-
`protect_from_forgery should be configured with 'with: :exception'`
-
### Background
Brakeman version: 4.2.1
Rails version: 4.2.10
Ruby version: 2.3.4
### Issue
correctly using `sanitize` produces a warning
```ruby
= sanitize link_to(image_tag("icons/twit…
-
## Information
**VIM version**
0.3.1
Operating System:
MacOS 10.13.6
### :ALEInfo
that's outputting nothing at the moment and crashing nvim
## What went wrong
Afte…
-
We currently have brakeman installed as a gem in development and testing. Using the [pronto gem](https://github.com/prontolabs/pronto), configure our CI to run brakeman automatically once a PR is ope…
-
### Background
Brakeman version: 4.2.1
Rails version: 5.1.6
Ruby version: 2.5.1
#### False Positive
I believe this might be a false positive (but I could definitely be missing some nuance!)…
-
**VIM version**
VIM - Vi IMproved 8.0 (2016 Sep 12, compiled Mar 13 2018 06:36:50)
macOS version
Operating System: macOS High Sierra Version 10.13.3
### :ALEInfo
```
Current Filetype:…
-
As part of CII Badge requirement:
At least one static code analysis tool (beyond compiler warnings and "safe" language modes) MUST be applied to any proposed major production release of the software …
-
Working on the assumption that we won’t roll out pricing in this release
* That means, any new pro features should work without needing to inspect subscriptions or rely on webhooks, or any other Stri…
-
### Background
Brakeman version: 4.3.0
Rails version: 5.2
Ruby version: 2.5
Link to Rails application code: (https://github.com/mikeyduece/bread_shop)
### Issue
```
Run options: include…
-
https://github.com/presidentbeef/brakeman