CodeQL library for Ruby
codeql/ruby-all 0.8.15-dev (changelog, source)
Search

Module ConditionalBypass

Provides default sources, sinks, and sanitizers for reasoning about bypass of sensitive action guards, as well as extension points for adding your own.

Import path

import codeql.ruby.security.ConditionalBypassCustomizations

Classes

RemoteFlowSourceAsSource

A source of remote user input, considered as a flow source for bypass of sensitive action guards.

Sanitizer

A sanitizer for bypass of sensitive action guards.

SensitiveActionGuardConditional

A conditional that guards a sensitive action, e.g. ok in if (ok) login().

Sink

A data flow sink for bypass of sensitive action guards.

Source

A data flow source for bypass of sensitive action guards.