File tree Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Original file line number Diff line number Diff line change 3
3
{
4
4
"warning_type": "Command Injection",
5
5
"warning_code": 14,
6
- "fingerprint": "2b810f11e65f8681ae0111adffe00fbda55ea1728a4208f26bc0947109335b20 ",
6
+ "fingerprint": "ee467aaea70b8a7b361ef6e8ee6c5082b3ff265dc67d798ea3f24c1687ff4584 ",
7
7
"check_name": "Execute",
8
8
"message": "Possible command injection",
9
9
"file": "app/models/examples/app_file.rb",
10
- "line": 81 ,
10
+ "line": 91 ,
11
11
"link": "https://brakemanscanner.org/docs/warning_types/command_injection/",
12
- "code": "`git show #{@revision}:#{@path}`",
12
+ "code": "`(cd #{ENV.fetch(\"REPOSITORY_ROOT\", \".\")} && git show #{@revision}:#{@path}) 2>/dev/null `",
13
13
"render_path": null,
14
14
"location": {
15
15
"type": "method",
16
16
"class": "Examples::AppFile",
17
17
"method": "git_read"
18
18
},
19
- "user_input": "@revision ",
19
+ "user_input": "ENV.fetch(\"REPOSITORY_ROOT\", \".\") ",
20
20
"confidence": "Medium",
21
21
"cwe_id": [
22
22
77
23
23
],
24
24
"note": ""
25
25
}
26
26
],
27
- "updated": "2024-07-14 21:34 :23 -0400",
27
+ "updated": "2024-08-22 08:48 :23 -0400",
28
28
"brakeman_version": "6.1.2"
29
29
}
You can’t perform that action at this time.
0 commit comments