File tree Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Original file line number Diff line number Diff line change 33 {
44 "warning_type": "Command Injection",
55 "warning_code": 14,
6- "fingerprint": "2b810f11e65f8681ae0111adffe00fbda55ea1728a4208f26bc0947109335b20 ",
6+ "fingerprint": "ee467aaea70b8a7b361ef6e8ee6c5082b3ff265dc67d798ea3f24c1687ff4584 ",
77 "check_name": "Execute",
88 "message": "Possible command injection",
99 "file": "app/models/examples/app_file.rb",
10- "line": 81 ,
10+ "line": 91 ,
1111 "link": "https://brakemanscanner.org/docs/warning_types/command_injection/",
12- "code": "`git show #{@revision}:#{@path}`",
12+ "code": "`(cd #{ENV.fetch(\"REPOSITORY_ROOT\", \".\")} && git show #{@revision}:#{@path}) 2>/dev/null `",
1313 "render_path": null,
1414 "location": {
1515 "type": "method",
1616 "class": "Examples::AppFile",
1717 "method": "git_read"
1818 },
19- "user_input": "@revision ",
19+ "user_input": "ENV.fetch(\"REPOSITORY_ROOT\", \".\") ",
2020 "confidence": "Medium",
2121 "cwe_id": [
2222 77
2323 ],
2424 "note": ""
2525 }
2626 ],
27- "updated": "2024-07-14 21:34 :23 -0400",
27+ "updated": "2024-08-22 08:48 :23 -0400",
2828 "brakeman_version": "6.1.2"
2929}
You can’t perform that action at this time.
0 commit comments