|
23 | 23 | ], |
24 | 24 | "note": "" |
25 | 25 | }, |
26 | | - { |
27 | | - "warning_type": "Command Injection", |
28 | | - "warning_code": 14, |
29 | | - "fingerprint": "7307f11036b1ab86f410d8d967d3972618705df73cafdd17f8e311c10c76c1f1", |
30 | | - "check_name": "Execute", |
31 | | - "message": "Possible command injection", |
32 | | - "file": "lib/statistics/aggregation.rb", |
33 | | - "line": 163, |
34 | | - "link": "https://brakemanscanner.org/docs/warning_types/command_injection/", |
35 | | - "code": "`curl -X POST -H 'Content-type: application/json' --data '{\"text\":\"#{msg}\"}' #{slack_hook_url} -o /dev/null -w \"slack: %{http_code}\"`", |
36 | | - "render_path": null, |
37 | | - "location": { |
38 | | - "type": "method", |
39 | | - "class": "Statistics::Statistics::Aggregation::Notifier", |
40 | | - "method": "s(:self).notify" |
41 | | - }, |
42 | | - "user_input": "msg", |
43 | | - "confidence": "Medium", |
44 | | - "cwe_id": [ |
45 | | - 77 |
46 | | - ], |
47 | | - "note": "" |
48 | | - }, |
49 | 26 | { |
50 | 27 | "warning_type": "Cross-Site Scripting", |
51 | 28 | "warning_code": 4, |
|
244 | 221 | 79 |
245 | 222 | ], |
246 | 223 | "note": "" |
247 | | - }, |
248 | | - { |
249 | | - "warning_type": "Command Injection", |
250 | | - "warning_code": 14, |
251 | | - "fingerprint": "e5394a11f2e9bb6bc213b7ebd34fbcead20048858592aa19e5ae2961f33c636d", |
252 | | - "check_name": "Execute", |
253 | | - "message": "Possible command injection", |
254 | | - "file": "lib/upcoming_events/aggregation.rb", |
255 | | - "line": 89, |
256 | | - "link": "https://brakemanscanner.org/docs/warning_types/command_injection/", |
257 | | - "code": "`curl -X POST -H 'Content-type: application/json' --data '{\"text\":\"#{msg}\"}' #{slack_hook_url} -o /dev/null -w \"slack: %{http_code}\"`", |
258 | | - "render_path": null, |
259 | | - "location": { |
260 | | - "type": "method", |
261 | | - "class": "UpcomingEvents::UpcomingEvents::Aggregation::Notifier", |
262 | | - "method": "s(:self).notify" |
263 | | - }, |
264 | | - "user_input": "msg", |
265 | | - "confidence": "Medium", |
266 | | - "cwe_id": [ |
267 | | - 77 |
268 | | - ], |
269 | | - "note": "" |
270 | 224 | } |
271 | 225 | ], |
272 | 226 | "brakeman_version": "7.1.0" |
|
0 commit comments