6 Commits

Author	SHA1	Message	Date
Tom Hvitved	9e67382f06	Bump codeql submodule	2021-09-15 14:59:42 +02:00
Harry Maclean	8f36b0d7fe	Simplify guard in SQL injection tests ... We don't (yet) properly sanitize taint in cases like this foo = "A" unless foo == "B" So for now, use a simpler guard in the SQL injection test. We can resurrect the old, more idiomatic guard when we can support it.	2021-09-10 16:27:57 +01:00
Alex Ford	31cbf818ab	fix rb/sql-injection FPs due to not accounting for overridden ActiveRecord methods	2021-06-29 13:54:15 +01:00
Alex Ford	9883a9b606	update SqlInjection tests	2021-06-24 18:12:26 +01:00
Alex Ford	12e4c9ee90	update SqlInjection tests	2021-06-24 18:12:25 +01:00
Alex Ford	5386c776b3	Implement rb/sql-injection	2021-06-24 18:12:25 +01:00