From 695e728ed5584641492df4e5c2ee8da511286b46 Mon Sep 17 00:00:00 2001 From: Tom Hvitved Date: Mon, 11 Mar 2024 11:59:31 +0100 Subject: [PATCH] Ruby: Lower access path limit to 1 for `OrmTracking` --- ruby/ql/lib/codeql/ruby/security/XSS.qll | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ruby/ql/lib/codeql/ruby/security/XSS.qll b/ruby/ql/lib/codeql/ruby/security/XSS.qll index a212369d4e6a..e5cf48bd0ef0 100644 --- a/ruby/ql/lib/codeql/ruby/security/XSS.qll +++ b/ruby/ql/lib/codeql/ruby/security/XSS.qll @@ -299,6 +299,8 @@ private module OrmTracking { } predicate isBarrierIn(DataFlow::Node node) { node instanceof DataFlow::SelfParameterNode } + + int accessPathLimit() { result = 1 } } import DataFlow::Global