mirror of
https://github.com/github/codeql.git
synced 2026-02-08 19:21:07 +01:00
0626d693f5
This is a basic first step in modelling rack apps. We recognise classes that look like rack applications and then treat the argument to `call` in the same way that we treat `request.env` in ActionController classes. This finds a TP in CVE-2021-43840.
5 lines
177 B
Plaintext
5 lines
177 B
Plaintext
private import codeql.ruby.frameworks.Rack
|
|
private import codeql.ruby.DataFlow
|
|
|
|
query predicate rackApps(Rack::AppCandidate c, DataFlow::ParameterNode env) { env = c.getEnv() }
|