hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-19 00:13:44 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
6803d96000c2ba11ca4034a9ec78a0fe3e7abe09
codeql/ruby/ql/test/query-tests/security
History
Harry Maclean 9f99a3ca1f Ruby: Model sanitize ActionView helper
2022-09-26 20:56:11 +13:00
..
cwe-020
print a correct range for ranges that doesn't contain any alpha-numeric chars
2022-08-30 13:57:11 +02:00
cwe-022
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-078
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-079
Ruby: Model sanitize ActionView helper
2022-09-26 20:56:11 +13:00
cwe-089
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-094
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-116
Ruby: Do not expose AST layer through ruby.qll
2022-09-13 19:59:56 +02:00
cwe-117
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-134
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-295
Ruby: Fix alert-msg logic for RequestWithoutValidation.ql
2022-08-19 15:50:09 +02:00
cwe-300
Ruby: Do not expose AST layer through ruby.qll
2022-09-13 19:59:56 +02:00
cwe-312
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-327
ruby: update rb/weak-cryptographic-algorithm to specify the block mode if appropriate
2022-05-13 16:32:30 +01:00
cwe-352
Ruby: add missing example rails action
2022-01-19 13:47:00 +00:00
cwe-502
Ruby: add Hash.from_trusted_xml as an unsafe deserialization sink
2022-09-21 13:01:21 +01:00
cwe-506
make the alert messages of taint-tracking queries more consistent
2022-09-07 12:22:50 +02:00
cwe-601
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-611
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-732
Ruby: add some rb/weak-cookie-configuration tests
2021-12-22 17:47:44 +00:00
cwe-798
Ruby: Data flow for keyword arguments/parameters
2021-12-17 15:42:29 +01:00
cwe-807-user-controlled-bypass
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-829
Ruby: Do not expose AST layer through ruby.qll
2022-09-13 19:59:56 +02:00
cwe-912
make the alert messages of taint-tracking queries more consistent
2022-09-07 12:22:50 +02:00
cwe-918
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-1333-exponential-redos
add further normalization of char classses
2022-06-23 14:36:25 +02:00
cwe-1333-polynomial-redos
apply suggestions from review
2022-09-13 10:52:23 +02:00
cwe-1333-regexp-injection
apply suggestions from review
2022-09-13 10:52:23 +02:00
decompression-api
update test expectation
2022-06-20 17:27:33 +00:00