Don't error on hash opts for attr_accessible

fa9fb2f4 · Justin Collins · fa57982a · fa9fb2f4
隐藏空白更改
内联并排

Showing with 6 addition and 2 deletion

lib/brakeman/processors/model_processor.rb lib/brakeman/processors/model_processor.rb +6 -2

未找到文件。
--- a/lib/brakeman/processors/model_processor.rb
+++ b/lib/brakeman/processors/model_processor.rb
@@ -81,8 +81,12 @@ class Brakeman::ModelProcessor < Brakeman::BaseProcessor
        when :attr_accessible
          @model[:attr_accessible] ||= []
          args = args.map do |e|
-            e.value
-          end
+            if node_type? e, :lit
+              e.value
+            else
+              nil
+            end
+          end.compact

          @model[:attr_accessible].concat args
        else