lib/codesake/dawn/kb/owasp_ror_cheatsheet/csrf.rb in codesake-dawn-1.0.6 vs lib/codesake/dawn/kb/owasp_ror_cheatsheet/csrf.rb in codesake-dawn-1.1.0.rc1

- old
+ new

@@ -15,10 +15,12 @@ :glob=>"application_controller.rb", :aux_links=>["https://www.owasp.org/index.php/Ruby_on_Rails_Cheatsheet"], :message=>message, :attack_pattern => ["protect_from_forgery"], :negative_search=>true, - :mitigation=>"Make sure you are using Rails protect_from_forgery facilities in application_controller.rMake sure you are using Rails protect_from_forgery facilities in application_controller.rb" + :mitigation=>"Make sure you are using Rails protect_from_forgery facilities in application_controller.rMake sure you are using Rails protect_from_forgery facilities in application_controller.rb", + :severity=>:info, + :check_family=>:owasp_ror_cheatsheet }) # @debug = true end end