Harry Maclean 314683d5fb Ruby: Improve UrlRedirect query using Rails routes ...

Handlers for non-GET requests aren't vulnerable to URL redirect attacks,
because browsers won't initiate non-GET requests when you click a link.

We can use Rails routing information, if present, to filter out any
handlers for non-GET requests.

2022-02-02 16:26:20 +13:00

..

cwe-022

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-078

Ruby: Add classes for detecting user input from graphql-ruby

2022-01-18 09:13:58 -07:00

cwe-079

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-089

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-094

Ruby: Add Module#const_get as a code execution

2022-01-06 13:03:41 +13:00

cwe-116

add the bad tag filter query to ruby

2021-10-26 15:25:12 +02:00

cwe-295

Move files to ruby subfolder

2021-10-15 11:47:28 +02:00

cwe-352

Ruby: add missing example rails action

2022-01-19 13:47:00 +00:00

cwe-502

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-601

Ruby: Improve UrlRedirect query using Rails routes

2022-02-02 16:26:20 +13:00

cwe-611

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-732

Ruby: add some rb/weak-cookie-configuration tests

2021-12-22 17:47:44 +00:00

cwe-798

Ruby: Data flow for keyword arguments/parameters

2021-12-17 15:42:29 +01:00

cwe-807-user-controlled-bypass

Ruby: Update expected test output after rebase

2021-12-22 15:56:20 +01:00

cwe-918

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-1333-exponential-redos

Merge pull request #7334 from github/hmac/regexp-interpolations

2022-01-19 14:43:58 +01:00

cwe-1333-polynomial-redos

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-1333-regexp-injection

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00