Harry Maclean e1dcc207b4 Ruby: Model methods in Rails::Generators::Actions ...

These methods are sinks for command injection.

2022-06-20 13:36:09 +12:00

..

action_cable

Ruby: Recognise ActionCable logger class

2022-06-20 13:36:02 +12:00

active_support

Ruby: Add tests for ActiveSupport modelling

2022-05-24 09:35:26 +01:00

app

Ruby: Model redirect_back and redirect_back_or_to

2022-06-20 13:36:02 +12:00

archive

add Zip::File.new to framework

2022-06-16 00:22:15 +00:00

core

Ruby: Fix identification IO.open args

2022-05-10 17:32:00 +12:00

files

Ruby: Recognise File.atomic_write as a file writer

2022-06-20 13:36:02 +12:00

http_clients

Ruby: Identify domain in Net::HTTP requests

2022-04-27 12:47:09 +12:00

railties

Ruby: Model methods in Rails::Generators::Actions

2022-06-20 13:36:09 +12:00

stdlib

Ruby: Add tests for ActiveSupport modelling

2022-05-24 09:35:26 +01:00

ActionController.expected

Ruby: Model redirect_back and redirect_back_or_to

2022-06-20 13:36:02 +12:00

ActionController.ql

Ruby: treat ActionController#cookies as a remote flow source

2021-12-09 12:13:17 +00:00

ActionDispatch.expected

via - update tests

2022-02-03 10:40:23 +13:00

ActionDispatch.ql

Ruby: Don't expose abstract class

2022-02-03 10:41:30 +13:00

ActionView.expected

Ruby: Model redirect_back and redirect_back_or_to

2022-06-20 13:36:02 +12:00

ActionView.ql

Move files to ruby subfolder

2021-10-15 11:47:28 +02:00

ActiveRecord.expected

Ruby: add a test case for ActiveRecord dynamic finder methods

2022-06-16 11:29:56 +01:00

ActiveRecord.ql

Ruby: make ActiveRecordInstance public

2022-05-26 17:54:02 +01:00

ActiveRecord.rb

Ruby: add a test case for ActiveRecord dynamic finder methods

2022-06-16 11:29:56 +01:00

Core.expected

Ruby: Update filename in test fixture

2022-02-21 09:43:36 +13:00

Core.ql

Ruby: split tests to match stdlib changes

2022-02-17 20:44:04 +13:00

Eval.rb

Ruby: split tests to match stdlib changes

2022-02-17 20:44:04 +13:00

GraphQL.expected

Ruby: Add classes for detecting user input from graphql-ruby

2022-01-18 09:13:58 -07:00

GraphQL.ql

Ruby: Add classes for detecting user input from graphql-ruby

2022-01-18 09:13:58 -07:00

PosixSpawn.expected

Ruby: Simplify posix-spawn modeling

2022-05-26 14:29:04 +01:00

PosixSpawn.ql

Ruby: Simplify posix-spawn modeling

2022-05-26 14:29:04 +01:00

PosixSpawn.rb

Ruby: Simplify posix-spawn modeling

2022-05-26 14:29:04 +01:00

Stdlib.rb

Ruby: split tests to match stdlib changes

2022-02-17 20:44:04 +13:00