fat_free_crm 0.16.4 → 0.17.1

data/app/views/tasks/edit.js.haml

@@ -3,7 +3,7 @@
 - if params[:cancel].true?     # <----------------- Hide [Edit Task]
 
   - partial = (@task.assigned_to && @task.assigned_to != current_user.id) ? "assigned" : "pending"
-  $('##{id}').html('#{ j render(:partial => partial, :collection => [ @task ], :locals => { :bucket => @task.bucket }) }');
+  $('##{id}').html('#{ j render(partial: partial, collection: [ @task ], locals: { bucket: @task.bucket }) }');
 
 - else # <----------------------------------------  Show [Edit Task] form.
 
@@ -14,7 +14,7 @@
   - if @previous
     - if @previous.is_a?(Task)
       - partial = (@previous.assigned_to && @previous.assigned_to != current_user.id) ? "assigned" : "pending"
-      $('##{dom_id(@previous)}').replaceWith('#{ j render(:partial => partial, :collection => [ @previous ], :locals => { :bucket => nil }) }');
+      $('##{dom_id(@previous)}').replaceWith('#{ j render(partial: partial, collection: [ @previous ], locals: { bucket: nil }) }');
     - else
       crm.flick('task_#{@previous}', 'remove');
 
@@ -22,5 +22,5 @@
   crm.highlight_off('#{id}');
 
   -# Show [Edit Task] form.
-  $('##{id}').html('#{ j render(:partial => "edit") }');
+  $('##{id}').html('#{ j render(partial: "edit") }');
   $('#task_name').focus();

data/app/views/tasks/index.html.haml

@@ -4,16 +4,16 @@
   - buckets = Setting.unroll(:task_completed)
   .title
     = t(:completed_tasks)
-    = image_tag("loading.gif", :size => :thumb, :id => "loading", :style => "display: none;")
+    = image_tag("loading.gif", size: :thumb, id: "loading", style: "display: none;")
 - else
   - buckets = Setting.unroll(:task_bucket)
   = render "title"
 
 .log#tasks
   - buckets.each do |value, key|
-    %div{ hidden_if(filtered_out?(@view, key)), :id => "list_#{key}" }
-      %h3{:class => key}= t(value)
-      .bucket{:id => key}= render :partial => @view, :collection => @tasks[key] || [], :locals => { :bucket => key }
+    %div{ hidden_if(filtered_out?(@view, key)), id: "list_#{key}" }
+      %h3{class: key}= t(value)
+      .bucket{id: key}= render partial: @view, collection: @tasks[key] || [], locals: { bucket: key }
   - if @tasks.values.flatten.blank?
     = render "empty"
 

data/app/views/tasks/index.xls.builder

@@ -1,9 +1,11 @@
+# frozen_string_literal: true
+
 xml.Worksheet 'ss:Name' => I18n.t(:tab_tasks) do
   xml.Table do
     unless @tasks.empty?
       # Header.
       xml.Row do
-        heads = %w{id
+        heads = %w[id
                    name
                    due
                    date_created
@@ -12,7 +14,7 @@ xml.Worksheet 'ss:Name' => I18n.t(:tab_tasks) do
                    user
                    assigned_to
                    category
-                   background_info}
+                   background_info]
 
         heads.each do |head|
           xml.Cell do
@@ -39,7 +41,7 @@ xml.Worksheet 'ss:Name' => I18n.t(:tab_tasks) do
           data.each do |value|
             xml.Cell do
               xml.Data value,
-                       'ss:Type' => "#{value.respond_to?(:abs) ? 'Number' : 'String'}"
+                       'ss:Type' => (value.respond_to?(:abs) ? 'Number' : 'String').to_s
             end
           end
         end

data/app/views/tasks/new.js.haml

@@ -2,7 +2,7 @@ crm.flick('empty', 'toggle');
 crm.flip_form('create_task');
 
 - unless params[:cancel].true?
-  $('#create_task').html('#{ j render(:partial => "new") }');
+  $('#create_task').html('#{ j render(partial: "new") }');
   crm.set_title('create_task', '#{j t(:create_task) }');
 - else
   crm.set_title('create_task', '#{ @view == "assigned" ? t(:assigned_tasks) : t(:tasks) }');

data/app/views/tasks/update.js.haml

@@ -4,7 +4,7 @@
     -# If it's not Tasks tab then we just reload appropriate
     -# partial with the new task, and update recent items.
     = replace_content(@task)
-    $('#recently').replaceWith('#{ j render(:partial => "shared/recently") }');
+    $('#recently').replaceWith('#{ j render(partial: "shared/recently") }');
   - else
     - if @task.assigned_to != @task_before_update.assigned_to
       = reassign(@task)

data/app/views/users/_avatar.html.haml

@@ -1,7 +1,7 @@
 .remote
-  = form_for(@user, :url => upload_avatar_user_path(@user, :format => "js"), :html => { :multipart => true, :target => "uploading", :onsubmit => "$('#user_avatar_submit').disabled = true" }) do |f|
+  = form_for(@user, url: upload_avatar_user_path(@user, format: "js"), html: { multipart: true, target: "uploading", onsubmit: "$('#user_avatar_submit').disabled = true" }) do |f|
     = link_to_close avatar_user_path(@user)
-    = error_messages_for :avatar, :object => @user.avatar, :object_name => t('avatar')
+    = error_messages_for :avatar, object: @user.avatar, object_name: t('avatar')
 
