Chad Bentz c5e3be2c4c Grape - detect params calls inside helper methods ...

- added unit tests for flow using inline format
- removed grape from Arel tests (temporary)

2025-09-16 17:09:18 -04:00

..

action_cable

Ruby: add ActionCable channel RPC params as remote-flow sources

2022-11-09 14:16:04 +00:00

action_controller

Ruby: Track types in data flow

2025-01-06 13:26:10 +01:00

action_dispatch

Ruby: handle routes with path/action pairs

2024-05-31 15:54:57 +01:00

action_mailbox

Ruby: Remove unused class

2022-11-30 11:50:35 +13:00

action_mailer

Ruby: Update all test util paths to point to the new location.

2024-12-12 13:54:37 +01:00

action_view

Ruby: Fix extraction errors

2024-06-04 14:54:02 +02:00

active_record

ruby: update ruby tests after deleting deprecated test predicates

2025-01-27 22:17:00 +01:00

active_resource

ruby: update ruby tests after deleting deprecated test predicates

2025-01-27 22:17:00 +01:00

active_storage

Ruby: Include all assignments in data flow paths

2023-03-24 10:09:30 +01:00

active_support

Ruby: Track types in data flow

2025-01-06 13:26:10 +01:00

archive

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

arel

Ruby: Update all test util paths to point to the new location.

2024-12-12 13:54:37 +01:00

core

Ruby: more test cases for code injection via method

2024-03-01 16:01:07 +01:00

files

Ruby: Include all assignments in data flow paths

2023-03-24 10:09:30 +01:00

gemfile

Ruby: Add tests for Gemfile modeling

2024-02-23 11:13:16 +00:00

globalid

Ruby: improve coverage of GlobalID::Identification modelling

2022-12-14 15:21:19 +00:00

grape

Grape - detect params calls inside helper methods

2025-09-16 17:09:18 -04:00

graphql

Ruby: Identify named graphql params as sources

2023-09-22 17:54:55 +01:00

http_clients

Update expected test output

2025-07-21 15:26:39 -04:00

json

Ruby: Update all test util paths to point to the new location.

2024-12-12 13:54:37 +01:00

mysql2

Add Mysql2 as SQL Injection Sink

2023-05-06 12:25:25 +02:00

pathname

Ruby: Track types in data flow

2025-01-06 13:26:10 +01:00

posix-spawn

Ruby: Move PosixSpawn tests to their own directory

2023-02-04 14:30:23 +13:00

rack

Merge remote-tracking branch 'origin/main' into rb/rack-env-query-string

2023-07-17 14:11:25 +01:00

railties

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

sequel

Ruby: update test output

2023-06-01 13:50:32 +01:00

sinatra

Ruby: Track types in data flow

2025-01-06 13:26:10 +01:00

sqlite3

Ruby: fix sqlite3 PreparedStatementExecution.getSql() predicate

2023-06-28 17:09:43 +01:00

stdlib

Ruby: Model Process.exec

2024-03-05 10:19:22 +00:00

Twirp

ruby: update ruby tests after deleting deprecated test predicates

2025-01-27 22:17:00 +01:00