lib/railroader/checks/check_evaluation.rb in railroader-4.3.5 vs lib/railroader/checks/check_evaluation.rb in railroader-4.3.7

- old
+ new

@@ -1,25 +1,25 @@ require 'railroader/checks/base_check' -#This check looks for calls to +eval+, +instance_eval+, etc. which include -#user input. +# This check looks for calls to +eval+, +instance_eval+, etc. which include +# user input. class Railroader::CheckEvaluation < Railroader::BaseCheck Railroader::Checks.add self @description = "Searches for evaluation of user input" - #Process calls + # Process calls def run_check Railroader.debug "Finding eval-like calls" calls = tracker.find_call :method => [:eval, :instance_eval, :class_eval, :module_eval] Railroader.debug "Processing eval-like calls" calls.each do |call| process_result call end end - #Warns if eval includes user input + # Warns if eval includes user input def process_result result return unless original? result if input = include_user_input?(result[:call].arglist) warn :result => result,