Files
codeql/ruby/ql/test/library-tests/frameworks/ActiveSupport.ql
Harry Maclean c65ca8ff86 Model calls to constantize as code executions
`constantize` is an ActiveSupport extension to `String` that attempts to
look up a constant with a name matching the receiver.
2022-02-03 15:22:07 +13:00

6 lines
164 B
Plaintext

import codeql.ruby.frameworks.ActiveSupport
query DataFlow::Node constantizeCalls(ActiveSupport::CoreExtensions::String::Constantize c) {
result = c.getCode()
}