Add brakeman rule

2025-04-25 10:40:26 +02:00
parent 5a431ba6bb
commit 88fceb3123
1 changed files with 24 additions and 1 deletions
@@ -46,7 +46,30 @@
        95
      ],
      "note": ""
+    },
+    {
+      "warning_type": "Remote Code Execution",
+      "warning_code": 24,
+      "fingerprint": "b00571393e95a8c7d77b1ed963cfc5cc89333bc82f447cf8783549d817990305",
+      "check_name": "UnsafeReflection",
+      "message": "Unsafe reflection method `safe_constantize` called on model attribute",
+      "file": "app/models/notifier.rb",
+      "line": 8,
+      "link": "https://brakemanscanner.org/docs/warning_types/remote_code_execution/",
+      "code": "\"Notifier::#{Event.eventable.class}EventNotifier\".safe_constantize",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "Notifier",
+        "method": "s(:self).for"
+      },
+      "user_input": "Event.eventable.class",
+      "confidence": "Medium",
+      "cwe_id": [
+        470
+      ],
+      "note": ""
    }
  ],
-  "brakeman_version": "7.0.0"
+  "brakeman_version": "7.0.2"
 }