Q
Detector Library
Ruby detectors (21/21)
SQL InjectionDivide by ZeroSensitive HTTP ActionInsufficient Protected CredentialsSensitive Information LeakUntrusted DeserializationLog InjectionXML External EntityPath InjectionHttp to File AccessCode InjectionOS Command InjectionResource leakCross Site Scripting (XSS)Untrusted OpenImproper Input ValidationStack Trace ExposureImproper Certificate Validationsend_file InjectionUnsafe File PermissionsTainted Format
Tainted Format High
User input serves as the basis for print formatting, which may expose sensitive data. Attackers may be able to use this to gain information on how to trigger other attacks, or exploit weaknesses.
Noncompliant example
1class TaintedFormat < ActionController::Base
2 def unsanitized_input
3 # Noncompliant: untrusted user input is being used directly in format sting.
4 printf(params[:format], arg)
5 end
6endCompliant example
1class TaintedFormat < ActionController::Base
2 def sanitized_input
3 # Compliant: User-input is not used to format output.
4 printf(params[:format])
5 end
6end