Contents

---
# This cop checks for the use of JSON class methods which have potential
# security issues.
Security/JSONLoad:
  Enabled: true

# This cop checks for the use of *Kernel#eval*.
Security/Eval:
  Enabled: true

GitlabSecurity/DeepMunge:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

# To be enabled by https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/13610
GitlabSecurity/JsonSerialization:
  Enabled: false

GitlabSecurity/PublicSend:
  Enabled: true
  Exclude:
    - 'config/**/*'
    - 'db/**/*'
    - 'features/**/*'
    - 'lib/**/*.rake'
    - 'qa/**/*'
    - 'spec/**/*'

GitlabSecurity/RedirectToParamsUpdate:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

GitlabSecurity/SqlInjection:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

GitlabSecurity/SystemCommandInjection:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

Version data entries

8 entries across 8 versions & 1 rubygems

Version	Path
gitlab-styles-6.2.0	rubocop-security.yml
gitlab-styles-6.1.0	rubocop-security.yml
gitlab-styles-6.0.0	rubocop-security.yml
gitlab-styles-5.4.0	rubocop-security.yml
gitlab-styles-5.3.0	rubocop-security.yml
gitlab-styles-5.2.0	rubocop-security.yml
gitlab-styles-5.1.0	rubocop-security.yml
gitlab-styles-5.0.0	rubocop-security.yml