Contents

class Brakeman::CheckForceSSL < Brakeman::BaseCheck
  Brakeman::Checks.add_optional self

  @description = "Check that force_ssl setting is enabled in production"

  def run_check
    return if tracker.config.rails.empty? or tracker.config.rails_version.nil?
    return if tracker.config.rails_version < "3.1.0"

    force_ssl = tracker.config.rails[:force_ssl]

    if false? force_ssl or force_ssl.nil?
      line = if sexp? force_ssl
               force_ssl.line
             else
               1
             end

      warn :warning_type => "Missing Encryption",
        :warning_code => :force_ssl_disabled,
        :message => msg("The application does not force use of HTTPS: ", msg_code("config.force_ssl"), " is not enabled"),
        :confidence => :high,
        :file => "config/environments/production.rb",
        :line => line
    end
  end
end

Version data entries

99 entries across 85 versions & 4 rubygems

Version	Path
brakeman-5.2.3	lib/brakeman/checks/check_force_ssl.rb
brakeman-lib-5.2.3	lib/brakeman/checks/check_force_ssl.rb
brakeman-min-5.2.3	lib/brakeman/checks/check_force_ssl.rb
brakeman-5.2.2	lib/brakeman/checks/check_force_ssl.rb
brakeman-lib-5.2.2	lib/brakeman/checks/check_force_ssl.rb
brakeman-min-5.2.2	lib/brakeman/checks/check_force_ssl.rb
brakeman-5.2.1	lib/brakeman/checks/check_force_ssl.rb
brakeman-lib-5.2.1	lib/brakeman/checks/check_force_ssl.rb
brakeman-min-5.2.1	lib/brakeman/checks/check_force_ssl.rb
brakeman-5.2.0	lib/brakeman/checks/check_force_ssl.rb
brakeman-lib-5.2.0	lib/brakeman/checks/check_force_ssl.rb
brakeman-min-5.2.0	lib/brakeman/checks/check_force_ssl.rb
brakeman-5.1.2	lib/brakeman/checks/check_force_ssl.rb
brakeman-lib-5.1.2	lib/brakeman/checks/check_force_ssl.rb
brakeman-min-5.1.2	lib/brakeman/checks/check_force_ssl.rb
brakeman-5.1.1	lib/brakeman/checks/check_force_ssl.rb
brakeman-lib-5.1.1	lib/brakeman/checks/check_force_ssl.rb
brakeman-min-5.1.1	lib/brakeman/checks/check_force_ssl.rb
brakeman-5.1.0	lib/brakeman/checks/check_force_ssl.rb
brakeman-lib-5.1.0	lib/brakeman/checks/check_force_ssl.rb