Q
Detector Library
Ruby detectors (21/21)
SQL InjectionDivide by ZeroSensitive HTTP ActionInsufficient Protected CredentialsSensitive Information LeakUntrusted DeserializationLog InjectionXML External EntityPath InjectionHttp to File AccessCode InjectionOS Command InjectionResource leakCross Site Scripting (XSS)Untrusted OpenImproper Input ValidationStack Trace ExposureImproper Certificate Validationsend_file InjectionUnsafe File PermissionsTainted Format
Divide by Zero High
Divide by zero is detected, this can result in exceptions, or unintended values. Either wrap the expression in an if statement checking the denominator, or wrap in an exception handling begin block.
Noncompliant example
1def divide_by_zero_noncompliant
2 zero = 0
3 # Noncompliant: divide by zero
4 bad = variable/zero
5endCompliant example
1def divide_by_zero_compliant
2 # Compliant: check before dividing
3 if zero != 0
4 variable / zero
5 end
6end