|
23 | 23 | ],
|
24 | 24 | "note": ""
|
25 | 25 | },
|
26 |
| - { |
27 |
| - "warning_type": "Command Injection", |
28 |
| - "warning_code": 14, |
29 |
| - "fingerprint": "7307f11036b1ab86f410d8d967d3972618705df73cafdd17f8e311c10c76c1f1", |
30 |
| - "check_name": "Execute", |
31 |
| - "message": "Possible command injection", |
32 |
| - "file": "lib/statistics/aggregation.rb", |
33 |
| - "line": 163, |
34 |
| - "link": "https://brakemanscanner.org/docs/warning_types/command_injection/", |
35 |
| - "code": "`curl -X POST -H 'Content-type: application/json' --data '{\"text\":\"#{msg}\"}' #{slack_hook_url} -o /dev/null -w \"slack: %{http_code}\"`", |
36 |
| - "render_path": null, |
37 |
| - "location": { |
38 |
| - "type": "method", |
39 |
| - "class": "Statistics::Statistics::Aggregation::Notifier", |
40 |
| - "method": "s(:self).notify" |
41 |
| - }, |
42 |
| - "user_input": "msg", |
43 |
| - "confidence": "Medium", |
44 |
| - "cwe_id": [ |
45 |
| - 77 |
46 |
| - ], |
47 |
| - "note": "" |
48 |
| - }, |
49 | 26 | {
|
50 | 27 | "warning_type": "Cross-Site Scripting",
|
51 | 28 | "warning_code": 4,
|
|
244 | 221 | 79
|
245 | 222 | ],
|
246 | 223 | "note": ""
|
247 |
| - }, |
248 |
| - { |
249 |
| - "warning_type": "Command Injection", |
250 |
| - "warning_code": 14, |
251 |
| - "fingerprint": "e5394a11f2e9bb6bc213b7ebd34fbcead20048858592aa19e5ae2961f33c636d", |
252 |
| - "check_name": "Execute", |
253 |
| - "message": "Possible command injection", |
254 |
| - "file": "lib/upcoming_events/aggregation.rb", |
255 |
| - "line": 89, |
256 |
| - "link": "https://brakemanscanner.org/docs/warning_types/command_injection/", |
257 |
| - "code": "`curl -X POST -H 'Content-type: application/json' --data '{\"text\":\"#{msg}\"}' #{slack_hook_url} -o /dev/null -w \"slack: %{http_code}\"`", |
258 |
| - "render_path": null, |
259 |
| - "location": { |
260 |
| - "type": "method", |
261 |
| - "class": "UpcomingEvents::UpcomingEvents::Aggregation::Notifier", |
262 |
| - "method": "s(:self).notify" |
263 |
| - }, |
264 |
| - "user_input": "msg", |
265 |
| - "confidence": "Medium", |
266 |
| - "cwe_id": [ |
267 |
| - 77 |
268 |
| - ], |
269 |
| - "note": "" |
270 | 224 | }
|
271 | 225 | ],
|
272 | 226 | "brakeman_version": "7.1.0"
|
|
0 commit comments