Sha256: f9c93c87a0f9103e0199698e3d1cd7a9a842df902b41080655f49d13f0670310
Contents?: true
Size: 773 Bytes
Versions: 41
Compression:
Stored size: 773 Bytes
Contents
# frozen_string_literal: true
module RuboCop
module Cop
module Security
# This cop checks for the use of `Kernel#eval` and `Binding#eval`.
#
# @example
#
# # bad
#
# eval(something)
# binding.eval(something)
class Eval < Base
MSG = 'The use of `eval` is a serious security risk.'
RESTRICT_ON_SEND = %i[eval].freeze
# @!method eval?(node)
def_node_matcher :eval?, <<~PATTERN
(send {nil? (send nil? :binding)} :eval $!str ...)
PATTERN
def on_send(node)
eval?(node) do |code|
return if code.dstr_type? && code.recursive_literal?
add_offense(node.loc.selector)
end
end
end
end
end
end
Version data entries
41 entries across 41 versions & 6 rubygems