7 Commits

Author	SHA1	Message	Date
erik-krogh	063c76b6d1	apply suggestions from review	2022-09-13 10:52:23 +02:00
erik-krogh	79a048968e	make the alert messages of taint-tracking queries more consistent	2022-09-07 12:22:50 +02:00
erik-krogh	7e0bd5bde4	update expected output of tests	2022-08-22 21:41:47 +02:00
Asger Feldthaus	cbd044a768	Ruby: add a code injection test for flwo through Regexp.escape	2022-03-01 14:08:21 +01:00
Harry Maclean	43ddc54f2b	Ruby: Add Module#const_get as a code execution ... Module#const_get takes a single string argument and interprets it as the name of a constant. It then looks up the constant and returns its value. Object.const_get("Math::PI") # => 3.141592653589793 By itself, this method is not as dangerous as e.g. eval, but if the value returned is a class that is then instantiated, this can allow an attacker to instantiate arbitrary Ruby classes. As a result, I think it's safe to say that any remote input flowing into this call is a potential vulnerability. A real-world example of this is https://github.com/advisories/GHSA-52p9-v744-mwjj.	2022-01-06 13:03:41 +13:00
Tom Hvitved	400802c5ce	Ruby: Add flow summaries for Array/Enumerable methods	2021-12-22 15:56:20 +01:00
Arthur Baars	976daddd36	Move files to ruby subfolder	2021-10-15 11:47:28 +02:00