lib/railroader/checks/check_select_vulnerability.rb in railroader-4.3.5 vs lib/railroader/checks/check_select_vulnerability.rb in railroader-4.3.7

- old
+ new

@@ -1,9 +1,9 @@ require 'railroader/checks/base_check' -#Checks for select() helper vulnerability in some versions of Rails 3 -#http://groups.google.com/group/rubyonrails-security/browse_thread/thread/9da0c515a6c4664 +# Checks for select() helper vulnerability in some versions of Rails 3 +# http://groups.google.com/group/rubyonrails-security/browse_thread/thread/9da0c515a6c4664 class Railroader::CheckSelectVulnerability < Railroader::BaseCheck Railroader::Checks.add self @description = "Looks for unsafe uses of select() helper" @@ -37,10 +37,10 @@ def process_result result return if duplicate? result third_arg = result[:call].third_arg - #Check for user input in options parameter + # Check for user input in options parameter if sexp? third_arg and include_user_input? third_arg add_result result if string_interp? third_arg confidence = :medium