rapid7 / metasploit-model

Common code, such as validators and mixins, that are shared between ActiveModels in metasploit-framework and ActiveRecords in metasploit_data_models
BSD 3-Clause "New" or "Revised" License
13 stars 21 forks source link

Remove hardcoded secret #70

Closed dwelch-r7 closed 2 months ago

dwelch-r7 commented 2 months ago

Resolves a snyk issue with a hardcoded secret, not a valid security concern since it's in the test suite but it can be removed anyway, I was able to remove the whole file since secret_token hasn't been in use since migrating to rails 4

https://guides.rubyonrails.org/v4.0.8/upgrading_ruby_on_rails.html#:~:text=%23%20end-,2.6%20Action%20Pack,-Rails%204.0%20introduces