Class | Brakeman::CheckUnsafeReflection |
In: |
lib/brakeman/checks/check_unsafe_reflection.rb
|
Parent: | Brakeman::BaseCheck |
Checks for string interpolation and parameters in calls to String#constantize, String#safe_constantize, Module#const_get and Module#qualified_const_get.
Exploit examples at: blog.conviso.com.br/exploiting-unsafe-reflection-in-rubyrails-applications/