hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-15 12:04:07 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e32a5ca846e8fa979e6a2caaeb13bb413b8b199b
codeql/ruby/ql/lib/codeql/ruby/security
History
Nora Dimitrijević 6519bd9909 Ruby/PolynomialReDoSQuery 
ruby/ql/src/queries/security/cwe-1333/PolynomialReDoS.ql
2025-10-28 09:40:38 +01:00
..
internal
Remove duplicate copies of CryptoAlgorithms and CryptoAlgorithmNames
2025-07-14 11:39:06 +02:00
regexp
Ruby/PolynomialReDoSQuery
2025-10-28 09:40:38 +01:00
CleartextLoggingCustomizations.qll
Ruby: Rely on built-in hash-flow in clear text storage query
2023-03-16 14:55:06 +01:00
CleartextLoggingQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
CleartextStorageCustomizations.qll
Ruby: Rely on built-in hash-flow in clear text storage query
2023-03-16 14:55:06 +01:00
CleartextStorageQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
CodeInjectionCustomizations.qll
Ruby: Remove deprecated configuration classes referencing deleted api.
2024-12-03 20:08:46 +01:00
CodeInjectionQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
CommandInjectionCustomizations.qll
Ruby: Add sinks from external models
2023-11-27 09:18:00 +00:00
CommandInjectionQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
ConditionalBypassCustomizations.qll
Shared: Use edge dominance in basic block library
2025-02-06 10:38:32 +01:00
ConditionalBypassQuery.qll
Ruby: resolve inserted TODOs
2025-01-23 11:48:46 +01:00
CryptoAlgorithms.qll
Remove duplicate copies of CryptoAlgorithms and CryptoAlgorithmNames
2025-07-14 11:39:06 +02:00
HardcodedDataInterpretedAsCodeCustomizations.qll
Ruby: Remove deprecated configuration classes referencing deleted api.
2024-12-03 20:08:46 +01:00
HardcodedDataInterpretedAsCodeQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
HttpToFileAccessCustomizations.qll
Add missing file doc comment
2022-03-22 11:10:09 +13:00
HttpToFileAccessQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
HttpToFileAccessSpecific.qll
Merge pull request #10376 from hvitved/ruby/no-ast-by-default
2022-09-21 13:15:30 +02:00
ImproperLdapAuthCustomizations.qll
Ruby: autoformat
2023-08-25 17:11:07 +01:00
ImproperLdapAuthQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
ImproperMemoizationQuery.qll
Ruby: Fix some Ql4Ql violations.
2025-09-01 15:19:25 +02:00
IncompleteMultiCharacterSanitizationQuery.qll
sync to ruby
2023-07-01 20:33:02 +02:00
IncompleteMultiCharacterSanitizationSpecific.qll
port the Ruby regex/redos queries to use the shared pack
2022-11-07 14:34:18 +01:00
InsecureDependencyQuery.qll
Ruby: Do not expose AST layer through ruby.qll
2022-09-13 19:59:56 +02:00
InsecureDownloadCustomizations.qll
Ruby: Remove deprecated configuration classes referencing deleted api.
2024-12-03 20:08:46 +01:00
InsecureDownloadQuery.qll
all: use my script to delete outdated deprecations
2025-01-27 22:16:48 +01:00
InsecureRandomnessCustomizations.qll
File format
2024-01-27 14:07:36 +01:00
InsecureRandomnessQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
KernelOpenQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
LdapInjectionCustomizations.qll
Suggested Changes
2023-07-27 23:40:52 +02:00
LdapInjectionQuery.qll
all: use my script to delete outdated deprecations
2025-01-27 22:16:48 +01:00
LogInjectionQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
MassAssignmentCustomizations.qll
Use cfg nodes
2024-04-11 22:30:41 +01:00
MassAssignmentQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
OpenSSL.qll
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
PathInjectionCustomizations.qll
Ruby: Add sinks from external models
2023-11-27 09:18:00 +00:00
PathInjectionQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
ReflectedXSSQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
SensitiveActions.qll
Use shared SensitiveDataHeuristics
2025-07-14 11:38:47 +02:00
SensitiveGetQueryCustomizations.qll
Revert "Ruby: switch rb/sensitive-get-query back to using local flow"
2022-10-09 13:06:13 +01:00
SensitiveGetQueryQuery.qll
Ruby: fix TODOs left by the patch query
2025-01-17 13:21:54 +01:00
ServerSideRequestForgeryCustomizations.qll
Ruby: Include request forgery sinks from MaD
2024-02-26 11:34:11 +00:00
ServerSideRequestForgeryQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
SqlInjectionCustomizations.qll
Ruby: Model Editor support
2023-11-27 09:17:59 +00:00
SqlInjectionQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
StackTraceExposureCustomizations.qll
Ruby: Adopt shared type tracking library
2023-11-20 16:03:24 +01:00
StackTraceExposureQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
StoredXSSQuery.qll
all: use my script to delete outdated deprecations
2025-01-27 22:16:48 +01:00
TaintedFormatStringCustomizations.qll
Share TaintedFormatString between Ruby and JS
2022-03-21 12:51:46 +13:00
TaintedFormatStringQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
TaintedFormatStringSpecific.qll
move model of printf style calls to StringFormatters.qll
2022-10-17 13:16:34 +02:00
TemplateInjectionCustomizations.qll
Ruby: autoformat
2023-03-17 11:49:10 +00:00
TemplateInjectionQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
UnsafeCodeConstructionCustomizations.qll
all: use my script to delete outdated deprecations
2025-01-27 22:16:48 +01:00
UnsafeCodeConstructionQuery.qll
Ruby: resolve inserted TODOs
2025-01-23 11:48:46 +01:00
UnsafeDeserializationCustomizations.qll
Format: getValue now on one line
2024-01-30 15:22:16 +01:00
UnsafeDeserializationQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
UnsafeHtmlConstructionCustomizations.qll
add qldoc for ReflectedXssSanitizers
2024-03-22 17:58:25 +01:00
UnsafeHtmlConstructionQuery.qll
Ruby: resolve inserted TODOs
2025-01-23 11:48:46 +01:00
UnsafeShellCommandConstructionCustomizations.qll
all: use my script to delete outdated deprecations
2025-01-27 22:16:48 +01:00
UnsafeShellCommandConstructionQuery.qll
Ruby: resolve inserted TODOs
2025-01-23 11:48:46 +01:00
UrlRedirectCustomizations.qll
add tests for the fixes in the qhelp, and fix an FP that appeared
2024-04-08 12:00:27 +02:00
UrlRedirectQuery.qll
Ruby: mass enable diff-informed data flow
2025-01-17 13:21:52 +01:00
WeakSensitiveDataHashingCustomizations.qll
Ruby: fix some SensitiveDataSource definitions
2024-06-18 17:46:52 +01:00
WeakSensitiveDataHashingQuery.qll
Ruby: resolve inserted TODOs
2025-01-23 11:48:46 +01:00
XpathInjectionCustomizations.qll
qlformat
2023-07-14 12:04:03 +01:00
XpathInjectionQuery.qll
all: use my script to delete outdated deprecations
2025-01-27 22:16:48 +01:00
XSS.qll
add calls to .html_safe? as a shared XSS sanitizer
2024-03-22 17:46:39 +01:00