From d3748bd495116b0dc93d337d7d0784e7febe464b Mon Sep 17 00:00:00 2001
From: Jeffrey Hardy <jeff@37signals.com>
Date: Wed, 2 Oct 2024 13:03:25 -0400
Subject: [PATCH] Ignore false-positive Brakeman dynamic render path warning

---
 config/brakeman.ignore | 36 +++++++++++++++++++++++++++++++++++-
 1 file changed, 35 insertions(+), 1 deletion(-)

diff --git a/config/brakeman.ignore b/config/brakeman.ignore
index fac388f57..3c02c76e9 100644
--- a/config/brakeman.ignore
+++ b/config/brakeman.ignore
@@ -22,8 +22,42 @@
         89
       ],
       "note": "String interpolation in query doesn't involve user data"
+    },
+    {
+      "warning_type": "Dynamic Render Path",
+      "warning_code": 15,
+      "fingerprint": "d5f274a67e6a10599ca19e5cbed406e2781f8ccdc58dfd2004f2da7438725176",
+      "check_name": "Render",
+      "message": "Render path contains parameter value",
+      "file": "app/views/bubbles/index.html.erb",
+      "line": 31,
+      "link": "https://brakemanscanner.org/docs/warning_types/dynamic_render_path/",
+      "code": "render(action => @bucket.bubbles.ordered_by_activity.limit(10).joins(:tags).where(:tags => Current.account.tags.find(params[:tag_id])), {})",
+      "render_path": [
+        {
+          "type": "controller",
+          "class": "BubblesController",
+          "method": "index",
+          "line": 11,
+          "file": "app/controllers/bubbles_controller.rb",
+          "rendered": {
+            "name": "bubbles/index",
+            "file": "app/views/bubbles/index.html.erb"
+          }
+        }
+      ],
+      "location": {
+        "type": "template",
+        "template": "bubbles/index"
+      },
+      "user_input": "params[:tag_id]",
+      "confidence": "Weak",
+      "cwe_id": [
+        22
+      ],
+      "note": ""
     }
   ],
-  "updated": "2024-10-02 13:56:18 +0100",
+  "updated": "2024-10-02 12:59:29 -0400",
   "brakeman_version": "6.2.1"
 }