Emmanuel Quincerot

SQL injection false negative for connections on complex objects

2

### Background Brakeman version: 5.2.1 Rails version: 6 and 7 Ruby version: 3.0.3p157 def not_detected_injection_risk(query) base_record = [ActiveRecord::Base].find {true} base_record.connection.exec_query("SELECT * where x = #{query}") end def detected_injection_risk(query) base_record =...

Mock helper WIP

6

Preview of mock helper we may have

Octopus success despite of `git-write-tree` error

2

When running git octopus on two branches, with some specific conditions I could not be able to describe (at least 2 branches almost identical with just the first commit changing),...

Name of property writeChanged

1

What about renaming writeChanged into writeChanges? The same for ignoreChanged into ignoreChanges

What about having helpers for indexes analysis?

1

Hello, First of all, thanks for your gem! That's very useful. I developed some wrapper to pg_query to ease the parsing of pg_query tree for indexes. Do you think that...

perf: avoid unnecessary count on getManyAndCount

2

### Description of change When `getManyAndCount` is called, stop execute the `count` query if it can be deduced from the number of returned rows. This will **increase performance** by avoiding...