Skip to content

Commit 1e2c03c

Browse files
committed
add brakeman.ignore
1 parent 45c18a3 commit 1e2c03c

1 file changed

Lines changed: 29 additions & 0 deletions

File tree

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"ignored_warnings": [
3+
{
4+
"warning_type": "Mass Assignment",
5+
"warning_code": 105,
6+
"fingerprint": "5be66927ab36c68816fde998b592c1581de478fca71f02be2af0c87e0c4f0196",
7+
"check_name": "PermitAttributes",
8+
"message": "Potentially dangerous key allowed for mass assignment",
9+
"file": "app/controllers/api/v1/shopkeeper/accounts_shopkeepers_controller.rb",
10+
"line": 57,
11+
"link": "https://brakemanscanner.org/docs/warning_types/mass_assignment/",
12+
"code": "params.require(:accounts_shopkeeper).permit(:admin, :senior_manager, :junior_manager, :senior_member, :junior_member, :guest)",
13+
"render_path": null,
14+
"location": {
15+
"type": "method",
16+
"class": "Api::V1::Shopkeeper::AccountsShopkeepersController",
17+
"method": "accounts_shopkeeper_params"
18+
},
19+
"user_input": ":admin",
20+
"confidence": "High",
21+
"cwe_id": [
22+
915
23+
],
24+
"note": "Intentional: role booleans are explicitly permitted for account admins to manage team member roles. Endpoint is protected by require_account_admin and require_non_personal_account! before_actions."
25+
}
26+
],
27+
"updated": "2026-03-01",
28+
"brakeman_version": "8.0.4"
29+
}

0 commit comments

Comments
 (0)