bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update brakeman

Browse Source
This commit is contained in:
Jorge Manrubia
2025-06-24 13:33:48 +02:00
parent 7371147e5f
commit 4acfe3ba9f
1 changed files with 134 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/brakeman.ignore
+134 -2
View File
@@ -1,5 +1,49 @@
{
"ignored_warnings": [
{
"warning_type": "Cross-Site Scripting",
"warning_code": 2,
"fingerprint": "005569e6623f389266d3e1d760851a6ea9af52e21ba65b92d69dee5d3dfb492f",
"check_name": "CrossSiteScripting",
"message": "Unescaped model attribute",
"file": "app/views/searches/_result.html.erb",
"line": 20,
"link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
"code": "Current.new.card_description",
"render_path": [
{
"type": "controller",
"class": "SearchesController",
"method": "show",
"line": 7,
"file": "app/controllers/searches_controller.rb",
"rendered": {
"name": "searches/show",
"file": "app/views/searches/show.html.erb"
}
},
{
"type": "template",
"name": "searches/show",
"line": 25,
"file": "app/views/searches/show.html.erb",
"rendered": {
"name": "searches/_result",
"file": "app/views/searches/_result.html.erb"
}
}
],
"location": {
"type": "template",
"template": "searches/_result"
},
"user_input": null,
"confidence": "High",
"cwe_id": [
79
],
"note": ""
},
{
"warning_type": "SQL Injection",
"warning_code": 0,
@@ -7,7 +51,7 @@
"check_name": "SQL",
"message": "Possible SQL injection",
"file": "app/models/card/entropic.rb",
"line": 9,
"line": 7,
"link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
"code": "left_outer_joins(:collection => :entropy_configuration).where(\"last_active_at <= DATETIME('now', '-' || COALESCE(entropy_configurations.#{period_name}, ?) || ' seconds')\", Entropy::Configuration.default.public_send(period_name))",
"render_path": null,
@@ -30,7 +74,7 @@
"check_name": "SQL",
"message": "Possible SQL injection",
"file": "app/models/concerns/searchable.rb",
"line": 22,
"line": 36,
"link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
"code": "joins(\"join #{using} idx on #{table_name}.id = idx.rowid\")",
"render_path": null,
@@ -46,6 +90,50 @@
],
"note": ""
},
{
"warning_type": "Cross-Site Scripting",
"warning_code": 2,
"fingerprint": "7184deb68ef62f7a71aea3f5536a055b2b42de2173a393e846aada1b1e548042",
"check_name": "CrossSiteScripting",
"message": "Unescaped model attribute",
"file": "app/views/searches/_result.html.erb",
"line": 15,
"link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
"code": "Current.new.card_title",
"render_path": [
{
"type": "controller",
"class": "SearchesController",
"method": "show",
"line": 7,
"file": "app/controllers/searches_controller.rb",
"rendered": {
"name": "searches/show",
"file": "app/views/searches/show.html.erb"
}
},
{
"type": "template",
"name": "searches/show",
"line": 25,
"file": "app/views/searches/show.html.erb",
"rendered": {
"name": "searches/_result",
"file": "app/views/searches/_result.html.erb"
}
}
],
"location": {
"type": "template",
"template": "searches/_result"
},
"user_input": null,
"confidence": "High",
"cwe_id": [
79
],
"note": ""
},
{
"warning_type": "Remote Code Execution",
"warning_code": 24,
@@ -68,6 +156,50 @@
470
],
"note": ""
},
{
"warning_type": "Cross-Site Scripting",
"warning_code": 2,
"fingerprint": "e94d5d8fe73652df999614040e2a83d64d6be944b19931ff171be0cac4b9078d",
"check_name": "CrossSiteScripting",
"message": "Unescaped model attribute",
"file": "app/views/searches/_result.html.erb",
"line": 27,
"link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
"code": "Current.new.comment_body",
"render_path": [
{
"type": "controller",
"class": "SearchesController",
"method": "show",
"line": 7,
"file": "app/controllers/searches_controller.rb",
"rendered": {
"name": "searches/show",
"file": "app/views/searches/show.html.erb"
}
},
{
"type": "template",
"name": "searches/show",
"line": 25,
"file": "app/views/searches/show.html.erb",
"rendered": {
"name": "searches/_result",
"file": "app/views/searches/_result.html.erb"
}
}
],
"location": {
"type": "template",
"template": "searches/_result"
},
"user_input": null,
"confidence": "High",
"cwe_id": [
79
],
"note": ""
}
],
"brakeman_version": "7.0.2"