File tree Expand file tree Collapse file tree 3 files changed +22
-2
lines changed
ruby/ql/test/query-tests/security/cwe-300 Expand file tree Collapse file tree 3 files changed +22
-2
lines changed Original file line number Diff line number Diff line change
1
+ failures
2
+ #select
3
+ | Gemfile:2:8:2:28 | "http://rubygems.org" | Dependency source URL uses the unencrypted protocol HTTP. Use HTTPS instead. |
4
+ | Gemfile:3:8:3:27 | "ftp://rubygems.org" | Dependency source URL uses the unencrypted protocol FTP. Use FTPS or SFTP instead. |
5
+ | Gemfile:8:18:8:36 | "http://github.com" | Dependency source URL uses the unencrypted protocol HTTP. Use HTTPS instead. |
6
+ | Gemfile:9:18:9:35 | "ftp://github.com" | Dependency source URL uses the unencrypted protocol FTP. Use FTPS or SFTP instead. |
7
+ | Gemfile:14:25:14:51 | "http://github.com/#{...}" | Dependency source URL uses the unencrypted protocol HTTP. Use HTTPS instead. |
8
+ | Gemfile:15:25:15:50 | "ftp://github.com/#{...}" | Dependency source URL uses the unencrypted protocol FTP. Use FTPS or SFTP instead. |
9
+ | Gemfile:25:5:25:31 | "http://github.com/#{...}" | Dependency source URL uses the unencrypted protocol HTTP. Use HTTPS instead. |
10
+ | Gemfile:29:5:29:30 | "ftp://github.com/#{...}" | Dependency source URL uses the unencrypted protocol FTP. Use FTPS or SFTP instead. |
11
+ | Gemfile:41:26:41:57 | "http://github.com/jwt/ruby-jwt" | Dependency source URL uses the unencrypted protocol HTTP. Use HTTPS instead. |
12
+ | Gemfile:42:26:42:56 | "ftp://github.com/jwt/ruby-jwt" | Dependency source URL uses the unencrypted protocol FTP. Use FTPS or SFTP instead. |
13
+ | Gemfile:47:29:47:60 | "http://github.com/jwt/ruby-jwt" | Dependency source URL uses the unencrypted protocol HTTP. Use HTTPS instead. |
14
+ | Gemfile:48:29:48:59 | "ftp://github.com/jwt/ruby-jwt" | Dependency source URL uses the unencrypted protocol FTP. Use FTPS or SFTP instead. |
15
+ | Gemfile:53:29:53:49 | "http://rubygems.org" | Dependency source URL uses the unencrypted protocol HTTP. Use HTTPS instead. |
16
+ | Gemfile:54:29:54:48 | "ftp://rubygems.org" | Dependency source URL uses the unencrypted protocol FTP. Use FTPS or SFTP instead. |
Original file line number Diff line number Diff line change @@ -2,8 +2,8 @@ import ruby
2
2
import TestUtilities.InlineExpectationsTest
3
3
import codeql.ruby.security.InsecureDependencyQuery
4
4
5
- class InsecureDependencyResolutionTest extends InlineExpectationsTest {
6
- InsecureDependencyResolutionTest ( ) { this = "InsecureDependencyResolutionTest " }
5
+ class InsecureDependencyTest extends InlineExpectationsTest {
6
+ InsecureDependencyTest ( ) { this = "InsecureDependencyTest " }
7
7
8
8
override string getARelevantTag ( ) { result = "BAD" }
9
9
@@ -17,3 +17,7 @@ class InsecureDependencyResolutionTest extends InlineExpectationsTest {
17
17
)
18
18
}
19
19
}
20
+
21
+ from Expr url , string msg
22
+ where insecureDependencyUrl ( url , msg )
23
+ select url , msg
You can’t perform that action at this time.
0 commit comments