mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
1bbe4b1cfb
* chore: Exclude CLAUDE.md from Cargo.toml * feat: add callgraph module and integrate into main analysis flow * feat: enhance CLI with new severity filtering and analysis modes * feat: update CHANGELOG with recent enhancements and fixes to severity filtering and output handling * feat: implement state-model dataflow analysis for resource lifecycle and auth state * feat: enhance diagnostic output formatting and add evidence structure * feat: implement attack surface ranking for diagnostics with scoring and sorting * feat: add comprehensive documentation for installation, usage, and rules reference * feat: add multiple language support for command execution and evaluation endpoints * feat: implement inline suppression for findings using `nyx:ignore` comments * feat: add confidence levels to AST patterns and update output structure * feat: implement low-noise prioritization system with category filtering, rollup grouping, and configurable budgets * feat: bump version to 0.4.0 and update changelog with new features and improvements * feat: add dead code allowances to various functions in mod.rs and real_world_tests.rs
51 lines
873 B
Ruby
51 lines
873 B
Ruby
# Positive fixture: each snippet should trigger the named pattern.
|
|
|
|
# rb.code_exec.eval
|
|
def trigger_eval(code)
|
|
eval(code)
|
|
end
|
|
|
|
# rb.code_exec.instance_eval
|
|
def trigger_instance_eval(obj, code)
|
|
obj.instance_eval(code)
|
|
end
|
|
|
|
# rb.code_exec.class_eval
|
|
def trigger_class_eval(klass, code)
|
|
klass.class_eval(code)
|
|
end
|
|
|
|
# rb.cmdi.backtick
|
|
def trigger_backtick
|
|
`uname -a`
|
|
end
|
|
|
|
# rb.cmdi.system_interp
|
|
def trigger_system_interp(cmd)
|
|
system("run #{cmd}")
|
|
end
|
|
|
|
# rb.deser.yaml_load
|
|
def trigger_yaml_load(data)
|
|
YAML.load(data)
|
|
end
|
|
|
|
# rb.deser.marshal_load
|
|
def trigger_marshal_load(data)
|
|
Marshal.load(data)
|
|
end
|
|
|
|
# rb.reflection.send_dynamic
|
|
def trigger_send_dynamic(obj, method_name)
|
|
obj.send(method_name)
|
|
end
|
|
|
|
# rb.reflection.constantize
|
|
def trigger_constantize(name)
|
|
name.constantize
|
|
end
|
|
|
|
# rb.ssrf.open_uri
|
|
def trigger_open_uri
|
|
open("https://example.com/api")
|
|
end
|