Search results

class_eval with known safe strings showing as dangerous

Status: Open.

#1919 In presidentbeef/brakeman;

· kwerle opened on Feb 10, 2025

HAML inconsistency question

Status: Open.

#1918 In presidentbeef/brakeman;

· kwerle opened on Feb 10, 2025

False positive warning when rendering a partial that has a local called text

Status: Open.

#1915 In presidentbeef/brakeman;

· strika opened on Jan 22, 2025

XSS false positive. Is haml v6 supported?

Status: Open.

#1914 In presidentbeef/brakeman;

· AkshayGoyal022 opened on Jan 21, 2025

Error: undefined method 'first_param' for an instance of Array with Ruby 3.4.1

Status: Open.

#1909 In presidentbeef/brakeman;

· greendrop opened on Jan 7, 2025

Allow --only-files et al. to function with 'leading dot' notation for files

Status: Open.

#1895 In presidentbeef/brakeman;

· gstokkink opened on Dec 18, 2024

WeakRSAKey check page is missing

Status: Open.

#1894 In presidentbeef/brakeman;

· aliismayilov opened on Dec 18, 2024

Option to process additional/non-standard config files

Status: Open.

#1887 In presidentbeef/brakeman;

· joshuay03 opened on Nov 26, 2024

XSS False positive inside = javascript_tag

Status: Open.

#1886 In presidentbeef/brakeman;

· kwerle opened on Nov 25, 2024

False positive when methods chained on permitted params

Status: Open.

#1885 In presidentbeef/brakeman;

· bschmeck opened on Nov 20, 2024

Accept ActiveStorage::Filename#sanitized and to_i as safe

Status: Open.

#1883 In presidentbeef/brakeman;

· bb opened on Nov 7, 2024

Doubt about an XSS warning

Status: Open.

#1871 In presidentbeef/brakeman;

· dgarofoli1987 opened on Oct 10, 2024