提交 4b8ab29f 编写于 作者: J Justin Collins

Warn about file access with open()

上级 54ff7f37
......@@ -12,6 +12,7 @@ class Brakeman::CheckFileAccess < Brakeman::BaseCheck
methods = tracker.find_call :targets => [:Dir, :File, :IO, :Kernel, :"Net::FTP", :"Net::HTTP", :PStore, :Pathname, :Shell], :methods => [:[], :chdir, :chroot, :delete, :entries, :foreach, :glob, :install, :lchmod, :lchown, :link, :load, :load_file, :makedirs, :move, :new, :open, :read, :readlines, :rename, :rmdir, :safe_unlink, :symlink, :syscopy, :sysopen, :truncate, :unlink]
methods.concat tracker.find_call :target => :YAML, :methods => [:load_file, :parse_file]
methods.concat tracker.find_call :target => nil, :method => [:open]
Brakeman.debug "Finding calls to load()"
methods.concat tracker.find_call :target => false, :method => :load
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册