Harry Maclean 1d693d336f Ruby: Model javascript_include_tag and friends

2022-09-26 20:56:09 +13:00

..

action_cable

Ruby: Recognise ActionCable logger class

2022-06-20 13:36:02 +12:00

action_dispatch

Ruby: Model Mime::Type

2022-07-29 11:41:48 +12:00

action_view

Ruby: model ActionView::FileSystemResolver as a FileSystemAccess

2022-09-16 09:24:14 +01:00

active_record

Ruby: Fix <<

2022-08-09 15:08:17 +12:00

active_resource

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

active_support

Ruby: Add summaries for ActiveSupport::SafeBuffer

2022-09-26 20:55:05 +13:00

app

Ruby: Recognise Rails render calls as HTTP responses

2022-08-16 14:03:26 +12:00

archive

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

arel

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

core

Ruby: Fix identification IO.open args

2022-05-10 17:32:00 +12:00

files

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

http_clients

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

pathname

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

railties

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

stdlib

Ruby: Add tests for ActiveSupport modelling

2022-05-24 09:35:26 +01:00

ActionController.expected

Ruby: Recognise Rails render calls as HTTP responses

2022-08-16 14:03:26 +12:00

ActionController.ql

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

ActionDispatch.expected

Ruby: Model Mime::Type

2022-07-29 11:41:48 +12:00

ActionDispatch.ql

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

ActionView.expected

Ruby: Model ActionView helper XSS sinks

2022-09-26 20:55:04 +13:00

ActionView.ql

Ruby: Model javascript_include_tag and friends

2022-09-26 20:56:09 +13:00

Core.expected

Ruby: Update filename in test fixture

2022-02-21 09:43:36 +13:00

Core.ql

Ruby: split tests to match stdlib changes

2022-02-17 20:44:04 +13:00

Eval.rb

Ruby: split tests to match stdlib changes

2022-02-17 20:44:04 +13:00

GraphQL.expected

Ruby: Add classes for detecting user input from graphql-ruby

2022-01-18 09:13:58 -07:00

GraphQL.ql

Ruby: Add classes for detecting user input from graphql-ruby

2022-01-18 09:13:58 -07:00

PosixSpawn.expected

Ruby: Simplify posix-spawn modeling

2022-05-26 14:29:04 +01:00

PosixSpawn.ql

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

PosixSpawn.rb

Ruby: Simplify posix-spawn modeling

2022-05-26 14:29:04 +01:00

Stdlib.rb

Ruby: split tests to match stdlib changes

2022-02-17 20:44:04 +13:00