qtil
advanced-security/qtil-ruby 0.0.2
Search

Module ActiveRecord

Provides modeling for the ActiveRecord library.

Import path

import codeql.ruby.frameworks.ActiveRecord

Classes

ActiveRecordAssociation

A method call inside an ActiveRecord model class that establishes an association between this model and another model.

ActiveRecordInstance

An instance of an ActiveRecord model object.

ActiveRecordInstanceMethodCall

A call whose receiver may be an active record model object

ActiveRecordModelClass

A ClassDeclaration for a class that inherits from ActiveRecord::Base. For example,

ActiveRecordModelClassMethodCall

A class method call whose receiver is an ActiveRecordModelClass.

ActiveRecordModelInstantiation

A node that may evaluate to one or more ActiveRecordModelClass instances.

ActiveRecordSqlExecutionRange

An SqlExecution::Range for an argument to a PotentiallyUnsafeSqlExecutingMethodCall that may be vulnerable to being controlled by user input.

PotentiallyUnsafeSqlExecutingMethodCall

A method call that may result in executing unintended user-controlled SQL queries if the getSqlFragmentSinkArgument() expression is tainted by unsanitized user-controlled input. For example, supposing that User is an ActiveRecord model class, then