[querydb] Add scan rule for SpEL injection detection

[piggyctf]

Added a new scan rule in querydb to detect potential SpEL injection vulnerabilities. This rule was tested with compiled source code and successfully identified instances of SpEL injection. It enhances the security by flagging risky expressions in queries that could lead to injection attacks.

[piggyctf]

Hi Team, it seems like one of the test fails is for "io.joern.rubysrc2cpg.io.RubySrc2CpgHTTPServerTests". This is not part of my PR nor code changes I've ever made. Could someone please elaborate a little bit how should I get this test passed?

[itsacoderepo]

I'll have a look, thanks for the PR.

[DavidBakerEffendi]

@piggyctf You need to run sbt scalafmt Test/scalafmt to get the formatting to pass

[piggyctf]

I have run sbt scalafmt Test/scalafmt locally and committed again. It seems just a line break was added but should be good to go

[piggyctf]

Hi Team, the formatting issue now is gone, but the test for "io.joern.rubysrc2cpg.io.RubySrc2CpgHTTPServerTests" remains failure somehow. Could someone please have a check on that as it's not part of my code changes. Much thanks!
[info] *** 1 TEST FAILED *** [error] Failed tests: [error] io.joern.rubysrc2cpg.io.RubySrc2CpgHTTPServerTests