CodeTriage icon indicating copy to clipboard operation
CodeTriage copied to clipboard

Issues cited by Brakeman

Open jhsu802701 opened this issue 6 years ago • 0 comments

Brakeman Report errors:

  • invalid byte sequence in US-ASCII (app/views/pages/what.html.erb)
  • app/views/repos/_docs.html.slim is not valid US-ASCII
  • app/views/repos/_issues.html.slim is not valid US-ASCII
  • app/views/users/after_signup/set_privacy.html.slim is not valid US-ASCII
  • app/views/users/token_delete.html.slim is not valid US-ASCII

Brakeman warnings:

Confidence: High                       
Category: Redirect                                                              
Check: Redirect                                                                 
Message: Possible unprotected redirect                                          
Code: redirect_to(IssueAssignment.find(params[:id]).issue.html_url)             
File: app/controllers/issue_assignments_controller.rb                           
Line: 15                                                                        
                                                                                
Confidence: High                                                                
Category: Redirect                                                              
Check: Redirect                                                                 
Message: Possible unprotected redirect                                          
Code: redirect_to(DocMethod.find(params[:id]).to_github)                        
File: app/controllers/doc_methods_controller.rb                                 
Line: 43                   

Confidence: Medium                                                              
Category: Command Injection                                                     
Check: Execute                                                                  
Message: Possible command injection                                             
Code: `cd #{dir} && git clone #{clone_url} 2>&1`      
File: app/models/github_fetcher/repo.rb
Line: 19 

jhsu802701 avatar Nov 27 '18 21:11 jhsu802701