System-End/hackatime
1
0
Fork 0
mirror of https://github.com/System-End/hackatime.git synced 2026-04-20 00:35:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update brakeman.ignore

Browse source
This commit is contained in:
Max Wofford 2025-02-21 20:51:52 -05:00
parent d85dcd7e43
commit f68552329e
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config/brakeman.ignore
View file

@ -3,13 +3,13 @@
{
"warning_type": "SQL Injection",
"warning_code": 0,
"fingerprint": "45c875a0dc447df01780593bceebc72c2b769142a0a395a7669ca2f854ae81b7",
"fingerprint": "4da7791a2386d12246ee3ef1bea6f5d7c21718137b3ecc787812e59fb88e4711",
"check_name": "SQL",
"message": "Possible SQL injection",
"file": "app/jobs/leaderboard_update_job.rb",
"line": 38,
"link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
"code": "Heartbeat.connection.select_all(\" WITH time_diffs AS (\\n SELECT \\n user_id,\\n CASE\\n WHEN LAG(time) OVER (PARTITION BY user_id ORDER BY time) IS NULL THEN 0\\n ELSE LEAST(\\n EXTRACT(EPOCH FROM (time - LAG(time) OVER (PARTITION BY user_id ORDER BY time))),\\n #{Heartbeat::TIMEOUT_DURATION.to_i}\\n )\\n END as diff_seconds\\n FROM heartbeats\\n WHERE DATE(time) = '#{(date or Date.parse(date.to_s))}'\\n AND user_id IN ('#{sanitize_sql_array(batch_user_ids).join(\"','\")}')\\n )\\n SELECT \\n user_id,\\n SUM(diff_seconds)::integer as total_seconds\\n FROM time_diffs\\n GROUP BY user_id\\n HAVING SUM(diff_seconds) > 0\\n\")",
"code": "Heartbeat.connection.select_all(\" WITH time_diffs AS (\\n SELECT \\n user_id,\\n CASE\\n WHEN LAG(time) OVER (PARTITION BY user_id ORDER BY time) IS NULL THEN 0\\n ELSE LEAST(\\n EXTRACT(EPOCH FROM (time - LAG(time) OVER (PARTITION BY user_id ORDER BY time))),\\n #{Heartbeat::TIMEOUT_DURATION.to_i}\\n )\\n END as diff_seconds\\n FROM heartbeats\\n WHERE DATE(time) = '#{(date or Date.parse(date.to_s))}'\\n AND user_id IN (#{ActiveRecord::Base.sanitize_sql_array(((\"'\" + batch_user_ids.join(\"','\")) + \"'\"))})\\n )\\n SELECT \\n user_id,\\n SUM(diff_seconds)::integer as total_seconds\\n FROM time_diffs\\n GROUP BY user_id\\n HAVING SUM(diff_seconds) > 0\\n\")",
"render_path": null,
"location": {
"type": "method",