Sha256: 9d9717a90e2db866bc339d408a344587bfa9fb9da48e577f8852ce4707332fca
Contents?: true
Size: 1017 Bytes
Versions: 40
Compression:
Stored size: 1017 Bytes
Contents
require 'brakeman/checks/base_check'
class Brakeman::CheckTemplateInjection < Brakeman::BaseCheck
Brakeman::Checks.add self
@description = "Searches for evaluation of user input through template injection"
#Process calls
def run_check
Brakeman.debug "Finding ERB.new calls"
erb_calls = tracker.find_call :target => :ERB, :method => :new, :nested => true
Brakeman.debug "Processing ERB.new calls"
erb_calls.each do |call|
process_result call
end
end
#Warns if eval includes user input
def process_result result
return unless original? result
if input = include_user_input?(result[:call].arglist)
warn :result => result,
:warning_type => "Template Injection",
:warning_code => :erb_template_injection,
:message => msg(msg_input(input), " used directly in ", msg_code("ERB"), " template, which might enable remote code execution"),
:user_input => input,
:confidence => :high,
:cwe_id => [1336]
end
end
end
Version data entries
40 entries across 40 versions & 3 rubygems