mercredi 13 juillet 2016

How can I skip the specific methods from brakeman scanning process + Rails

I am using the brakeman for security check in my app. I want to skips some methods those are false positive and I Mark Methods as Safe, but I want to add a flag to method to skip that method while brakeman scanning the application.

Example:

class User < ActiveRecord::Base

  # I want to skip this method when brakeman scan the application
  # Kind of `flag` to skip the method
  def profile
    # ..
  end

  def company
    #..
  end
end

I want to add a file where I can manage that which tag need to be skip.

Do any one know how can I do that? Your help is much appreciated.

Aucun commentaire:

Enregistrer un commentaire