1434 Commits

Author	SHA1	Message	Date
Harry Maclean	681e58c8e0	Merge pull request #9850 from hmac/hmac/arel ... Ruby: Model Arel.sql	2022-07-25 12:09:18 +12:00
Harry Maclean	cb3ebeedf9	Merge pull request #9696 from thiggy1342/experimental-strong-params ... RB: Experimental strong params query	2022-07-25 12:08:55 +12:00
thiggy1342	6cfde70898	Merge branch 'main' into experimental-strong-params	2022-07-22 20:41:33 -04:00
thiggy1342	b4d762fb21	Merge branch 'main' into experimental-manually-check-request-verb	2022-07-22 20:41:23 -04:00
thiggy1342	0c0ba925a7	this one should have no tag	2022-07-22 18:44:03 +00:00
thiggy1342	f39ca1aad2	correct cwe tagged	2022-07-22 18:36:25 +00:00
thiggy1342	c2710fb038	Update ruby/ql/src/change-notes/2022-07-21-check-http-verb.md ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-22 13:52:00 -04:00
thiggy1342	2c095cf166	Update ruby/ql/src/change-notes/2022-07-21-weak-params.md ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-22 13:51:38 -04:00
thiggy1342	871b6515d5	Merge branch 'main' into experimental-manually-check-request-verb	2022-07-21 18:47:07 -04:00
thiggy1342	1842bde879	add change note	2022-07-21 22:13:53 +00:00
thiggy1342	c1a6ca5f94	add change note	2022-07-21 22:11:14 +00:00
thiggy1342	486a394a7f	Update ruby/ql/src/experimental/weak-params/WeakParams.ql ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-21 17:26:09 -04:00
thiggy1342	8fabc06d37	fix test assertion	2022-07-21 21:25:44 +00:00
thiggy1342	cc958dc171	Update ruby/ql/src/experimental/manually-check-http-verb/ManuallyCheckHttpVerb.ql ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-21 17:19:33 -04:00
Arthur Baars	1399610bd4	Merge branch 'main' into encoding	2022-07-21 21:21:17 +02:00
Arthur Baars	7be106d7bb	Ruby: handle magic coding: comments	2022-07-21 16:33:18 +02:00
thiggy1342	8c55a15fa6	Merge branch 'main' into experimental-manually-check-request-verb	2022-07-20 10:27:40 -04:00
thiggy1342	6f74a2609c	Merge branch 'main' into experimental-strong-params	2022-07-20 10:26:49 -04:00
thiggy1342	f54fc1a88d	Merge branch 'main' into add-activerecord-annotate	2022-07-20 10:26:44 -04:00
thiggy1342	cf23d338f3	Merge branch 'main' into experimental-strong-params	2022-07-19 10:29:36 -04:00
thiggy1342	6bc2fe513d	Merge branch 'main' into add-activerecord-annotate	2022-07-19 10:29:24 -04:00
Asger F	b9bdee6651	Merge branch 'main' into post-release-prep/codeql-cli-2.10.1	2022-07-19 16:24:35 +02:00
Harry Maclean	ec1d1eb547	Ruby: Add change note	2022-07-19 14:33:51 +12:00
thiggy1342	962155fd61	fix changenotes	2022-07-19 00:33:04 +00:00
thiggy1342	9586259706	style tweak for checking multiple method names	2022-07-19 00:29:30 +00:00
thiggy1342	304203ad2f	fix path problem output	2022-07-19 00:25:50 +00:00
Harry Maclean	7b8603c89b	Ruby: Model Arel.sql	2022-07-19 11:27:15 +12:00
thiggy1342	fc00e56058	Merge branch 'main' into experimental-manually-check-request-verb	2022-07-18 10:58:13 -04:00
Nick Rolfe	eebba36b18	Merge pull request #9708 from github/nickrolfe/pathname ... Ruby: model the standard library's `Pathname` class	2022-07-18 11:29:30 +01:00
Nick Rolfe	dbd6607875	Ruby: use ASCII dash in comment ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-18 08:54:58 +01:00
Harry Maclean	cc5f59f313	Merge pull request #9138 from hmac/hmac/array-inclusion-guard-local-flow ... Ruby: Make StringArrayInclusion more sensitive	2022-07-18 10:11:49 +12:00
github-actions[bot]	0ee476129a	Post-release preparation for codeql-cli-2.10.1	2022-07-14 14:38:49 +00:00
github-actions[bot]	d1aa0d7dd3	Release preparation for version 2.10.1	2022-07-14 08:56:03 +00:00
thiggy1342	62a10e20b2	Merge branch 'main' into experimental-manually-check-request-verb	2022-07-13 20:28:09 -04:00
thiggy1342	8ca7d7d775	update change note	2022-07-14 00:22:38 +00:00
thiggy1342	9d277027a3	Merge branch 'main' into experimental-strong-params	2022-07-13 20:19:50 -04:00
thiggy1342	3dd61cadf4	formatting query	2022-07-14 00:19:36 +00:00
thiggy1342	ee79834cc8	formatting in qhelp	2022-07-14 00:15:39 +00:00
thiggy1342	ae634367c9	add qhelp file	2022-07-14 00:11:52 +00:00
thiggy1342	2cc703387b	use taint config for data flow	2022-07-14 00:11:52 +00:00
thiggy1342	f5301aa478	Merge branch 'main' into add-activerecord-annotate	2022-07-13 14:35:44 -04:00
Harry Maclean	1fa2144716	Ruby: Update test fixtures	2022-07-13 21:02:08 +12:00
Erik Krogh Kristensen	c4f44bb67f	sync files	2022-07-13 10:01:26 +02:00
Harry Maclean	49aab51893	Ruby: Make helper predicate private	2022-07-13 18:20:27 +12:00
Harry Maclean	ea95e2e1d0	Ruby: Use InclusionTests library in barrier guards	2022-07-13 18:20:27 +12:00
Harry Maclean	b9fc82a741	Ruby: Test both old and new-style barrier guards	2022-07-13 18:20:25 +12:00
Harry Maclean	4cfaa86d5d	Ruby: Update new-style barrier-guard	2022-07-13 18:20:14 +12:00
Harry Maclean	5f17d8370c	Ruby: Small change to isArrayExpr	2022-07-13 18:20:14 +12:00
Harry Maclean	63dcce9a31	Ruby: Refactor isArrayConstant	2022-07-13 18:20:14 +12:00
Harry Maclean	b5a3d3c488	Ruby: Extract isArrayConstant ... This predicate might be useful elsewhere.	2022-07-13 18:20:14 +12:00