Harry Maclean dd5eb982ec Merge pull request #15524 from hmac/hmac-process-spawn ...

Ruby: Add some more command injection sinks

2024-03-13 09:53:10 +00:00

..

action_cable

Ruby: add ActionCable channel RPC params as remote-flow sources

2022-11-09 14:16:04 +00:00

action_controller

Ruby: add sources on request object of Rails

2024-02-13 15:52:18 +01:00

action_dispatch

Revert "Merge pull request #13620 from github/revert-13496-rb/tracking-on-demand"

2023-07-07 09:42:34 +02:00

action_mailbox

Ruby: Remove unused class

2022-11-30 11:50:35 +13:00

action_mailer

Ruby: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

action_view

Ruby: Move ActionDispatch tests to own directory

2023-02-04 14:19:08 +13:00

active_record

Address reveiw comment - add create nd remove select_insert

2024-02-22 09:55:46 +00:00

active_resource

Revert "Merge pull request #13620 from github/revert-13496-rb/tracking-on-demand"

2023-07-07 09:42:34 +02:00

active_storage

Ruby: Include all assignments in data flow paths

2023-03-24 10:09:30 +01:00

active_support

Ruby: Rework hidden synthetic data-flow nodes

2024-02-27 15:33:58 +01:00

archive

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

arel

Ruby: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

core

Ruby: more test cases for code injection via method

2024-03-01 16:01:07 +01:00

files

Ruby: Include all assignments in data flow paths

2023-03-24 10:09:30 +01:00

globalid

Ruby: improve coverage of GlobalID::Identification modelling

2022-12-14 15:21:19 +00:00

graphql

Ruby: Identify named graphql params as sources

2023-09-22 17:54:55 +01:00

http_clients

Add tests and qldoc

2024-03-01 14:46:55 +00:00

json

Ruby: Add empty provenance column to expected files.

2024-02-09 11:32:08 +01:00

mysql2

Add Mysql2 as SQL Injection Sink

2023-05-06 12:25:25 +02:00

pathname

Ruby: Fix tests.

2023-06-09 15:39:18 +02:00

posix-spawn

Ruby: Move PosixSpawn tests to their own directory

2023-02-04 14:30:23 +13:00

rack

Merge remote-tracking branch 'origin/main' into rb/rack-env-query-string

2023-07-17 14:11:25 +01:00

railties

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

sequel

Ruby: update test output

2023-06-01 13:50:32 +01:00

sinatra

Ruby: Rework hidden synthetic data-flow nodes

2024-02-27 15:33:58 +01:00

sqlite3

Ruby: fix sqlite3 PreparedStatementExecution.getSql() predicate

2023-06-28 17:09:43 +01:00

stdlib

Ruby: Model Process.exec

2024-03-05 10:19:22 +00:00

Twirp

Revert "Merge pull request #13620 from github/revert-13496-rb/tracking-on-demand"

2023-07-07 09:42:34 +02:00