lib/codesake/dawn/kb/owasp_ror_cheatsheet/csrf.rb in codesake-dawn-1.0.6 vs lib/codesake/dawn/kb/owasp_ror_cheatsheet/csrf.rb in codesake-dawn-1.1.0.rc1
- old
+ new
@@ -15,10 +15,12 @@
:glob=>"application_controller.rb",
:aux_links=>["https://www.owasp.org/index.php/Ruby_on_Rails_Cheatsheet"],
:message=>message,
:attack_pattern => ["protect_from_forgery"],
:negative_search=>true,
- :mitigation=>"Make sure you are using Rails protect_from_forgery facilities in application_controller.rMake sure you are using Rails protect_from_forgery facilities in application_controller.rb"
+ :mitigation=>"Make sure you are using Rails protect_from_forgery facilities in application_controller.rMake sure you are using Rails protect_from_forgery facilities in application_controller.rb",
+ :severity=>:info,
+ :check_family=>:owasp_ror_cheatsheet
})
# @debug = true
end
end