Skip to content

Commit 57393ea

Browse files
committed
Instruct brakeman to allow git show command to take args
As of now, no user input is associated with reading file source
1 parent 15d576a commit 57393ea

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

config/brakeman.ignore

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,27 +3,27 @@
33
{
44
"warning_type": "Command Injection",
55
"warning_code": 14,
6-
"fingerprint": "7297db165692a1744273cd4c5f755daee483c999bf28b7cce39ff84ca9c3a64f",
6+
"fingerprint": "2b810f11e65f8681ae0111adffe00fbda55ea1728a4208f26bc0947109335b20",
77
"check_name": "Execute",
88
"message": "Possible command injection",
99
"file": "app/models/examples/app_file.rb",
10-
"line": 40,
10+
"line": 81,
1111
"link": "https://brakemanscanner.org/docs/warning_types/command_injection/",
1212
"code": "`git show #{@revision}:#{@path}`",
1313
"render_path": null,
1414
"location": {
1515
"type": "method",
1616
"class": "Examples::AppFile",
17-
"method": "read"
17+
"method": "git_read"
1818
},
1919
"user_input": "@revision",
2020
"confidence": "Medium",
2121
"cwe_id": [
2222
77
2323
],
24-
"note": "We mark this warning as ignored since we expect to only run this code on app files and not on user-generated content."
24+
"note": ""
2525
}
2626
],
27-
"updated": "2024-05-09 20:09:09 -0400",
27+
"updated": "2024-07-14 21:34:23 -0400",
2828
"brakeman_version": "6.1.2"
2929
}

0 commit comments

Comments
 (0)