diff --git a/lib/brakeman/checks/check_cross_site_scripting.rb b/lib/brakeman/checks/check_cross_site_scripting.rb index 480be16d3da63582c43aa1db92cc0d1b1ec3fe47..c942a179594de71641a8b9be829ff26880cfbede 100644 --- a/lib/brakeman/checks/check_cross_site_scripting.rb +++ b/lib/brakeman/checks/check_cross_site_scripting.rb @@ -17,7 +17,7 @@ class Brakeman::CheckCrossSiteScripting < Brakeman::BaseCheck @description = "Checks for unescaped output in views" #Model methods which are known to be harmless - IGNORE_MODEL_METHODS = Set[:average, :count, :maximum, :minimum, :sum] + IGNORE_MODEL_METHODS = Set[:average, :count, :maximum, :minimum, :sum, :id] MODEL_METHODS = Set[:all, :find, :first, :last, :new]