Class Brakeman::CheckLinkTo
In: lib/brakeman/checks/check_link_to.rb
Parent: Brakeman::CheckCrossSiteScripting

Checks for calls to link_to in versions of Ruby where link_to did not escape the first argument.

See rails.lighthouseapp.com/projects/8994/tickets/3518-link_to-doesnt-escape-its-input

Methods

actually_process_call   check_argument   check_matched   check_method   check_user_input   process_call   process_result   run_check   warn_xss  

Public Instance methods

check_argument(result, exp)

Check the argument for possible xss exploits

check_matched(result, matched = nil)

Check if we should warn about the matched result

check_method(result, argument)

Check if we should warn about the specified method

check_user_input(result, argument)

Check we should warn about the user input

[Validate]