Sha256: cde9a5470032d5718b984aae33716637ffb4f3bc6dda688f03eed6ba0ab1f7d9
Contents?: true
Size: 1015 Bytes
Versions: 6
Compression:
Stored size: 1015 Bytes
Contents
require 'brakeman/processors/base_processor'
#Processes Gemfile and Gemfile.lock
class Brakeman::GemProcessor < Brakeman::BaseProcessor
def initialize *args
super
@tracker.config[:gems] ||= {}
end
def process_gems src, gem_lock = nil
process src
if gem_lock
get_rails_version gem_lock
elsif @tracker.config[:gems][:rails] =~ /(\d+.\d+.\d+)/
@tracker.config[:rails_version] = $1
end
if @tracker.config[:gems][:rails_xss]
@tracker.config[:escape_html] = true
Brakeman.notify "[Notice] Escaping HTML by default"
end
end
def process_call exp
if exp[1] == nil and exp[2] == :gem
args = exp[3][1..-1]
if sexp? args[1]
@tracker.config[:gems][args[0][1].to_sym] = args[1][1]
else
@tracker.config[:gems][args[0][1].to_sym] = ">=0.0.0"
end
end
exp
end
def get_rails_version gem_lock
if gem_lock =~ /\srails \((\d+.\d+.\d+)\)$/
@tracker.config[:rails_version] = $1
end
end
end
Version data entries
6 entries across 6 versions & 1 rubygems