# File lib/brakeman/checks/check_cross_site_scripting.rb, line 123 def likely_model_attribute? exp return false unless call? exp method = exp.method if MODEL_METHODS.include? method or method.to_s.start_with? "find_by_" true else likely_model_attribute? exp.target end end