diff --git a/config/brakeman.ignore b/config/brakeman.ignore index 6c99b817b..929804402 100644 --- a/config/brakeman.ignore +++ b/config/brakeman.ignore @@ -46,6 +46,29 @@ ], "note": "" }, + { + "warning_type": "SSL Verification Bypass", + "warning_code": 71, + "fingerprint": "8e566e1a52e48940c840541ea4e33f41a39dc0f2a97eb83c52e76f9582667a3c", + "check_name": "SSLVerify", + "message": "SSL certificate verification was bypassed", + "file": "app/models/zip_file/remote_io.rb", + "line": 41, + "link": "https://brakemanscanner.org/docs/warning_types/ssl_verification_bypass/", + "code": "Net::HTTP.new(@uri.hostname, @uri.port).verify_mode = OpenSSL::SSL::VERIFY_NONE", + "render_path": null, + "location": { + "type": "method", + "class": "ZipFile::RemoteIO", + "method": "with_http" + }, + "user_input": null, + "confidence": "High", + "cwe_id": [ + 295 + ], + "note": "" + }, { "warning_type": "Mass Assignment", "warning_code": 70, @@ -116,5 +139,5 @@ "note": "No user input allowed" } ], - "brakeman_version": "7.1.0" + "brakeman_version": "7.1.2" }