82 lines
3.1 KiB
Plaintext
82 lines
3.1 KiB
Plaintext
{
|
|
"ignored_warnings": [
|
|
{
|
|
"warning_type": "SQL Injection",
|
|
"warning_code": 0,
|
|
"fingerprint": "6f3216446dca0fa79e96267eb0323d50cc59e7bc1e1529fd160cd5beb185e2f2",
|
|
"message": "Possible SQL injection",
|
|
"file": "app/controllers/admin/candidate_controller.rb",
|
|
"line": 7,
|
|
"link": "http://brakemanscanner.org/docs/warning_types/sql_injection/",
|
|
"code": "Candidate.order(\"#{sort_column} #{sort_direction}\")",
|
|
"render_path": null,
|
|
"location": {
|
|
"type": "method",
|
|
"class": "Admin::CandidateController",
|
|
"method": "index"
|
|
},
|
|
"user_input": "sort_column",
|
|
"confidence": "Medium",
|
|
"note": ""
|
|
},
|
|
{
|
|
"warning_type": "SQL Injection",
|
|
"warning_code": 0,
|
|
"fingerprint": "9e802ac2067c1ee551f97c1f37816b585451abc42b6a2c7903c6d97aa042da61",
|
|
"message": "Possible SQL injection",
|
|
"file": "app/controllers/admin/user_controller.rb",
|
|
"line": 5,
|
|
"link": "http://brakemanscanner.org/docs/warning_types/sql_injection/",
|
|
"code": "User.order(\"#{sort_column} #{sort_direction}\")",
|
|
"render_path": null,
|
|
"location": {
|
|
"type": "method",
|
|
"class": "Admin::UserController",
|
|
"method": "index"
|
|
},
|
|
"user_input": "sort_column",
|
|
"confidence": "Medium",
|
|
"note": ""
|
|
},
|
|
{
|
|
"warning_type": "SQL Injection",
|
|
"warning_code": 0,
|
|
"fingerprint": "a65b53d63f1d43cb831947d0693d2d1b8819e21aec5ee18bf09b577ade02a0ee",
|
|
"message": "Possible SQL injection",
|
|
"file": "app/controllers/admin/result_controller.rb",
|
|
"line": 16,
|
|
"link": "http://brakemanscanner.org/docs/warning_types/sql_injection/",
|
|
"code": "Candidate.where(:completed => true).includes(:recruiter).order(\"#{(\"(case when review_status = 0 then '' else name end)\" or sort_column)} #{sort_direction}\")",
|
|
"render_path": null,
|
|
"location": {
|
|
"type": "method",
|
|
"class": "Admin::ResultController",
|
|
"method": "index"
|
|
},
|
|
"user_input": "sort_column",
|
|
"confidence": "Medium",
|
|
"note": ""
|
|
},
|
|
{
|
|
"warning_type": "Dynamic Render Path",
|
|
"warning_code": 15,
|
|
"fingerprint": "da17225c940987e6239cc4ecfe27bcb1e5da2db1134435dc3e1025d97927e0ba",
|
|
"message": "Render path contains parameter value",
|
|
"file": "app/views/admin/question/options.html.erb",
|
|
"line": 3,
|
|
"link": "http://brakemanscanner.org/docs/warning_types/dynamic_render_path/",
|
|
"code": "render(partial => \"admin/question/#{params[:input_type]}\", { :locals => ({ :question => ((Question.find(params[:question_id]) or Question.new)) }) })",
|
|
"render_path": [{"type":"controller","class":"Admin::QuestionController","method":"options","line":58,"file":"app/controllers/admin/question_controller.rb"}],
|
|
"location": {
|
|
"type": "template",
|
|
"template": "admin/question/options"
|
|
},
|
|
"user_input": "params[:input_type]",
|
|
"confidence": "Medium",
|
|
"note": "false positive"
|
|
}
|
|
],
|
|
"updated": "2017-03-06 12:16:23 -0600",
|
|
"brakeman_version": "3.4.1"
|
|
}
|