Ignore Model#id for XSS check

317b7b98 · Justin Collins · ea04b1ad · 317b7b98
隐藏空白更改
内联并排

Showing with 1 addition and 1 deletion

lib/brakeman/checks/check_cross_site_scripting.rb lib/brakeman/checks/check_cross_site_scripting.rb +1 -1

未找到文件。
--- a/lib/brakeman/checks/check_cross_site_scripting.rb
+++ b/lib/brakeman/checks/check_cross_site_scripting.rb
@@ -17,7 +17,7 @@ class Brakeman::CheckCrossSiteScripting < Brakeman::BaseCheck
  @description = "Checks for unescaped output in views"

  #Model methods which are known to be harmless
-  IGNORE_MODEL_METHODS = Set[:average, :count, :maximum, :minimum, :sum]
+  IGNORE_MODEL_METHODS = Set[:average, :count, :maximum, :minimum, :sum, :id]

  MODEL_METHODS = Set[:all, :find, :first, :last, :new]