File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 33 {
44 "warning_type": "Command Injection",
55 "warning_code": 14,
6- "fingerprint": "5dd8c58cca239b1a2527f25255c49c8800a31e5ec8cb8e31e14003fc435dd677 ",
6+ "fingerprint": "39737ba6e95438831a89d919ed74a3e4d522d94a9993f7a6bc8d1cff9e699132 ",
77 "check_name": "Execute",
88 "message": "Possible command injection",
99 "file": "app/jobs/backup_db_rds.rb",
10- "line": 11 ,
10+ "line": 13 ,
1111 "link": "https://brakemanscanner.org/docs/warning_types/command_injection/",
1212 "code": "system(\"PGPASSWORD='#{ENV[\"DIAPER_DB_PASSWORD\"]}' pg_dump -Fc -v --host=#{ENV[\"DIAPER_DB_HOST\"]} --username=#{ENV[\"DIAPER_DB_USERNAME\"]} --dbname=#{ENV[\"DIAPER_DB_DATABASE\"]} -f #{\"#{Time.current.strftime(\"%Y%m%d%H%M%S\")}.rds.dump\"}\")",
1313 "render_path": null,
1414 "location": {
1515 "type": "method",
1616 "class": "BackupDbRds",
17- "method": "s(: self) .run"
17+ "method": "self.run"
1818 },
1919 "user_input": "ENV[\"DIAPER_DB_PASSWORD\"]",
2020 "confidence": "Medium",
3030 "check_name": "Render",
3131 "message": "Render path contains parameter value",
3232 "file": "app/controllers/static_controller.rb",
33- "line": 20 ,
33+ "line": 21 ,
3434 "link": "https://brakemanscanner.org/docs/warning_types/dynamic_render_path/",
3535 "code": "render(template => \"static/#{params[:name]}\", {})",
3636 "render_path": null,
4747 "note": ""
4848 }
4949 ],
50- "updated": "2024-11-24 10:40:00 -0500",
51- "brakeman_version": "6.2.1"
50+ "brakeman_version": "8.0.2"
5251}
You can’t perform that action at this time.
0 commit comments