Skip to content

Conversation

@erik-krogh
Copy link
Contributor

@erik-krogh erik-krogh commented Oct 5, 2022

Gets a TP/TN for CVE-2021-31799 (together with #10680).

The summary for reject() would propagate flow from array-elements to the last parameter of the block.
However, the reject() method on Arrays always sends those elements to the first parameter.

In the vast majority of cases that is not an issue (there is usually exactly one parameter when reject is used with arrays).
But that is not the case in rdoc.

I will take a look all the other flow-summaries for arrays that use the lastBlockParam() utility predicate.
But only after I get a 👍 on how I've changed reject().
So this PR is ready-for-review, but not ready-for-merge.

@erik-krogh erik-krogh changed the title change the summary for reject() to always flow to the first block par… RB: change the summary for reject() to always flow to the first block parameter Oct 5, 2022
@github-actions github-actions bot added the Ruby label Oct 5, 2022
@erik-krogh erik-krogh added the no-change-note-required This PR does not need a change note label Oct 5, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no-change-note-required This PR does not need a change note Ruby

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant