Peter Stöckli 09cf76a880 Ruby: additional unsafe deserialization sinks for ox, oj

2023-10-19 14:04:48 +02:00

..

cwe-020

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-022

Ruby: Reimplement flow through captured variables using field flow

2023-09-06 11:00:55 +02:00

cwe-078

Ruby: Fix GraphQL test

2023-09-14 14:14:26 +01:00

cwe-079

Ruby: Allow for implicit array reads at all sinks during taint tracking

2023-09-14 09:40:05 +02:00

cwe-089

Ruby: Allow for implicit array reads at all sinks during taint tracking

2023-09-14 09:40:05 +02:00

cwe-094

Ruby: Allow for implicit array reads at all sinks during taint tracking

2023-09-14 09:40:05 +02:00

cwe-116

Ruby: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:43:05 +02:00

cwe-117

Ruby: Allow for implicit array reads at all sinks during taint tracking

2023-09-14 09:40:05 +02:00

cwe-134

Ruby: Allow for implicit array reads at all sinks during taint tracking

2023-09-14 09:40:05 +02:00

cwe-209

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-295

Ruby: Fix bug in excon model

2023-08-23 12:55:36 +01:00

cwe-300

Ruby: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:43:05 +02:00

cwe-312

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-327

Ruby: weak crypto: do not report weak hash algorithms

2022-11-04 15:58:50 +01:00

cwe-352

Ruby: add missing example rails action

2022-01-19 13:47:00 +00:00

cwe-502

Ruby: additional unsafe deserialization sinks for ox, oj

2023-10-19 14:04:48 +02:00

cwe-506

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-598

Ruby: update rb/sensitive-get-query test output

2023-03-27 09:44:55 +01:00

cwe-601

Ruby: configsig rb/url-redirection

2023-09-03 17:20:05 +01:00

cwe-611

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-732

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-798

Ruby: configsig rb/hardcoded-credentials

2023-09-03 17:20:06 +01:00

cwe-807-user-controlled-bypass

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-829

Ruby: renames for rb/insecure-download

2023-09-03 17:20:04 +01:00

cwe-912

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-918

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00

cwe-1333-exponential-redos

Ruby: Update expected test output

2023-08-30 13:33:48 +02:00

cwe-1333-polynomial-redos

add really long regex as a test-case

2023-05-23 09:56:06 +02:00

cwe-1333-regexp-injection

Ruby: Allow for implicit array reads at all sinks during taint tracking

2023-09-14 09:40:05 +02:00

decompression-api

Ruby: Update more expected output.

2023-04-26 13:37:07 +02:00