ci: remove outdated ignores from brakeman config

This commit is contained in:
Mike Dalessio
2025-10-07 00:16:47 -04:00
parent 3df6683736
commit 9bfd21c096
-155
View File
@@ -1,72 +1,5 @@
{
"ignored_warnings": [
{
"warning_type": "Cross-Site Scripting",
"warning_code": 2,
"fingerprint": "005569e6623f389266d3e1d760851a6ea9af52e21ba65b92d69dee5d3dfb492f",
"check_name": "CrossSiteScripting",
"message": "Unescaped model attribute",
"file": "app/views/searches/_result.html.erb",
"line": 20,
"link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
"code": "Current.new.card_description",
"render_path": [
{
"type": "controller",
"class": "SearchesController",
"method": "show",
"line": 7,
"file": "app/controllers/searches_controller.rb",
"rendered": {
"name": "searches/show",
"file": "app/views/searches/show.html.erb"
}
},
{
"type": "template",
"name": "searches/show",
"line": 28,
"file": "app/views/searches/show.html.erb",
"rendered": {
"name": "searches/_result",
"file": "app/views/searches/_result.html.erb"
}
}
],
"location": {
"type": "template",
"template": "searches/_result"
},
"user_input": null,
"confidence": "High",
"cwe_id": [
79
],
"note": ""
},
{
"warning_type": "SQL Injection",
"warning_code": 0,
"fingerprint": "1261c0a89b23c1d7386d684f41c26cc230fa9b5b00d062d7f8d4d1a15bde96a8",
"check_name": "SQL",
"message": "Possible SQL injection",
"file": "app/models/card/entropic.rb",
"line": 7,
"link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
"code": "left_outer_joins(:collection => :entropy_configuration).where(\"last_active_at <= DATETIME('now', '-' || COALESCE(entropy_configurations.#{period_name}, ?) || ' seconds')\", Entropy::Configuration.default.public_send(period_name))",
"render_path": null,
"location": {
"type": "method",
"class": "Card::Entropic",
"method": null
},
"user_input": "period_name",
"confidence": "Weak",
"cwe_id": [
89
],
"note": ""
},
{
"warning_type": "SQL Injection",
"warning_code": 0,
@@ -113,50 +46,6 @@
],
"note": ""
},
{
"warning_type": "Cross-Site Scripting",
"warning_code": 2,
"fingerprint": "7184deb68ef62f7a71aea3f5536a055b2b42de2173a393e846aada1b1e548042",
"check_name": "CrossSiteScripting",
"message": "Unescaped model attribute",
"file": "app/views/searches/_result.html.erb",
"line": 15,
"link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
"code": "Current.new.card_title",
"render_path": [
{
"type": "controller",
"class": "SearchesController",
"method": "show",
"line": 7,
"file": "app/controllers/searches_controller.rb",
"rendered": {
"name": "searches/show",
"file": "app/views/searches/show.html.erb"
}
},
{
"type": "template",
"name": "searches/show",
"line": 28,
"file": "app/views/searches/show.html.erb",
"rendered": {
"name": "searches/_result",
"file": "app/views/searches/_result.html.erb"
}
}
],
"location": {
"type": "template",
"template": "searches/_result"
},
"user_input": null,
"confidence": "High",
"cwe_id": [
79
],
"note": ""
},
{
"warning_type": "Remote Code Execution",
"warning_code": 24,
@@ -179,50 +68,6 @@
470
],
"note": ""
},
{
"warning_type": "Cross-Site Scripting",
"warning_code": 2,
"fingerprint": "e94d5d8fe73652df999614040e2a83d64d6be944b19931ff171be0cac4b9078d",
"check_name": "CrossSiteScripting",
"message": "Unescaped model attribute",
"file": "app/views/searches/_result.html.erb",
"line": 27,
"link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
"code": "Current.new.comment_body",
"render_path": [
{
"type": "controller",
"class": "SearchesController",
"method": "show",
"line": 7,
"file": "app/controllers/searches_controller.rb",
"rendered": {
"name": "searches/show",
"file": "app/views/searches/show.html.erb"
}
},
{
"type": "template",
"name": "searches/show",
"line": 28,
"file": "app/views/searches/show.html.erb",
"rendered": {
"name": "searches/_result",
"file": "app/views/searches/_result.html.erb"
}
}
],
"location": {
"type": "template",
"template": "searches/_result"
},
"user_input": null,
"confidence": "High",
"cwe_id": [
79
],
"note": ""
}
],
"brakeman_version": "7.0.2"