Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Ruby: Add support for Grape Framework #20427

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 12 commits into
base: main
Choose a base branch
from
+685 −0
Open

Ruby: Add support for Grape Framework #20427

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
d295acc
Add initial support for Ruby Grape
felickz Sep 12, 2025
738ab6f
Refactor Grape framework code for improved readability and consistency
felickz Sep 12, 2025
3252bd3
Enhance Grape framework with additional data flow modeling and helper…
felickz Sep 13, 2025
5cfa6e8
Add support for route parameters(+ blocks), headers, and cookies in G…
felickz Sep 13, 2025
a8d4d6b
Apply naming standards + changenote
felickz Sep 16, 2025
6cea939
Merge branch 'main' into ruby-framework-grape
felickz Sep 16, 2025
19cb187
Update ruby/ql/lib/codeql/ruby/frameworks/Grape.qll
felickz Sep 16, 2025
fc98cd8
Fix naming standards
felickz Sep 16, 2025
0d0ce32
Merge branch 'ruby-framework-grape' of github.com:felickz/codeql into…
felickz Sep 16, 2025
ffd32ef
codeql query format
felickz Sep 16, 2025
c5e3be2
Grape - detect params calls inside helper methods
felickz Sep 16, 2025
141b470
Merge branch 'main' into ruby-framework-grape
felickz Sep 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Refactor Grape framework code for improved readability and consistency
  • Loading branch information
@felickz
felickz committed Sep 12, 2025
commit 738ab6fba7ff64b97c60cf7f2593f136c5bf0f04
2 changes: 1 addition & 1 deletion ruby/ql/lib/codeql/ruby/frameworks/Grape.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,7 +115,7 @@ class GrapeEndpoint extends DataFlow::CallNode {
* Grape parameters available via the `params` method within an endpoint.
*/
class GrapeParamsSource extends Http::Server::RequestInputAccess::Range {
GrapeParamsSource() {
GrapeParamsSource() {
this.asExpr().getExpr() instanceof GrapeParamsCall
}

Expand Down
2 changes: 1 addition & 1 deletion ruby/ql/test/library-tests/frameworks/grape/Grape.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ import codeql.ruby.AST

query predicate grapeAPIClasses(GrapeAPIClass api) { any() }

query predicate grapeEndpoints(GrapeAPIClass api, GrapeEndpoint endpoint, string method, string path) {
query predicate grapeEndpoints(GrapeAPIClass api, GrapeEndpoint endpoint, string method, string path) {
endpoint = api.getAnEndpoint() and
method = endpoint.getHttpMethod() and
path = endpoint.getPath()
Expand Down
16 changes: 8 additions & 8 deletions ruby/ql/test/library-tests/frameworks/grape/app.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ class MyAPI < Grape::API
user_agent = headers['User-Agent']
"Hello #{name}!"
end

desc 'Post endpoint with params'
params do
requires :message, type: String
Expand All @@ -18,36 +18,36 @@ class MyAPI < Grape::API
msg = params[:message]
{ status: 'received', message: msg }
end

desc 'Put endpoint accessing request'
put '/update/:id' do
id = params[:id]
body = request.body.read
{ id: id, body: body }
end
desc 'Delete endpoint'

desc 'Delete endpoint'
delete '/items/:id' do
params[:id]
end

desc 'Patch endpoint'
patch '/items/:id' do
params[:id]
end

desc 'Head endpoint'
head '/status' do
# Just return status
end

desc 'Options endpoint'
options '/info' do
headers['Access-Control-Allow-Methods'] = 'GET, POST, OPTIONS'
end
end

class AdminAPI < Grape::API
class AdminAPI < Grape::API
get '/admin' do
params[:token]
end
Expand Down