CodeQL library for Ruby
codeql/ruby-all 0.8.15-dev (changelog, source)
Search

Module IncompleteMultiCharacterSanitizationQuery

Provides shared predicates for reasoning about improper multi-character sanitization.

Import path

import codeql.ruby.security.IncompleteMultiCharacterSanitizationQuery

Imports

IncompleteMultiCharacterSanitizationSpecific

Provides language-specific predicates for reasoning about improper multi-character sanitization.

Predicates

isResult

Holds if replace has a pattern argument containing a regular expression dangerous which matches a dangerous string beginning with prefix, in an attempt to avoid a vulnerability of kind kind.

matchesDangerousPrefix

Holds if t may match the dangerous prefix and some suffix, indicating intent to prevent a vulnerability of kind kind.

problems

Holds if replace has a pattern argument containing a regular expression dangerous which matches a dangerous string beginning with prefix. msg is the alert we report.