-
### Background
Brakeman version: brakeman 5.0.0
Rails version: Rails 6.0.3.4
Ruby version: ruby 2.7.2p137 (2020-10-01 revision 5445e04352) [x86_64-linux]
### Issue
There are 4 examples that…
-
### Background
Brakeman version: 4.2.1
Rails version: 5.1.6
Ruby version: 2.3.5
### Issue
Defining a `link_to` in a view based on `request.query_parameters` without any sanitization is not …
-
Is there a way to configure the brakeman linter to only lint the current file or buffer?
I am aware of `g:ale_ruby_brakeman_options` and know that there is a `--only-files` option for brakeman, so th…
RST-J updated
4 years ago
-
-
### Background
Brakeman version: 5.2.1
Rails version: 6.1.4.4
Ruby version: 3.0.3
Link to Rails application code: it's private
#### False Positive
*Full* warning from Brakeman: `Warning: R…
-
# Summary
We should run security scans to our TravisCI checks to better ensure we don't introduce security vulnerabilities. Let's update our Travis configuration to also run these checks and let us…
-
### Background
Brakeman version: 4.7.0
Rails version: 5.2.3
Ruby version: 2.5.3
#### False Positive
*Full* warning from Brakeman:
```
Confidence: Weak
Category: Dynamic Render Path
Chec…
-
I want to set up some processing code for the JSON report of brakeman, but I can't find any good data on what the individual entries in the `errors` and `warnings` arrays look like.
I mean, I can…
-
- Code auditing
- Hakiri
- Bullet
- Brakeman
- deadweight
- rails_best_practices
- Development
- rack-mini-profiler
khwon updated
9 years ago
-
To run on other repos, I believe we can just do `bundler exec rake app:test:brakeman` since the rake tasks from core are available in the plugins.