-
### Background
I'm unsure if this is a functional limitation of Brakeman or a true false negative, but it seems like brakeman is not recognizing data read from a file descriptor as tainted user con…
-
### Background
Brakeman version: 5.4.1
Rails version: 6.1.7
Ruby version: 2.7.7
### Issue
Some controllers are being skipped and not scanned because they are in a directory ending in "log'.…
-
### Steps to reproduce
```sh
rails new demo --main
cd demo
bin/brakeman --no-pager
```
### Expected behavior
No warnings
### Actual behavior
== Warnings ==
Confidence: High
Categor…
-
### Background
Brakeman version: 4.6.1
Rails version: 5.2.3
Ruby version: 2.6.4
#### False Positive
*Full* warning from Brakeman:
```
Confidence: Weak
Category: SQL Injection
Check: SQL…
-
### Background
Rails Version: 6.1.7.7
Brakeman Version: 6.1.2
Ruby Version: 3.1.5
### Issue
Checks for `redirect_back` were added in #1756. Currently, calls to `redirect_back` without `allo…
-
I need to extend Slim with shortcuts, but Brakeman shows shortcuts in templates as errors.
``` ruby
shortcut = Slim::Parser.options[:shortcut]
shortcut['@'] = { attr: 'data-role' }
shortcut['@@'] = …
-
https://github.com/presidentbeef/brakeman
-
Hi Justin,
### Background
Brakeman version: 5.2.1
Rails version: 6.1.4.1
Ruby version: 2.7.2
Link to Rails application code: Sorry, I don't own the code, cannot do that. Besides I don't kn…
akimd updated
2 years ago
-
# Background
In this document, "incremental scan" means "scanning a subset of files with accuracy comparable to a full scan".
Brakeman performs (essentially) a "full program" or "global" analysi…
-
create a security:check rake task to run brakeman or any other tool in isolation