Commits

History for

oncodeql-cli/v2.13.5

Commits on May 26, 2023

Merge pull request #12992 from Sim4n6/ruby-UBV
aibaars
authored
e046690

Commits on May 25, 2023

Added one more example to the qhelp
Sim4n6
committed
09c97ce

Commits on May 20, 2023

Replaced CGI.escapeHTML() with the html_escape()
Sim4n6
committed
0a0a6dd
Updated qhelp for the use of html_escape()
Sim4n6
committed
f5ff508
Update ruby/ql/src/experimental/cwe-176/examples/unicode_normalization.rb

Sim4n6
and
aibaars
authored
e345d7d
CWE-179 and CWE-180 are included in metadata
Sim4n6
committed
7cd1fd4
Deleted the ugly flowchart.
Sim4n6
committed
c9c7179
Qhelp formatting
Sim4n6
committed
c3c65ca
Update ruby/ql/src/experimental/cwe-176/UnicodeBypassValidation.qhelp

Sim4n6
and
aibaars
authored
8dcf139

Commits on May 2, 2023

Add Unicode Bypass Validation query, test and help file
Sim4n6
committed
019b85b

Commits on Apr 13, 2023

Update examples
maikypedia
committed
64cf3ad

Commits on Mar 17, 2023

Ruby: typo
alexrford
committed
76ed56d
Ruby: remove extra opening p tag
alexrford
committed
ee62881
Merge branch 'main' into maikypedia/ruby-ssti
alexrford
authored
60f3138

Commits on Mar 16, 2023

Ruby: `Ssa::WriteDefinition::getWriteAccess` should return a CFG node
hvitved
committed
1d0b3d4

Commits on Mar 8, 2023

Move query to experimental
maikypedia
committed
5a9a90d

Commits on Feb 23, 2023

move query to experimental folder
gregxsunday
committed
34b441c

Commits on Dec 14, 2022

Tag all security queries in supported languages' experimental directories with an experimental tag
turbo
committed
4ec401a

Commits on Oct 31, 2022

Ruby: port part of ActionController model
asgerf
committed
b4b34cc

Commits on Oct 13, 2022

spelling: mapping
jsoref
committed
8078f91

Commits on Sep 21, 2022

Merge pull request #10376 from hvitved/ruby/no-ast-by-default
hvitved
authored
a9f2e52

Commits on Sep 13, 2022

Ruby: Do not expose AST layer through `ruby.qll`
hvitved
committed
007ab2b
apply suggestions from review
erik-krogh
committed
063c76b

Commits on Jul 25, 2022

Merge pull request #9696 from thiggy1342/experimental-strong-params
hmac
authored
cb3ebee

Commits on Jul 22, 2022

this one should have no tag
thiggy1342
committed
0c0ba92
correct cwe tagged
thiggy1342
committed
f39ca1a

Commits on Jul 21, 2022

Update ruby/ql/src/experimental/weak-params/WeakParams.ql

thiggy1342
and
hmac
authored
486a394
Update ruby/ql/src/experimental/manually-check-http-verb/ManuallyCheckHttpVerb.ql

thiggy1342
and
hmac
authored
cc958dc

Commits on Jul 19, 2022

style tweak for checking multiple method names
thiggy1342
authored
9586259
fix path problem output
thiggy1342
authored
304203a

Commits on Jul 14, 2022

formatting query
thiggy1342
authored
3dd61ca
formatting in qhelp
thiggy1342
authored
ee79834
add qhelp file
thiggy1342
authored
ae63436
use taint config for data flow
thiggy1342
authored
2cc7033

Commits on Jul 13, 2022

tweak tests more
thiggy1342
authored
7129002