Contents

---
require:
  - rubocop-gitlab-security

# This cop checks for the use of JSON class methods which have potential
# security issues.
Security/JSONLoad:
  Enabled: true

# This cop checks for the use of *Kernel#eval*.
Security/Eval:
  Enabled: true

GitlabSecurity/DeepMunge:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

# To be enabled by https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/13610
GitlabSecurity/JsonSerialization:
  Enabled: false

GitlabSecurity/PublicSend:
  Enabled: true
  Exclude:
    - 'config/**/*'
    - 'db/**/*'
    - 'features/**/*'
    - 'lib/**/*.rake'
    - 'qa/**/*'
    - 'spec/**/*'

GitlabSecurity/RedirectToParamsUpdate:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

GitlabSecurity/SqlInjection:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

GitlabSecurity/SystemCommandInjection:
  Enabled: true
  Exclude:
    - 'lib/**/*.rake'
    - 'spec/**/*'

Version data entries

9 entries across 9 versions & 1 rubygems

Version	Path
gitlab-styles-9.0.0	rubocop-security.yml
gitlab-styles-8.0.0	rubocop-security.yml
gitlab-styles-7.1.0	rubocop-security.yml
gitlab-styles-7.0.0	rubocop-security.yml
gitlab-styles-6.6.0	rubocop-security.yml
gitlab-styles-6.5.0	rubocop-security.yml
gitlab-styles-6.4.0	rubocop-security.yml
gitlab-styles-6.3.0	rubocop-security.yml
gitlab-styles-6.2.1	rubocop-security.yml