class

Flaw::UnsafeDeserialize

Inherits Flaw::Rule < Reference < Object

Constants

PATTERNS = [/\bJSON\.parse\s*\(\s*(STDIN|ARGV\[|request\.body|params\[|env\[|cookies\[)/, /\bMessagePack\.unpack\s*\(\s*(STDIN|ARGV\[|request\.body|params\[|cookies\[)/, /\bJSON\.parse\s*\(\s*File\.read\s*\(\s*(ARGV\[|params\[|env\[)/]

Instance methods

check(source : String, path : String) : Array(Finding)
Source
default_severity
Source
description
Source
title
Source