mirror of
https://github.com/System-End/identity-vault.git
synced 2026-04-19 20:55:11 +00:00
7d04469701
* first srcl pass! * HOLY MFIN KBAR * first last search * put the borders back * button! * oops * toolbar! * lol * bump dreamland, make kbar actually reactive? * shorter timeout lol * identity picker component * nuke that lol * seen_hints * woah * hint sys pt 1 * HINTS * HINTS AND SHORTCUTS * styles, BACKSPACE * nav on home * bananananana * click, starring adam sandler * scrool * lint pass * autoed complete * shut * brake the man * dunno why those got unmerged * path oopsie * backspace on audit logs * whitespace * i thought i told you to shut up * mr. brakeman
62 lines
2.2 KiB
Text
62 lines
2.2 KiB
Text
{
|
|
"ignored_warnings": [
|
|
{
|
|
"warning_type": "Remote Code Execution",
|
|
"warning_code": 24,
|
|
"fingerprint": "08cedc20182ee5d67fccbe58f8aecf2c823498d12bfd6df46daccbd287bfdc1a",
|
|
"check_name": "UnsafeReflection",
|
|
"message": "Unsafe reflection method `const_get` called with parameter value",
|
|
"file": "app/controllers/backend/kbar_controller.rb",
|
|
"line": 23,
|
|
"link": "https://brakemanscanner.org/docs/warning_types/remote_code_execution/",
|
|
"code": "Object.const_get(Shortcodes.public_id_prefixes[params[:q].to_s.strip.split(\"!\").first.downcase][:model])",
|
|
"render_path": null,
|
|
"location": {
|
|
"type": "method",
|
|
"class": "Backend::KbarController",
|
|
"method": "search"
|
|
},
|
|
"user_input": "params[:q].to_s.strip.split(\"!\").first.downcase",
|
|
"confidence": "Medium",
|
|
"cwe_id": [
|
|
470
|
|
],
|
|
"note": "this is clamped to valid PublicIdentifiable models in @shortcodes.rb"
|
|
},
|
|
{
|
|
"warning_type": "Dynamic Render Path",
|
|
"warning_code": 15,
|
|
"fingerprint": "60d8df7190a1ed518ea8679aa9c8d919f27fe7a6366669433833caa541f5040d",
|
|
"check_name": "Render",
|
|
"message": "Render path contains parameter value",
|
|
"file": "app/views/backend/users/edit.html.erb",
|
|
"line": 7,
|
|
"link": "https://brakemanscanner.org/docs/warning_types/dynamic_render_path/",
|
|
"code": "render(action => Backend::Users::Form.new(User.find(params[:id])), { :locals => ({ :\"backend::users::form\" => Backend::Users::Form.new(User.find(params[:id])) }) })",
|
|
"render_path": [
|
|
{
|
|
"type": "controller",
|
|
"class": "Backend::UsersController",
|
|
"method": "edit",
|
|
"line": 30,
|
|
"file": "app/controllers/backend/users_controller.rb",
|
|
"rendered": {
|
|
"name": "backend/users/edit",
|
|
"file": "app/views/backend/users/edit.html.erb"
|
|
}
|
|
}
|
|
],
|
|
"location": {
|
|
"type": "template",
|
|
"template": "backend/users/edit"
|
|
},
|
|
"user_input": "params[:id]",
|
|
"confidence": "Weak",
|
|
"cwe_id": [
|
|
22
|
|
],
|
|
"note": "barring some bug in superform, this is fine"
|
|
}
|
|
],
|
|
"brakeman_version": "7.1.1"
|
|
}
|