Rasmus Wriedt Larsen 10968bf115 Ruby: Fix alert-msg logic for RequestWithoutValidation.ql ...

This really surprised me, but as shown on the results, it does actually
make a difference in the alert-message.

2022-08-19 15:50:09 +02:00

..

cwe-020

rename query to overly-large-range, and rewrite the @description

2022-07-12 16:02:46 +02:00

cwe-022

add Zip::File.new query to tests

2022-06-16 00:51:50 +00:00

cwe-078

Ruby: Flow through hash-splat parameters

2022-05-25 12:37:22 +02:00

cwe-079

Update test output

2022-05-20 16:30:58 +02:00

cwe-089

expand query tests for cwe-089

2022-07-07 19:23:57 +00:00

cwe-094

Ruby: add a code injection test for flwo through Regexp.escape

2022-03-01 14:08:21 +01:00

cwe-116

Rename IncompleteMultiCharacterSanitization[Query]

2022-08-17 16:03:49 +12:00

cwe-117

Ruby: add rb/log-injection test cases

2022-08-10 16:17:37 +01:00

cwe-134

Ruby: Avoid FP in TaintedFormatString query

2022-03-21 12:51:47 +13:00

cwe-295

Ruby: Fix alert-msg logic for RequestWithoutValidation.ql

2022-08-19 15:50:09 +02:00

cwe-300

Ruby: Include query results in test

2022-04-05 10:20:02 +12:00

cwe-312

Ruby: update test output

2022-03-10 18:27:06 +00:00

cwe-327

ruby: update rb/weak-cryptographic-algorithm to specify the block mode if appropriate

2022-05-13 16:32:30 +01:00

cwe-352

Ruby: add missing example rails action

2022-01-19 13:47:00 +00:00

cwe-502

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-601

Ruby: Model redirect_back and redirect_back_or_to

2022-06-20 13:36:02 +12:00

cwe-611

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-732

Ruby: add some rb/weak-cookie-configuration tests

2021-12-22 17:47:44 +00:00

cwe-798

Ruby: Data flow for keyword arguments/parameters

2021-12-17 15:42:29 +01:00

cwe-807-user-controlled-bypass

Ruby: Update expected test output after rebase

2021-12-22 15:56:20 +01:00

cwe-829

Ruby: Document missing test result

2022-04-27 12:47:09 +12:00

cwe-912

Ruby: Add rb/http-to-file-access query

2022-03-22 11:09:08 +13:00

cwe-918

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-1333-exponential-redos

add further normalization of char classses

2022-06-23 14:36:25 +02:00

cwe-1333-polynomial-redos

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-1333-regexp-injection

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

decompression-api

update test expectation

2022-06-20 17:27:33 +00:00