Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Mar 22, 2024

• add calls to `.html_safe?` as a shared XSS sanitizer

  erik-krogh

  committed
  c60cec3

  Copy full SHA for c60cec3

Commits on Mar 12, 2024

• Ruby: Lower access path limit to 1 for `OrmTracking`

  hvitved

  committed
  695e728

  Copy full SHA for 695e728

Commits on Mar 7, 2024

• Ruby: Exclude calls with arguments from `OrmFieldAsSource`

  hvitved

  committed
  85782ff

  Copy full SHA for 85782ff

Commits on Feb 12, 2024

• Ruby: Recognise raw Erb output as XSS sink

  hmac

  committed
  5af58d2

  Copy full SHA for 5af58d2

Commits on Oct 7, 2023

• delete the deprecated `isBarrierGuard` predicate from the shared dataflow library, and its uses

  erik-krogh

  committed
  4bc4e08

  Copy full SHA for 4bc4e08

Commits on Jun 8, 2023

• Ruby: restrict ORM tracking to calls

  asgerf

  committed
  d6741f6

  Copy full SHA for d6741f6

Commits on Jun 2, 2023

• delete old deprecations

  erik-krogh

  committed
  44b6366

  Copy full SHA for 44b6366

Commits on Mar 23, 2023

• Python/Ruby/Swift: Rename references.

  aschackmull

  committed
  d0b7ffd

  Copy full SHA for d0b7ffd

Commits on Mar 10, 2023

• Ruby: Autoformat

  aschackmull

  committed
  a5d2299

  Copy full SHA for a5d2299

Commits on Mar 7, 2023

• Ruby: Rewrite Stored XSS query to use new data flow interface

  hvitved

  committed
  b6a709d

  Copy full SHA for b6a709d

Commits on Jan 20, 2023

• Ruby: generalize rails flow step for accessing render locals hash in view

  alexrford

  committed
  e5fbc92

  Copy full SHA for e5fbc92

Commits on Jan 10, 2023

• Ruby: Remove omittable exists variables

  atorralba

  committed
  c9d1cd9

  Copy full SHA for c9d1cd9

Commits on Oct 28, 2022

• Ruby: update some uses of getConstantValue()

  asgerf

  committed
  436cc60

  Copy full SHA for 436cc60

Commits on Oct 18, 2022

• remove FPs in rb/stored-xss from spurious sources

  erik-krogh

  committed
  8a3e255

  Copy full SHA for 8a3e255

• simplify the modeling of html_safe. Any call to html_safe is now considered an XSS sink

  erik-krogh

  committed
  5a98f66

  Copy full SHA for 5a98f66

• Merge pull request #10867 from hvitved/ruby/orm-tracking-redundant-additional-step

  Show description for 19bcd28
  hvitved

  authored
  19bcd28

  Copy full SHA for 19bcd28

• Ruby: Remove redundant additional flow step from `OrmTracking::Configuration`

  hvitved

  committed
  1266d24

  Copy full SHA for 1266d24

Commits on Oct 16, 2022

• Ruby: Restrict XSS header sinks

  Show description for 0e6322d
  hmac

  committed
  0e6322d

  Copy full SHA for 0e6322d

• Ruby: Consider header writes as XSS sinks

  hmac

  committed
  8ae86cf

  Copy full SHA for 8ae86cf

Commits on Oct 13, 2022

• Ruby: Add kind to Http::Server::RequestInputAccess

  Show description for 4686718
  hmac

  committed
  4686718

  Copy full SHA for 4686718

Commits on Oct 4, 2022

• Ruby: fix a couple of references to deprecated names

  nickrolfe

  committed
  2e80926

  Copy full SHA for 2e80926

• Ruby: remove public abstract classes for Action{View,Controller}

  nickrolfe

  committed
  a738f1d

  Copy full SHA for a738f1d

Commits on Sep 26, 2022

• Ruby: Model javascript_include_tag and friends

  hmac

  committed
  1d693d3

  Copy full SHA for 1d693d3

• Ruby: Model ActionView helper XSS sinks

  hmac

  committed
  ed0c85e

  Copy full SHA for ed0c85e

Commits on Sep 13, 2022

• Ruby: Do not expose AST layer through `ruby.qll`

  hvitved

  committed
  007ab2b

  Copy full SHA for 007ab2b

Commits on Jun 20, 2022

• Ruby: Deprecate and replace BarrierGuard class.

  aschackmull

  committed
  1b13790

  Copy full SHA for 1b13790

Commits on Mar 24, 2022

• Ruby: separate constant propagation of regexps from strings

  nickrolfe

  committed
  0613fda

  Copy full SHA for 0613fda

Commits on Mar 11, 2022

• RB: add missing QLDoc

  erik-krogh

  committed
  c2787ee

  Copy full SHA for c2787ee

• patch upper-case acronyms to be PascalCase

  erik-krogh

  committed
  69353bb

  Copy full SHA for 69353bb

Commits on Jan 21, 2022

• Ruby: Distinguish symbols from strings in `ConstantValue`

  hvitved

  committed
  85e1cda

  Copy full SHA for 85e1cda

• Ruby: Replace `getValueText` with `getConstantValue`

  hvitved

  committed
  aa9cfeb

  Copy full SHA for aa9cfeb

Commits on Dec 16, 2021

• Ruby: SimpleParameter is not an Expr

  aibaars

  committed
  cdbd8b2

  Copy full SHA for cdbd8b2

Commits on Dec 7, 2021

• rephrase extensions as aliases

  ginsbach

  committed
  b2c1b55

  Copy full SHA for b2c1b55

• fix dependency cycle by removing superfluous classes

  ginsbach

  committed
  da43984

  Copy full SHA for da43984

Commits on Oct 15, 2021

• Move files to ruby subfolder

  aibaars

  committed
  976dadd

  Copy full SHA for 976dadd

Loading