lib/brakeman/checks/check_render_inline.rb in brakeman-4.3.1 vs lib/brakeman/checks/check_render_inline.rb in brakeman-4.4.0
- old
+ new
@@ -24,10 +24,10 @@
if input = has_immediate_user_input?(render_value)
warn :result => result,
:warning_type => "Cross-Site Scripting",
:warning_code => :cross_site_scripting_inline,
- :message => "Unescaped #{friendly_type_of input} rendered inline",
+ :message => msg("Unescaped ", msg_input(input), " rendered inline"),
:user_input => input,
:confidence => :high
elsif input = has_immediate_model?(render_value)
warn :result => result,
:warning_type => "Cross-Site Scripting",