hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
314683d5fb7cd4fb589573f4638cb3945d47a9c4
codeql/ruby
History
Harry Maclean 314683d5fb Ruby: Improve UrlRedirect query using Rails routes 
Handlers for non-GET requests aren't vulnerable to URL redirect attacks,
because browsers won't initiate non-GET requests when you click a link.

We can use Rails routing information, if present, to filter out any
handlers for non-GET requests.
2022-02-02 16:26:20 +13:00
..
.vscode
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
actions/create-extractor-pack
Ruby: use ruby specific cache key
2022-02-01 15:18:09 +01:00
autobuilder
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
doc
Fix CI jobs
2021-11-23 22:03:01 +01:00
extractor
Ruby extractor: stop using deprecated function
2022-01-25 22:04:24 +13:00
generator
Ruby extractor: stop using deprecated function
2022-01-25 22:04:24 +13:00
node-types
Ruby: remove redundant closure
2021-12-02 16:29:59 +00:00
old-change-notes
Move older change notes to old-change-notes
2021-12-14 12:35:04 -05:00
ql
Ruby: Improve UrlRedirect query using Rails routes
2022-02-02 16:26:20 +13:00
scripts
Fix scripts/prepare-db-upgrade.sh
2021-11-17 12:11:20 +01:00
tools
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
.gitattributes
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
.gitignore
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
Cargo.lock
Update clap requirement from 2.33 to 3.0
2022-01-25 16:53:39 +13:00
Cargo.toml
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
codeql-extractor.yml
Move files to ruby subfolder
2021-10-15 11:47:28 +02:00
Makefile
Fix CI jobs
2021-11-23 22:03:01 +01:00
README.md
Ruby: clean up docs
2021-10-28 12:04:48 +01:00

README.md

Ruby analysis support for CodeQL

This directory contains the extractor, CodeQL libraries, and queries that power Ruby support in LGTM and the other CodeQL products that GitHub makes available to its customers worldwide.

It contains two major components:

  1. static analysis libraries and queries written in CodeQL that can be used to analyze such a database to find coding mistakes or security vulnerabilities.
  2. an extractor, written in Rust, that parses Ruby source code and converts it into a database that can be queried using CodeQL. See Developer information for information on building the extractor (you do not need to do this if you are only developing queries).