lib/brakeman/checks/check_execute.rb in brakeman-min-3.0.5 vs lib/brakeman/checks/check_execute.rb in brakeman-min-3.1.0

- old
+ new

@@ -80,14 +80,14 @@ end end end def dangerous_open_arg? exp - if node_type? exp, :string_interp, :dstr + if string_interp? exp # Check for input at start of string exp[1] == "" and - node_type? exp[2], :evstr, :string_eval and + node_type? exp[2], :evstr and has_immediate_user_input? exp[2] else has_immediate_user_input? exp end end @@ -135,10 +135,10 @@ if call? e and e.method == :to_s e = e.target end - if node_type? e, :or, :evstr, :string_eval, :string_interp + if node_type? e, :or, :evstr, :dstr if res = dangerous?(e) return res end else return e