Class Brakeman::Rails3ConfigProcessor
In: lib/brakeman/processors/lib/rails3_config_processor.rb
Parent: Brakeman::BasicProcessor

Processes configuration. Results are put in tracker.config.

Configuration of Rails via Rails::Initializer are stored in tracker.config.rails. For example:

  MyApp::Application.configure do
    config.active_record.whitelist_attributes = true
  end

will be stored in

  tracker.config.rails[:active_record][:whitelist_attributes]

Values for tracker.config.rails will still be Sexps.

Methods

Constants

RAILS_CONFIG = Sexp.new(:call, nil, :config)

Public Class methods

Public Instance methods

Returns an array of symbols for each ‘level’ in the config

  config.action_controller.session_store = :cookie

becomes

  [:action_controller, :session_store]

Check if an expression includes a call to set Rails config

Look for configuration settings

Look for class Application < Rails::Application

Use this method to process configuration file

Look for MyApp::Application.configure do … end

[Validate]