Files
codeql/ruby/ql/test/query-tests/security/cwe-601
Harry Maclean 314683d5fb Ruby: Improve UrlRedirect query using Rails routes
Handlers for non-GET requests aren't vulnerable to URL redirect attacks,
because browsers won't initiate non-GET requests when you click a link.

We can use Rails routing information, if present, to filter out any
handlers for non-GET requests.
2022-02-02 16:26:20 +13:00
..
2021-10-15 11:47:28 +02:00