Nick Rolfe fdca896614 Ruby: improve handling of [g]sub! ...

rb/incomplete-sanitization has a few cases where we find flow from one
one string substitution call to another, e.g.

    a.sub(...).sub(...)

But this didn't find typical chained uses of the destructive variants,
e.g.

    a.sub!(...)
    a.sub!(...)

We now handle those cases by tracking flow from the post-update node for
the receiver of the first call.

2022-04-13 17:19:25 +01:00

..

BadTagFilter

Ruby: add rc/incomplete-sanitization query

2022-04-13 16:48:43 +01:00

IncompleteSanitization

Ruby: improve handling of [g]sub!

2022-04-13 17:19:25 +01:00