hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
hmac/command-injection-from-library-inputs
codeql/ruby/ql/test/library-tests/frameworks
History
Harry Maclean 02794d95d4 Ruby: Model Kernel.open as a command execution 
If the argument to Kernel.open begins with "|", the rest of the string
is executed as a shell command.
2022-03-10 16:15:14 +13:00
..
app
Handle via: :all in Rails routes
2022-02-02 16:26:20 +13:00
core
Ruby: Model Kernel.open as a command execution
2022-03-10 16:15:14 +13:00
files
Ruby: update Files.ql tests for write accesses
2022-02-20 19:28:12 +00:00
http_clients
Ruby: recognise additional form for OpenURI
2022-02-10 15:42:15 +13:00
stdlib
Ruby: split tests to match stdlib changes
2022-02-17 20:44:04 +13:00
ActionController.expected
Ruby: Rails route resolution
2022-02-02 16:26:19 +13:00
ActionController.ql
Ruby: treat ActionController#cookies as a remote flow source
2021-12-09 12:13:17 +00:00
ActionDispatch.expected
via - update tests
2022-02-03 10:40:23 +13:00
ActionDispatch.ql
Ruby: Don't expose abstract class
2022-02-03 10:41:30 +13:00
ActionView.expected
Ruby: Don't count private methods as Rails actions
2021-12-13 15:36:55 +13:00
ActionView.ql
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
active_support.rb
Model calls to constantize as code executions
2022-02-03 15:22:07 +13:00
ActiveRecord.expected
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
ActiveRecord.ql
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
ActiveRecordInjection.rb
Ruby: Use API graph subclassing in Rails modelling
2022-01-25 16:40:14 +13:00
ActiveSupport.expected
Model calls to constantize as code executions
2022-02-03 15:22:07 +13:00
ActiveSupport.ql
Ruby: fix old import in ActiveSupport
2022-02-17 20:44:04 +13:00
Core.expected
Ruby: Update filename in test fixture
2022-02-21 09:43:36 +13:00
Core.ql
Ruby: split tests to match stdlib changes
2022-02-17 20:44:04 +13:00
Eval.rb
Ruby: split tests to match stdlib changes
2022-02-17 20:44:04 +13:00
GraphQL.expected
Ruby: Add classes for detecting user input from graphql-ruby
2022-01-18 09:13:58 -07:00
GraphQL.ql
Ruby: Add classes for detecting user input from graphql-ruby
2022-01-18 09:13:58 -07:00
Stdlib.rb
Ruby: split tests to match stdlib changes
2022-02-17 20:44:04 +13:00