Skip to content

Commit 25aeaf6

Browse files
committed
Add brakeman ignore
The site/ path is just for viewing components locally so I ignored the warning `Cross-Site Request Forgery` (code `17`, message: "`protect_from_forgery` should be called in `ApplicationController`")
1 parent 3e488cd commit 25aeaf6

1 file changed

Lines changed: 22 additions & 0 deletions

File tree

.brakeman.ignore

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
{
2+
"ignored_warnings": [
3+
{
4+
"warning_type": "Cross-Site Request Forgery",
5+
"warning_code": 17,
6+
"fingerprint": "6f5239fb87c64764d0c209014deb5cf504c2c10ee424bd33590f0a4f22e01d8f",
7+
"check_name": "ForgerySetting",
8+
"message": "`protect_from_forgery` should be called in `ApplicationController`",
9+
"file": "site/app/controllers/application_controller.rb",
10+
"line": 3,
11+
"link": "https://brakemanscanner.org/docs/warning_types/cross-site_request_forgery/",
12+
"code": null,
13+
"render_path": null,
14+
"location": {
15+
"type": "controller",
16+
"controller": "ApplicationController" },
17+
"user_input": null,
18+
"confidence": "High",
19+
"note": "The `site/` path is meant for development and testing ONLY. It is never deployed to production and has no real users or sessions."
20+
}
21+
]
22+
}

0 commit comments

Comments
 (0)