Tom Hvitved 007ab2b7ce Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

..

cwe-020

print a correct range for ranges that doesn't contain any alpha-numeric chars

2022-08-30 13:57:11 +02:00

cwe-022

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-078

Ruby: Flow through hash-splat parameters

2022-05-25 12:37:22 +02:00

cwe-079

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-089

expand query tests for cwe-089

2022-07-07 19:23:57 +00:00

cwe-094

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-116

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

cwe-117

Ruby: add rb/log-injection test cases

2022-08-10 16:17:37 +01:00

cwe-134

Ruby: Avoid FP in TaintedFormatString query

2022-03-21 12:51:47 +13:00

cwe-295

Ruby: Fix alert-msg logic for RequestWithoutValidation.ql

2022-08-19 15:50:09 +02:00

cwe-300

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

cwe-312

Ruby: update test output

2022-03-10 18:27:06 +00:00

cwe-327

ruby: update rb/weak-cryptographic-algorithm to specify the block mode if appropriate

2022-05-13 16:32:30 +01:00

cwe-352

Ruby: add missing example rails action

2022-01-19 13:47:00 +00:00

cwe-502

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-506

Ruby: make hex-escaped strings ("\xCD\xEF" etc.) sources of hardcoded data

2022-08-26 09:33:03 +01:00

cwe-601

Ruby: Model redirect_back and redirect_back_or_to

2022-06-20 13:36:02 +12:00

cwe-611

update expected output of tests

2022-08-22 21:41:47 +02:00

cwe-732

Ruby: add some rb/weak-cookie-configuration tests

2021-12-22 17:47:44 +00:00

cwe-798

Ruby: Data flow for keyword arguments/parameters

2021-12-17 15:42:29 +01:00

cwe-807-user-controlled-bypass

Ruby: Update expected test output after rebase

2021-12-22 15:56:20 +01:00

cwe-829

Ruby: Do not expose AST layer through ruby.qll

2022-09-13 19:59:56 +02:00

cwe-912

Ruby: Add rb/http-to-file-access query

2022-03-22 11:09:08 +13:00

cwe-918

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-1333-exponential-redos

add further normalization of char classses

2022-06-23 14:36:25 +02:00

cwe-1333-polynomial-redos

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

cwe-1333-regexp-injection

Ruby: Add flow summaries for Array/Enumerable methods

2021-12-22 15:56:20 +01:00

decompression-api

update test expectation

2022-06-20 17:27:33 +00:00