Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ruby: Use the new dataflow API for checked in queries #14124

Merged
merged 51 commits into from
Sep 13, 2023
Merged

Ruby: Use the new dataflow API for checked in queries #14124

merged 51 commits into from
Sep 13, 2023

Commits on Aug 31, 2023

  1. Ruby: configsig rb/hardcoded-data-interpreted-as-code

    @alexrford
    alexrford committed Aug 31, 2023
    Configuration menu
    Copy the full SHA
    ce35d69 View commit details
    Browse the repository at this point in the history

Commits on Sep 3, 2023

  1. Ruby: configsig rb/clear-text-logging-sensitive-data

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    2a2f21d View commit details
    Browse the repository at this point in the history

  2. Ruby: configsig rb/clear-text-storage-sensitive-data

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    6fa267a View commit details
    Browse the repository at this point in the history

  3. Ruby: configsig rb/code-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    b1a49dd View commit details
    Browse the repository at this point in the history

  4. Ruby: configsig rb/command-line-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    377570f View commit details
    Browse the repository at this point in the history

  5. Ruby: configsig rb/user-controlled-bypass

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    2536f1a View commit details
    Browse the repository at this point in the history

  6. Ruby: configsig rb/http-to-file-access

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    c973fc1 View commit details
    Browse the repository at this point in the history

  7. Ruby: renames for rb/insecure-download

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    a8ad0d8 View commit details
    Browse the repository at this point in the history

  8. Ruby: configsig rb/kernel-open

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    d46eceb View commit details
    Browse the repository at this point in the history

  9. Ruby: renames for rb/ldap-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    eb34bbb View commit details
    Browse the repository at this point in the history

  10. Ruby: renames for rb/log-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    867e47b View commit details
    Browse the repository at this point in the history

  11. Ruby: configsig rb/path-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    ad2bbfb View commit details
    Browse the repository at this point in the history

  12. Ruby: configsig rb/reflected-xss

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    593d9a4 View commit details
    Browse the repository at this point in the history

  13. Ruby: configsig rb/sensitive-get-query

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    df91735 View commit details
    Browse the repository at this point in the history

  14. Ruby: configsig rb/request-forgery

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    ba8ff07 View commit details
    Browse the repository at this point in the history

  15. Ruby: configsig rb/sql-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    bf1cb33 View commit details
    Browse the repository at this point in the history

  16. Ruby: configsig rb/stack-trace-exposure

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    030aae5 View commit details
    Browse the repository at this point in the history

  17. Ruby: renames for rb/stored-xss

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    f5e4339 View commit details
    Browse the repository at this point in the history

  18. Ruby: configsig rb/tainted-format-string

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    0a73ebd View commit details
    Browse the repository at this point in the history

  19. Ruby: configsig rb/server-side-template-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    3e23a6e View commit details
    Browse the repository at this point in the history

  20. Ruby: configsig rb/unsafe-code-construction

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    461bc0d View commit details
    Browse the repository at this point in the history

  21. Ruby: configsig rb/unsafe-deserialization

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    8ad6c72 View commit details
    Browse the repository at this point in the history

  22. Ruby: configsig rb/html-constructed-from-input

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    f03f670 View commit details
    Browse the repository at this point in the history

  23. Ruby: configsig rb/shell-command-constructed-from-input

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    f79796a View commit details
    Browse the repository at this point in the history

  24. Ruby: configsig rb/url-redirection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    42cd586 View commit details
    Browse the repository at this point in the history

  25. Ruby: renames for rb/xpath-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    77f3a70 View commit details
    Browse the repository at this point in the history

  26. Ruby: configsig rb/regex/badly-anchored-regexp

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    04d3d04 View commit details
    Browse the repository at this point in the history

  27. Ruby: configsig rb/polynomial-redos

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    494b7b3 View commit details
    Browse the repository at this point in the history

  28. Ruby: configsig rb/regexp-injection

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    7445fc4 View commit details
    Browse the repository at this point in the history

  29. Ruby: configsig rb/unicode-bypass-validation

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    ebf2a2e View commit details
    Browse the repository at this point in the history

  30. Ruby: configsig rb/zip-slip

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    b6d12f8 View commit details
    Browse the repository at this point in the history

  31. Ruby: configsig rb/overly-permissive-file

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    4d1684e View commit details
    Browse the repository at this point in the history

  32. Ruby: configsig rb/hardcoded-credentials

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    cdc788b View commit details
    Browse the repository at this point in the history

  33. Ruby: configsig rb/user-controlled-file-decompression

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    39af2d2 View commit details
    Browse the repository at this point in the history

  34. Ruby: configsig rb/manually-checking-http-verb

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    6c06def View commit details
    Browse the repository at this point in the history

  35. Ruby: configsig rb/weak-params

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    f24102e View commit details
    Browse the repository at this point in the history

  36. Ruby: configsig rb/meta/tainted-nodes

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    956207b View commit details
    Browse the repository at this point in the history

  37. Ruby: configsig rb/xxe

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    73ed569 View commit details
    Browse the repository at this point in the history

  38. Ruby: changenote for using new dataflow api

    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    e399eac View commit details
    Browse the repository at this point in the history

  39. Revert "Ruby: configsig rb/http-to-file-access" 

    This reverts commit e77ba15.
    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    bf6837c View commit details
    Browse the repository at this point in the history

  40. Revert "Ruby: configsig rb/tainted-format-string" 

    This reverts commit f5860cb.
    @alexrford
    alexrford committed Sep 3, 2023
    Configuration menu
    Copy the full SHA
    9885173 View commit details
    Browse the repository at this point in the history

Commits on Sep 7, 2023

  1. Ruby: Use a newtype instead of DataFlow::FlowState for unicode-bypass… 

    …-validation
    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    dfc3b33 View commit details
    Browse the repository at this point in the history

  2. Ruby: Use a newtype instead of DataFlow::FlowState for code-injection

    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    0d7d5a3 View commit details
    Browse the repository at this point in the history

  3. Ruby: Use a newtype instead of DataFlow::FlowState for hardcoded-data

    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    75fdde5 View commit details
    Browse the repository at this point in the history

  4. Ruby: Use a newtype instead of DataFlow::FlowState for insecure-download

    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    a893911 View commit details
    Browse the repository at this point in the history

  5. Ruby: un-private PathGraph imports

    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    13300a2 View commit details
    Browse the repository at this point in the history

  6. Ruby: qlformat

    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    0aee7f6 View commit details
    Browse the repository at this point in the history

  7. Ruby: avoid toString in query warning

    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    4a01de1 View commit details
    Browse the repository at this point in the history

  8. Ruby: fix qldoc warnings

    @alexrford
    alexrford committed Sep 7, 2023
    Configuration menu
    Copy the full SHA
    947fa0d View commit details
    Browse the repository at this point in the history

  9. Merge branch 'main' into rb/dataflow-query-refactor

    @alexrford
    alexrford authored Sep 7, 2023
    Configuration menu
    Copy the full SHA
    5b013dd View commit details
    Browse the repository at this point in the history

Commits on Sep 13, 2023

  1. Ruby: fix missing qldoc

    @alexrford
    alexrford committed Sep 13, 2023
    Configuration menu
    Copy the full SHA
    b5ec99c View commit details
    Browse the repository at this point in the history