Class Brakeman::BaseCheck
In: lib/brakeman/checks/base_check.rb
Parent: Brakeman::SexpProcessor

Basis of vulnerability checks.

Methods

Included Modules

Brakeman::ProcessorHelper Brakeman::SafeCallHelper Brakeman::Util Brakeman::Messages

Constants

CONFIDENCE = Brakeman::Warning::CONFIDENCE   This is for legacy support. Use :high, :medium, or :low instead when creating warnings.
Match = Struct.new(:type, :match)

Attributes

name  [RW] 
tracker  [R] 
warnings  [R] 

Public Class methods

Initialize Check with Checks.

Public Instance methods

Add result to result list, which is used to check for duplicates

Process calls and check if they include user input

Note that cookies are included in current expression

Default Sexp processing. Iterates over each value in the Sexp and processes them if they are also Sexps.

Does not actually process string interpolation, but notes that it occurred.

Note that params are included in current expression

[Validate]