mirror of
https://github.com/github/codeql.git
synced 2026-04-27 17:55:19 +02:00
This is a basic first step in modelling rack apps. We recognise classes that look like rack applications and then treat the argument to `call` in the same way that we treat `request.env` in ActionController classes. This finds a TP in CVE-2021-43840.