Sha256: 4a519b0d255afe7b164691220b4d6900747a162e127681ff5171ae902cce7457
Contents?: true
Size: 461 Bytes
Versions: 17
Compression:
Stored size: 461 Bytes
Contents
module RuboCop
module Cop
module Paraxial
class HTMLSafe < Base
MSG = '`html_safe` leads to XSS when called on user input.'
def on_send(node)
method_name = node.method_name
return unless send_methods.include?(method_name)
add_offense(node, message: format(MSG, method: method_name))
end
private
def send_methods
[:html_safe]
end
end
end
end
end
Version data entries
17 entries across 17 versions & 1 rubygems