Contents

require 'brakeman/checks/check_file_access'
require 'brakeman/processors/lib/processor_helper'

#Checks for user input in send_file()
class Brakeman::CheckSendFile < Brakeman::CheckFileAccess
  Brakeman::Checks.add self

  @description = "Check for user input in uses of send_file"

  def run_check
    Brakeman.debug "Finding all calls to send_file()"

    methods = tracker.find_call :target => false, :method => :send_file

    methods.each do |call|
      process_result call
    end
  end
end

Version data entries

301 entries across 287 versions & 4 rubygems

Version	Path
brakeman-7.0.0	lib/brakeman/checks/check_send_file.rb
brakeman-lib-7.0.0	lib/brakeman/checks/check_send_file.rb
brakeman-min-7.0.0	lib/brakeman/checks/check_send_file.rb
brakeman-6.2.2	lib/brakeman/checks/check_send_file.rb
brakeman-lib-6.2.2	lib/brakeman/checks/check_send_file.rb
brakeman-min-6.2.2	lib/brakeman/checks/check_send_file.rb
brakeman-6.2.2.rc1	lib/brakeman/checks/check_send_file.rb
brakeman-min-6.2.1	lib/brakeman/checks/check_send_file.rb
brakeman-lib-6.2.1	lib/brakeman/checks/check_send_file.rb
brakeman-6.2.1	lib/brakeman/checks/check_send_file.rb
brakeman-6.2.0	lib/brakeman/checks/check_send_file.rb
brakeman-lib-6.2.0	lib/brakeman/checks/check_send_file.rb
brakeman-min-6.2.0	lib/brakeman/checks/check_send_file.rb
brakeman-6.1.2	lib/brakeman/checks/check_send_file.rb
brakeman-lib-6.1.2	lib/brakeman/checks/check_send_file.rb
brakeman-min-6.1.2	lib/brakeman/checks/check_send_file.rb
brakeman-min-6.1.1	lib/brakeman/checks/check_send_file.rb
brakeman-lib-6.1.1	lib/brakeman/checks/check_send_file.rb
brakeman-6.1.1	lib/brakeman/checks/check_send_file.rb
brakeman-6.1.0	lib/brakeman/checks/check_send_file.rb