提交 71f5d18d 编写于 作者: J Justin

Merge pull request #410 from noahd1/reduce_slim_false_positives

Reduce Slim-template XSS false positives
......@@ -96,7 +96,7 @@ class Brakeman::SlimTemplateProcessor < Brakeman::TemplateProcessor
def is_escaped? exp
call? exp and
exp.target == TEMPLE_UTILS and
exp.method == :escape_html
(exp.method == :escape_html or exp.method == :escape_html_safe)
end
def render? exp
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册