mirror of
https://github.com/github/codeql.git
synced 2026-02-11 04:31:05 +01:00
This is a basic first step in modelling rack apps. We recognise classes that look like rack applications and then treat the argument to `call` in the same way that we treat `request.env` in ActionController classes. This finds a TP in CVE-2021-43840.