diff --git a/lib/brakeman/checks/check_link_to.rb b/lib/brakeman/checks/check_link_to.rb index c7c178d11db446f0ab3a555484eeee184726457e..d80c972142b2551f6194b05d69142d0eae5a5177 100644 --- a/lib/brakeman/checks/check_link_to.rb +++ b/lib/brakeman/checks/check_link_to.rb @@ -75,7 +75,7 @@ class Brakeman::CheckLinkTo < Brakeman::CheckCrossSiteScripting warn :result => result, :warning_type => "Cross Site Scripting", :message => message, - :highlight => input.match, + :user_input => input.match, :confidence => CONFIDENCE[:high] elsif not tracker.options[:ignore_model_output] and match = has_immediate_model?(arg)