Sha256: 81b3187293064f9d58972301fa954a1e6f1d64e85272fd1fdd0195d7c6a5aca8
Contents?: true
Size: 1.14 KB
Versions: 18
Compression:
Stored size: 1.14 KB
Contents
require:
- './lib/simplycop/security/csrf_token_validation.rb'
- './lib/simplycop/security/reject_all_requests_local.rb'
- './lib/simplycop/security/check_for_vulnerable_code.rb'
# Custom security cops
Security/CSRFTokenValidation:
Enabled: true
Details: >-
It is important to have authenticity token validation enabled.
if you need to disable it please check with InfoSec department first.
Security/RejectAllRequestsLocal:
Enabled: true
Details: >-
Affected environments are integration, staging, production
if you need to disable it please check with InfoSec department first.
Security/CheckForVulnerableCode:
Enabled: true
Details: >-
Please make sure that this is addressed accordingly.
Do not hesitate to contact infosec for help and guidance
# Standard security cops
Security/CompoundHash:
Enabled: true
Security/Eval:
Enabled: true
Exclude:
- 'spec/**/*.rb'
# Overridden to false on Chopin
Security/IoMethods:
Enabled: true
# Needs override in chopin spec
Security/JSONLoad:
Enabled: true
Security/MarshalLoad:
Enabled: true
Security/Open:
Enabled: true
Security/YAMLLoad:
Enabled: true
Version data entries
18 entries across 18 versions & 1 rubygems