Class: Brakeman::CheckTemplateInjection

Inherits:
BaseCheck
  • Object
show all
Defined in:
lib/brakeman/checks/check_template_injection.rb

Instance Method Summary collapse

Instance Method Details

#process_result(result) ⇒ Object

Warns if eval includes user input



20
21
22
23
24
25
26
27
28
29
30
31
32
 
# File 'lib/brakeman/checks/check_template_injection.rb', line 20

def process_result result
  return unless original? result

  if input = include_user_input?(result[:call].arglist)
    warn :result => result,
      :warning_type => "Template Injection",
      :warning_code => :erb_template_injection,
      :message => msg(msg_input(input), " used directly in ", msg_code("ERB"), " template, which might enable remote code execution"),
      :user_input => input,
      :confidence => :high,
      :cwe_id => [1336]
  end
end

#run_check ⇒ Object

Process calls



9
10
11
12
13
14
15
16
17
 
# File 'lib/brakeman/checks/check_template_injection.rb', line 9

def run_check
  Brakeman.debug "Finding ERB.new calls"
  erb_calls = tracker.find_call :target => :ERB, :method => :new, :nested => true

  Brakeman.debug "Processing ERB.new calls"
  erb_calls.each do |call|
    process_result call
  end
end