Class Brakeman::CheckBasicAuth
In: lib/brakeman/checks/check_basic_auth.rb
Parent: Brakeman::BaseCheck

Checks if password is stored in controller when using http_basic_authenticate_with

Only for Rails >= 3.1

Methods

check_basic_auth_filter   check_basic_auth_request   get_password   include_password_literal?   process_call   run_check  

Public Instance methods

check_basic_auth_request()

Look for 

 authenticate_or_request_with_http_basic do |username, password|
   username == "foo" && password == "bar"
 end
include_password_literal?(result)

Check if the block of a result contains a comparison of password to string

process_call(exp)

Looks for :== calls on password var

[Validate]