-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathbrakeman.ignore
46 lines (46 loc) · 1.84 KB
/
brakeman.ignore
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
{
"ignored_warnings": [
{
"warning_type": "Mass Assignment",
"warning_code": 70,
"fingerprint": "8f7ae8aee6aaa43ea7b1220c67d3cbe0a1053bf56a11245026c3ab88eecedeb9",
"check_name": "MassAssignment",
"message": "Specify exact keys allowed for mass assignment instead of using `permit!` which allows any keys",
"file": "app/controllers/metadata_presenter/answers_controller.rb",
"line": 42,
"link": "https://brakemanscanner.org/docs/warning_types/mass_assignment/",
"code": "params[:answers].permit!",
"render_path": null,
"location": {
"type": "method",
"class": "MetadataPresenter::AnswersController",
"method": "answers_params"
},
"user_input": null,
"confidence": "Medium",
"note": "This is necessary because we do not know what attribute name the service owner is going to use in their forms."
},
{
"warning_type": "Dynamic Render Path",
"warning_code": 15,
"fingerprint": "a93c4786cc5d333eb509d48dc4da39d03883d947cbc973997236bdd7b74daead",
"check_name": "Render",
"message": "Render path contains request value",
"file": "app/controllers/metadata_presenter/pages_controller.rb",
"line": 11,
"link": "https://brakemanscanner.org/docs/warning_types/dynamic_render_path/",
"code": "render(template => service.find_page_by_url(request.env[\"PATH_INFO\"]).template, {})",
"render_path": null,
"location": {
"type": "method",
"class": "MetadataPresenter::PagesController",
"method": "show"
},
"user_input": "request.env[\"PATH_INFO\"]",
"confidence": "Weak",
"note": "This is because we are not rendering the paths based on the params but rather on the metadata."
}
],
"updated": "2023-01-30 14:05:27 +0000",
"brakeman_version": "5.2.3"
}