bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add brakeman ignores

Browse Source
This commit is contained in:
Donal McBreen
2025-11-21 09:14:53 +00:00
parent 3df9961b61
commit f24f959d19
1 changed files with 47 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/brakeman.ignore
+47 -1
View File
@@ -1,5 +1,28 @@
{
"ignored_warnings": [
{
"warning_type": "SQL Injection",
"warning_code": 0,
"fingerprint": "4ea2e6d704b817af1d896dcdf148a89da8b9e428b3327497631ef8d9ed587307",
"check_name": "SQL",
"message": "Possible SQL injection",
"file": "app/models/card/entropic.rb",
"line": 19,
"link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
"code": "active.joins(:board => :account).left_outer_joins(:board => :entropy).joins(\"LEFT OUTER JOIN entropies AS account_entropies ON account_entropies.account_id = accounts.id AND account_entropies.container_type = 'Account' AND account_entropies.container_id = accounts.id\").where(\"last_active_at > #{connection.date_subtract(\"?\", \"COALESCE(entropies.auto_postpone_period, account_entropies.auto_postpone_period)\")}\", Time.now)",
"render_path": null,
"location": {
"type": "method",
"class": "Card::Entropic",
"method": null
},
"user_input": "connection.date_subtract(\"?\", \"COALESCE(entropies.auto_postpone_period, account_entropies.auto_postpone_period)\")",
"confidence": "Weak",
"cwe_id": [
89
],
"note": "No user input allowed"
},
{
"warning_type": "Mass Assignment",
"warning_code": 70,
@@ -45,7 +68,30 @@
470
],
"note": ""
},
{
"warning_type": "SQL Injection",
"warning_code": 0,
"fingerprint": "bbd8fe3cbbc6b393df770d3142d6fa46e2b9441b21f48a52175211acaae4efad",
"check_name": "SQL",
"message": "Possible SQL injection",
"file": "app/models/card/entropic.rb",
"line": 10,
"link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
"code": "active.joins(:board => :account).left_outer_joins(:board => :entropy).joins(\"LEFT OUTER JOIN entropies AS account_entropies ON account_entropies.account_id = accounts.id AND account_entropies.container_type = 'Account' AND account_entropies.container_id = accounts.id\").where(\"last_active_at <= #{connection.date_subtract(\"?\", \"COALESCE(entropies.auto_postpone_period, account_entropies.auto_postpone_period)\")}\", Time.now)",
"render_path": null,
"location": {
"type": "method",
"class": "Card::Entropic",
"method": null
},
"user_input": "connection.date_subtract(\"?\", \"COALESCE(entropies.auto_postpone_period, account_entropies.auto_postpone_period)\")",
"confidence": "Weak",
"cwe_id": [
89
],
"note": "No user input allowed"
}
],
"brakeman_version": "7.1.1"
"brakeman_version": "7.1.0"
}