Rasmus Wriedt Larsen a9e1e72196 Merge branch 'main' into shared-http-client-request

2022-09-06 10:52:27 +02:00

..

cwe-020

print a correct range for ranges that doesn't contain any alpha-numeric chars

2022-08-30 13:57:11 +02:00

cwe-022

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-078

Ruby: Flow through hash-splat parameters

2022-05-25 12:37:22 +02:00

cwe-079

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-089

expand query tests for cwe-089

2022-07-07 19:23:57 +00:00

cwe-094

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-116

Rename IncompleteMultiCharacterSanitization[Query]

2022-08-17 16:03:49 +12:00

cwe-117

Ruby: add rb/log-injection test cases

2022-08-10 16:17:37 +01:00

cwe-134

…

cwe-295

Ruby: Fix alert-msg logic for RequestWithoutValidation.ql

2022-08-19 15:50:09 +02:00

cwe-300

…

cwe-312

…

cwe-327

ruby: update rb/weak-cryptographic-algorithm to specify the block mode if appropriate

2022-05-13 16:32:30 +01:00

cwe-352

…

cwe-502

…

cwe-506

Ruby: make hex-escaped strings ("\xCD\xEF" etc.) sources of hardcoded data

2022-08-26 09:33:03 +01:00

cwe-601

Ruby: Model redirect_back and redirect_back_or_to

2022-06-20 13:36:02 +12:00

cwe-611

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-732

…

cwe-798

…

cwe-807-user-controlled-bypass

…

cwe-829

Ruby: Document missing test result

2022-04-27 12:47:09 +12:00

cwe-912

…

cwe-918

…

cwe-1333-exponential-redos

add further normalization of char classses

2022-06-23 14:36:25 +02:00

cwe-1333-polynomial-redos

…

cwe-1333-regexp-injection

…

decompression-api

update test expectation

2022-06-20 17:27:33 +00:00