Commits

Breadcrumbs

History for

onbd7b2c4

User selector

All users

All time

Commit History

Commits on Mar 5, 2024

• Update expected output

  hvitved

  committed
  bd7b2c4

  Copy full SHA for bd7b2c4

Commits on Mar 1, 2024

• Ruby: more test cases for code injection via method

  p-

  committed
  4adc373

  Copy full SHA for 4adc373

• Ruby: sinks for code injection via calls to `method`

  p-

  committed
  a693c6d

  Copy full SHA for a693c6d

• Add test cases and improve controller model

  joefarebrother

  committed
  0b7b7ea

  Copy full SHA for 0b7b7ea

Commits on Feb 27, 2024

• Ruby: Rework hidden synthetic data-flow nodes

  hvitved

  committed
  914a605

  Copy full SHA for 914a605

• Ruby: Add another data flow test

  hvitved

  committed
  994d990

  Copy full SHA for 994d990

• Merge pull request #15718 from joefarebrother/ruby-arel-sqlliteral

  Show description for 3ab6f22
  joefarebrother

  authored
  3ab6f22

  Copy full SHA for 3ab6f22

• Merge pull request #15717 from hvitved/csharp/view-cfg

  Show description for bbeee8f
  hvitved

  authored
  bbeee8f

  Copy full SHA for bbeee8f

Commits on Feb 26, 2024

• Ruby: Update test

  hmac

  committed
  8212f5d

  Copy full SHA for 8212f5d

• revert YAML.qll and yaml sinks to previous PR, make a separate experimental query only for yaml

  

  am0o0

  authored and

  hmac

  committed
  32f5667

  Copy full SHA for 32f5667

• update expected test file

  

  am0o0

  authored and

  hmac

  committed
  c582ea6

  Copy full SHA for c582ea6

• fix test file

  

  am0o0

  authored and

  hmac

  committed
  9c5c8c8

  Copy full SHA for 9c5c8c8

• fix qldoc and test files

  

  am0o0

  authored and

  hmac

  committed
  464e2e4

  Copy full SHA for 464e2e4

• make seperate steps for YAML.parse* and use `getAsuccessor*()` to reach final to_ruby method call, All parts have Rewritten with API graphs exclusively

  

  am0o0

  authored and

  hmac

  committed
  1410574

  Copy full SHA for 1410574

• Update test output

  joefarebrother

  committed
  386defc

  Copy full SHA for 386defc

• Move `View CFG` implementation from Ruby/Swift into shared library

  hvitved

  committed
  5b6e76c

  Copy full SHA for 5b6e76c

• Model Arel::Nodes::SqlLiteral.new

  joefarebrother

  committed
  2257df5

  Copy full SHA for 2257df5

Commits on Feb 22, 2024

• Merge pull request #15604 from p-/p--rails-more-request-sources

  Show description for fbc6892
  hmac

  authored
  fbc6892

  Copy full SHA for fbc6892

• Merge pull request #15619 from joefarebrother/ruby-activerecord-connection

  Show description for 67e8f17
  joefarebrother

  authored
  67e8f17

  Copy full SHA for 67e8f17

• Merge pull request #15671 from joefarebrother/ruby-activerecord-extra-args

  Show description for 1f409b0
  joefarebrother

  authored
  1f409b0

  Copy full SHA for 1f409b0

• Address reveiw comment - add `create` nd remove `select_insert`

  joefarebrother

  committed
  92bdd63

  Copy full SHA for 92bdd63

• Ruby: Fix bug in `allowParameterReturnInSelf`

  hvitved

  committed
  23869fc

  Copy full SHA for 23869fc

• Ruby: Add another variable capture test

  hvitved

  committed
  007d08e

  Copy full SHA for 007d08e

Commits on Feb 20, 2024

• Add addtional arguments as sinks to certain methods

  joefarebrother

  committed
  10da4d1

  Copy full SHA for 10da4d1

Commits on Feb 15, 2024

• Add tests and change note

  joefarebrother

  committed
  e36b9f4

  Copy full SHA for e36b9f4

• Merge pull request #15520 from hmac/hmac-erb-raw-output-directive

  Show description for a9abba5
  hmac

  authored
  a9abba5

  Copy full SHA for a9abba5

Commits on Feb 13, 2024

• Ruby: add sources on request object of Rails

  p-

  committed
  2f7b946

  Copy full SHA for 2f7b946

Commits on Feb 12, 2024

• Merge pull request #15566 from hmac/hmac-actioncontroller-regex

  Show description for 3d9f9af
  hmac

  authored
  3d9f9af

  Copy full SHA for 3d9f9af

• Merge pull request #15521 from hmac/hmac-ar-connection

  Show description for 99497e5
  hmac

  authored
  99497e5

  Copy full SHA for 99497e5

• Ruby: Recognise raw Erb output as XSS sink

  hmac

  committed
  5af58d2

  Copy full SHA for 5af58d2

Commits on Feb 9, 2024

• Ruby: Fix SSA inconsistency

  hvitved

  committed
  37d7741

  Copy full SHA for 37d7741

• Capture flow: Take overwrites in nested scopes into account

  hvitved

  committed
  1ea7717

  Copy full SHA for 1ea7717

• Ruby: Add another captured variable data flow test

  hvitved

  committed
  0c43ad4

  Copy full SHA for 0c43ad4

• Ruby: Add empty provenance column to expected files.

  aschackmull

  committed
  35a3aa0

  Copy full SHA for 35a3aa0

• Ruby: Fix Rails view file regex

  Show description for 3a90d78
  hmac

  committed
  3a90d78

  Copy full SHA for 3a90d78