Class Brakeman::Rails2ConfigProcessor
In: lib/brakeman/processors/lib/rails2_config_processor.rb
Parent: Brakeman::BasicProcessor

Processes configuration. Results are put in tracker.config.

Configuration of Rails via Rails::Initializer are stored in tracker.config.rails. For example:

  Rails::Initializer.run |config|
    config.action_controller.session_store = :cookie_store
  end

will be stored in

  tracker.config[:rails][:action_controller][:session_store]

Values for tracker.config.rails will still be Sexps.

Methods

Constants

RAILS_CONFIG = Sexp.new(:const, :"!BRAKEMAN_RAILS_CONFIG")   Replace block variable in
  Rails::Initializer.run |config|

with this value so we can keep track of it.

Public Class methods

Public Instance methods

Returns an array of symbols for each ‘level’ in the config

  config.action_controller.session_store = :cookie

becomes

  [:action_controller, :session_store]

Check if an expression includes a call to set Rails config

Look for configuration settings

Check if config is set to use Erubis

Check for Rails version

Use this method to process configuration file

[Validate]