-
Notifications
You must be signed in to change notification settings - Fork 6
Expand file tree
/
Copy path.rubocop_security.yml
More file actions
55 lines (49 loc) · 1.79 KB
/
Copy path.rubocop_security.yml
File metadata and controls
55 lines (49 loc) · 1.79 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
# Department 'Security' (7): 수정
Security/CompoundHash:
Description: When overwriting Object#hash to combine values, prefer delegating to
Array#hash over writing a custom implementation.
Enabled: true
Safe: false
VersionAdded: '1.28'
VersionChanged: '1.51'
Security/Eval:
Description: The use of eval represents a serious security risk.
Enabled: true
VersionAdded: '0.47'
# Supports --autocorrect
Security/IoMethods:
Description: Checks for the first argument to `IO.read`, `IO.binread`, `IO.write`,
`IO.binwrite`, `IO.foreach`, and `IO.readlines`.
Enabled: true
Safe: false
VersionAdded: '1.22'
# Supports --autocorrect
Security/JSONLoad:
Description: Prefer usage of `JSON.parse` over `JSON.load` due to potential security
issues. See reference for more information.
Reference: https://ruby-doc.org/stdlib-2.7.0/libdoc/json/rdoc/JSON.html#method-i-load
Enabled: true
VersionAdded: '0.43'
VersionChanged: '1.22'
SafeAutoCorrect: false
Security/MarshalLoad:
Description: Avoid using of `Marshal.load` or `Marshal.restore` due to potential security
issues. See reference for more information.
Reference: https://ruby-doc.org/core-2.7.0/Marshal.html#module-Marshal-label-Security+considerations
Enabled: true
VersionAdded: '0.47'
Security/Open:
Description: The use of `Kernel#open` and `URI.open` represent a serious security
risk.
Enabled: true
VersionAdded: '0.53'
VersionChanged: '1.0'
Safe: false
# Supports --autocorrect
Security/YAMLLoad:
Description: Prefer usage of `YAML.safe_load` over `YAML.load` due to potential security
issues. See reference for more information.
Reference: https://ruby-doc.org/stdlib-2.7.0/libdoc/yaml/rdoc/YAML.html#module-YAML-label-Security
Enabled: true
VersionAdded: '0.47'
SafeAutoCorrect: false