Class Brakeman::CheckMassAssignment
In: lib/brakeman/checks/check_mass_assignment.rb
Parent: Brakeman::BaseCheck

Checks for mass assignments to models.

See guides.rubyonrails.org/security.html#mass-assignment for details

Methods

Constants

LITERALS = Set[:lit, :true, :false, :nil, :string]

Public Class methods

Public Instance methods

Want to ignore calls to Model.new that have no arguments

Look for and warn about uses of Parameters#permit! for mass assignment

All results should be Model.new(...) or Model.attributes=() calls

Look for actual use of params in mass assignment to avoid warning about uses of Parameters#permit! without any mass assignment or when mass assignment is restricted by model instead.

[Validate]