Q
Detector Library
Ruby detectors (21/21)
SQL InjectionDivide by ZeroSensitive HTTP ActionInsufficient Protected CredentialsSensitive Information LeakUntrusted DeserializationLog InjectionXML External EntityPath InjectionHttp to File AccessCode InjectionOS Command InjectionResource leakCross Site Scripting (XSS)Untrusted OpenImproper Input ValidationStack Trace ExposureImproper Certificate Validationsend_file InjectionUnsafe File PermissionsTainted Format
Path Injection High
User input leads to file opening. This allows users to take control and open any readable file on the system which may leak sensitive information. This can be sanitized with the basename method.
Noncompliant example
1def render_modern_param_noncompliant
2 page = params[:page]
3 # Noncompliant: Unsanitized user-input is used in render file.
4 render file: "/some/path/#{page}"
5endCompliant example
1def render_modern_param_compliant
2 page = params[:page]
3 # Compliant: User-input is sanitized before using it in render file.
4 render file: File.basename("/some/path/#{page}")
5end