From 15fa3b75820d7530fdbec49a90d7578aa8c21378 Mon Sep 17 00:00:00 2001 From: Kevin McConnell Date: Wed, 2 Oct 2024 13:57:05 +0100 Subject: [PATCH] Ignore a brakeman warning --- config/brakeman.ignore | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 config/brakeman.ignore diff --git a/config/brakeman.ignore b/config/brakeman.ignore new file mode 100644 index 000000000..fac388f57 --- /dev/null +++ b/config/brakeman.ignore @@ -0,0 +1,29 @@ +{ + "ignored_warnings": [ + { + "warning_type": "SQL Injection", + "warning_code": 0, + "fingerprint": "6e41fafa4bc61e0923280ba247d7bbcb5e1f1c6ef99dcef5c28ec8aee997249c", + "check_name": "SQL", + "message": "Possible SQL injection", + "file": "app/models/concerns/searchable.rb", + "line": 13, + "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/", + "code": "joins(\"join #{using} idx on id = idx.rowid\")", + "render_path": null, + "location": { + "type": "method", + "class": "Searchable", + "method": "searchable_by" + }, + "user_input": "using", + "confidence": "Medium", + "cwe_id": [ + 89 + ], + "note": "String interpolation in query doesn't involve user data" + } + ], + "updated": "2024-10-02 13:56:18 +0100", + "brakeman_version": "6.2.1" +}