Skip to content

Commit

Permalink
Ignore brakeman warning
Browse files Browse the repository at this point in the history
The setting of this data is not exposed to the user - it's all handled
internally by the token store. It should be safe to ignore this warning.
  • Loading branch information
imtayadeway committed May 30, 2017
1 parent 991fb34 commit 8715446
Showing 1 changed file with 22 additions and 2 deletions.
24 changes: 22 additions & 2 deletions config/brakeman.ignore
Original file line number Diff line number Diff line change
@@ -1,5 +1,25 @@
{
"ignored_warnings": [
{
"warning_type": "Remote Code Execution",
"warning_code": 25,
"fingerprint": "0051a4e9b0e19666f13befb5a9522f07d8de4d6f05ccc6f594f15bf1b9578dc6",
"check_name": "Deserialize",
"message": "Marshal.load called with model attribute",
"file": "lib/token_store/sql_store.rb",
"line": 16,
"link": "http://brakemanscanner.org/docs/warning_types/unsafe_deserialization",
"code": "Marshal.load(Base64.decode64(Session.find_by(:session_id => session_key(token)).data))",
"render_path": null,
"location": {
"type": "method",
"class": "TokenStore::SqlStore",
"method": "read"
},
"user_input": "Session.find_by(:session_id => session_key(token)).data",
"confidence": "Medium",
"note": ""
},
{
"warning_type": "File Access",
"warning_code": 16,
Expand Down Expand Up @@ -101,6 +121,6 @@
"note": "Temporarily skipped, found in new brakeman version"
}
],
"updated": "2017-02-01 08:54:32 -0500",
"brakeman_version": "3.5.0"
"updated": "2017-05-30 13:45:37 -0700",
"brakeman_version": "3.6.2"
}

0 comments on commit 8715446

Please sign in to comment.