lib/brakeman/checks/check_yaml_parsing.rb in brakeman-2.6.3 vs lib/brakeman/checks/check_yaml_parsing.rb in brakeman-3.0.0
- old
+ new
@@ -26,11 +26,11 @@
warn :warning_type => "Remote Code Execution",
:warning_code => :CVE_2013_0156,
:message => message,
:confidence => CONFIDENCE[:high],
- :file => gemfile_or_environment,
+ :gem_info => gemfile_or_environment,
:link_path => "https://groups.google.com/d/topic/rubyonrails-security/61bkgvnSGTQ/discussion"
end
#Warn if app accepts YAML
if version_between?("0.0.0", "2.3.14") and enabled_yaml_parser?
@@ -38,10 +38,10 @@
warn :warning_type => "Remote Code Execution",
:warning_code => :CVE_2013_0156,
:message => message,
:confidence => CONFIDENCE[:high],
- :file => gemfile_or_environment,
+ :gem_info => gemfile_or_environment,
:link_path => "https://groups.google.com/d/topic/rubyonrails-security/61bkgvnSGTQ/discussion"
end
end
def disabled_xml_parser?