lib/brakeman/checks/check_execute.rb in brakeman-min-3.0.5 vs lib/brakeman/checks/check_execute.rb in brakeman-min-3.1.0
- old
+ new
@@ -80,14 +80,14 @@
end
end
end
def dangerous_open_arg? exp
- if node_type? exp, :string_interp, :dstr
+ if string_interp? exp
# Check for input at start of string
exp[1] == "" and
- node_type? exp[2], :evstr, :string_eval and
+ node_type? exp[2], :evstr and
has_immediate_user_input? exp[2]
else
has_immediate_user_input? exp
end
end
@@ -135,10 +135,10 @@
if call? e and e.method == :to_s
e = e.target
end
- if node_type? e, :or, :evstr, :string_eval, :string_interp
+ if node_type? e, :or, :evstr, :dstr
if res = dangerous?(e)
return res
end
else
return e