Ruby: Add change note for rb/tainted-format-string

hmac · hmac · commit c73dc8ad0c95 · 2022-03-21T12:51:47.000+13:00
diff --git a/ruby/ql/src/change-notes/2022-03-10-rb-tainted-format-string.md b/ruby/ql/src/change-notes/2022-03-10-rb-tainted-format-string.md
@@ -0,0 +1,4 @@
+---
+category: newQuery
+---
+* Added a new query, `rb/http-tainted-format-string`. The query finds cases where data from remote user input is used in a string formatting method in a way that allows arbitrary format specifiers to be inserted.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: newQuery
 +---
 +* Added a new query, `rb/http-tainted-format-string`. The query finds cases where data from remote user input is used in a string formatting method in a way that allows arbitrary format specifiers to be inserted.