提交 9ae37c1e 编写于 作者: J Justin Collins

CheckSQL: Add merge_conditions as safe SQL method

上级 d74b7f3c
......@@ -456,7 +456,7 @@ class Brakeman::CheckSQL < Brakeman::BaseCheck
end
end
IGNORE_METHODS_IN_SQL = Set[:id, :table_name, :to_i, :to_f,
IGNORE_METHODS_IN_SQL = Set[:id, :merge_conditions, :table_name, :to_i, :to_f,
:sanitize_sql, :sanitize_sql_array, :sanitize_sql_for_assignment,
:sanitize_sql_for_conditions, :sanitize_sql_hash,
:sanitize_sql_hash_for_assignment, :sanitize_sql_hash_for_conditions]
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册