brakeman · Issues· 120 open

False positive: `HAML::AttributeBuilder.build_class` incorrectly flagged as XSS

request: strong params checks for id (key) columns

Unscoped Find should exclude only if all belongs_to associations are optional

Parallelise index_call_sites and process_libs: ~75% of scan time is single-threaded on large apps

Poor performance processing repeated conditional reassignments

False Positive: Regexp containing an escaped $ is marked unsafe

Add warnings for dangerous content security policy settings autogenerated by Rails

Support reading config from ignore file

Hash lookup on frozen constant should untaint the result

UnsafeReflection requires array to be defined with values strictly in the context of the execution

How to write reports to file and summary to stdout?

[Format Error] on code field with Prism parser- Brakeman v7.0.2

Provide a way to report warnings only from some files/directories while scanning the full app

Ignore comment in Regex

Brakeman enum support broken?