Class Brakeman::TemplateAliasProcessor
In: lib/brakeman/processors/template_alias_processor.rb
Parent: Brakeman::AliasProcessor

Processes aliasing in templates. Handles calls to render.

Methods

Included Modules

Brakeman::RenderHelper

Constants

FORM_METHODS = Set[:form_for, :remote_form_for, :form_remote_for]
UNKNOWN_MODEL_CALL = Sexp.new(:call, Sexp.new(:const, Brakeman::Tracker::UNKNOWN_MODEL), :new)
FORM_BUILDER_CALL = Sexp.new(:call, Sexp.new(:const, :FormBuilder), :new)
COLLECTION_METHODS = [:all, :find, :select, :where]

Public Class methods

Public Instance methods

Ignore `<<` calls on template variables which are used by the templating library (HAML, ERB, etc.)

Checks if exp is a call to Model.all or Model.find*

Looks for form methods and iterating over collections of Models

Determine template name

[Validate]