basecamp / console1984

The Rails console you love, 1984 style
MIT License
627 stars 34 forks source link

Bypass audit table protections by opening an interactive console or similar #84

Open pjmartorell opened 1 year ago

pjmartorell commented 1 year ago

Steps to reproduce:

  1. bundle console
  2. require_relative 'config/environment.rb'

Expected result: it logs activity and prevents accessing encrypted data Actual result: it does not log activity nor prevents accessing encrypted data

jorgemanrubia commented 1 year ago

Thanks for reporting @pjmartorell. Fixing this is not a priority for our use cases but it would be great to fix indeed.