
Ruby: Add more call graph tests
|
2023-05-15 16:02:33 +02:00 |
|
Kasper Svendsen
|
e6ca3fe272
|
Ruby: Enable implicit this warnings
|
2023-05-10 13:03:39 +02:00 |
|
Kasper Svendsen
|
6b8a7c2f6f
|
Ruby: Make implicit this receivers explicit
|
2023-05-10 13:03:39 +02:00 |
|
Tom Hvitved
|
2f95af8ef2
|
Ruby: Remove self edges
|
2023-05-08 10:26:01 +02:00 |
|
Maiky
|
3960853af0
|
CWE-089 Add Sequel SQL Injection Sink
|
2023-05-07 23:56:56 +02:00 |
|
Maiky
|
6a3d995b35
|
Add Mysql2 as SQL Injection Sink
|
2023-05-06 12:25:25 +02:00 |
|
Mathias Vorreiter Pedersen
|
09ba9a74ce
|
Merge pull request #12959 from MathiasVP/identity-consistency-check
DataFlow: Add an "identity-step" consistency check
|
2023-05-05 10:03:20 +01:00 |
|
Sim4n6
|
1247403d43
|
Updated expected results file
|
2023-05-04 08:56:45 +01:00 |
|
Mathias Vorreiter Pedersen
|
77001a070b
|
Merge branch 'main' into identity-consistency-check
|
2023-05-03 22:01:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
924854c6dc
|
Ruby: Accept consistency changes.
|
2023-05-03 20:32:33 +01:00 |
|
Alex Ford
|
e7213e92cf
|
Merge remote-tracking branch 'origin/main' into rb/sqlite3
|
2023-05-03 15:18:07 +01:00 |
|
Alex Ford
|
6e6eee2dab
|
Ruby: add test case for instance variable flow with sqlite3
|
2023-05-03 15:16:16 +01:00 |
|
Alex Ford
|
82c025020d
|
Merge remote-tracking branch 'origin/main' into maikypedia/ruby-ssti
|
2023-05-02 16:18:41 +01:00 |
|
Alex Ford
|
a571bc64ac
|
ruby: regenerate TemplateInjection.expected
|
2023-05-02 16:14:20 +01:00 |
|
Sim4n6
|
019b85beb6
|
Add Unicode Bypass Validation query, test and help file
|
2023-05-02 15:36:39 +01:00 |
|
Maiky
|
5d15ec99c8
|
Change expected file to new
|
2023-05-02 09:26:41 +02:00 |
|
Anders Schack-Mulligen
|
09d4fe21e8
|
Ruby: Update more expected output.
|
2023-04-26 13:37:07 +02:00 |
|
Anders Schack-Mulligen
|
90f84bb516
|
Ruby: Update expected output.
|
2023-04-26 13:08:16 +02:00 |
|
Asger F
|
f3b14e13b2
|
Merge pull request #12841 from asgerf/rb/api-graph-class-nodes
Ruby: add API node representing a module/class object
|
2023-04-21 10:59:51 +02:00 |
|
Alex Ford
|
9dc04f30ac
|
Ruby: model sqlite3
|
2023-04-20 15:47:14 +01:00 |
|
Peter Stöckli
|
2f268b309b
|
Ruby: improve non-constant-kernel-open, freeze called on constant
|
2023-04-18 11:24:01 +02:00 |
|
Peter Stöckli
|
0a6bb3f7ce
|
Ruby: improve non-constant-kernel-open, no FP's on open without arguments
|
2023-04-18 10:10:36 +02:00 |
|
Asger F
|
8c0c335daf
|
Ruby: update test output
|
2023-04-17 12:47:23 +02:00 |
|
Maiky
|
820db43945
|
Add ERB Template Injection Sink
|
2023-04-13 17:21:31 +02:00 |
|
Asger F
|
c699afd07f
|
Ruby: instantiate NetHttpRequest even if body is not accessed
|
2023-03-31 12:56:09 +02:00 |
|
Asger F
|
504a0f8112
|
Ruby: Add test where response body is not referenced
|
2023-03-31 12:55:49 +02:00 |
|
Asger F
|
209aebad61
|
Ruby: Update HttpClients.ql not assume all predicates have results
|
2023-03-31 11:12:45 +02:00 |
|
Arthur Baars
|
cd53c77e23
|
Merge pull request #12670 from alexrford/mergeback-rc/3.9
Merge `rc/3.9` back into `main`
|
2023-03-28 10:49:08 +02:00 |
|
Asger F
|
32bab0b8b2
|
Merge pull request #12654 from asgerf/rb/always-resolve-toplevel-namespace
RB: always resolve toplevel namespaces to their locally qualified name
|
2023-03-28 09:54:59 +02:00 |
|
Tom Hvitved
|
e3799adbe0
|
Merge pull request #12612 from hvitved/ruby/print-ast-desugar-reorder
Ruby: Order synthetic children in PrintAST based on their index instead of location
|
2023-03-28 09:13:03 +02:00 |
|
Erik Krogh Kristensen
|
d3c3f2dc90
|
Merge pull request #12628 from erik-krogh/betterReDoS
ReDoS: better super-linear algorithm
|
2023-03-27 15:26:49 +02:00 |
|