     %p
       %small #{t :image_help}
@@ -11,10 +11,10 @@
       %div= a.file_field :image
 
     .buttonbar
-      %small.cool{:style => "float:right"}== #{t :gravatar_help} #{link_to(t(:here), "http://en.gravatar.com", :"data-popup" => true)}.
-      = f.submit t(:upload_picture), :id => "user_avatar_submit"
+      %small.cool{style: "float:right"}== #{t :gravatar_help} #{link_to(t(:here), "http://en.gravatar.com", :"data-popup" => true)}.
+      = f.submit t(:upload_picture), id: "user_avatar_submit"
       #{t :or}
-      = link_to(t(:use_gravatar), upload_avatar_user_path(@user) + '?gravatar=1', :method => :put, :remote => true)
+      = link_to(t(:use_gravatar), upload_avatar_user_path(@user) + '?gravatar=1', method: :put, remote: true)
       #{t :or}
       = link_to_cancel avatar_user_path(@user)
 %br

data/app/views/users/_password.html.haml

@@ -1,8 +1,8 @@
 .remote
-  = form_for(@user, :url => change_password_user_path(@user), :html => one_submit_only, :remote => true) do |f|
+  = form_for(@user, url: change_password_user_path(@user), html: one_submit_only, remote: true) do |f|
     = link_to_close password_user_path(@user)
 
-    = f.error_messages :object_name => t('password')
+    = f.error_messages object_name: t('password')
 
     .section
       %table
@@ -10,7 +10,7 @@
           %td
             .label.req.top #{t :current_password}:
             = password_field_tag :current_password, nil
-          %td{ :colspan => 2 }= spacer
+          %td{ colspan: 2 }= spacer
         %tr
           %td
             .label.req #{t :new_password}:

data/app/views/users/_profile.html.haml

@@ -1,8 +1,8 @@
 .remote
-  = form_for(@user, :html => one_submit_only, :remote => true) do |f|
+  = form_for(@user, html: one_submit_only, remote: true) do |f|
     = link_to_close edit_user_path(@user)
 
-    = f.error_messages :object_name => t('user')
+    = f.error_messages object_name: t('user')
 
     .section
       %table
@@ -26,37 +26,37 @@
     .section
       %table
         %tr
-          %td{ :colspan => 3 }
+          %td{ colspan: 3 }
             .label.top.req #{t :email}:
             = f.text_field :email
           %td= spacer
-          %td{ :colspan => 3 }
+          %td{ colspan: 3 }
             .label.top #{t :alt_email}:
             = f.text_field :alt_email
         %tr
-          %td{ :colspan => 3 }
+          %td{ colspan: 3 }
             .label #{t :phone}:
             = f.text_field :phone
           %td= spacer
-          %td{ :colspan => 3 }
+          %td{ colspan: 3 }
             .label #{t :mobile}:
             = f.text_field :mobile
         %tr
           %td
             .label #{t :aim}:
-            = f.text_field :aim, :style => "width:112px"
+            = f.text_field :aim, style: "width:112px"
           %td= spacer
           %td
             .label #{t :yahoo}:
-            = f.text_field :yahoo, :style => "width:112px"
+            = f.text_field :yahoo, style: "width:112px"
           %td= spacer
           %td
             .label #{t :google}:
-            = f.text_field :google, :style => "width:112px"
+            = f.text_field :google, style: "width:112px"
           %td= spacer
           %td
             .label #{t :skype}:
-            = f.text_field :skype, :style => "width:112px"
+            = f.text_field :skype, style: "width:112px"
 
     .buttonbar
       = f.submit t :save_profile

data/app/views/users/_user.html.haml

@@ -1,15 +1,15 @@
 - if @user == current_user && Setting.per_user_locale
   %div#options(style="float:right")
-    #{t :profile_language}: #{link_to(language_for(current_user), "#", :id => :locale)}
+    #{t :profile_language}: #{link_to(language_for(current_user), "#", id: :locale)}
 
 %table(cellspacing="0" cellpadding="0")
   %tr
     %td(valign="top")
-      = avatar_for(@user, :style => "margin: 0px 10px 0px 0px")
+      = avatar_for(@user, style: "margin: 0px 10px 0px 0px")
     %td(valign="top")
       %h3= h(@user.full_name) + " (#{@user.username})"
       - if !@user.title.blank? && !@user.company.blank?
-        %div= t(:works_at, :job_title => h(@user.title), :company => h(@user.company))
+        %div= t(:works_at, job_title: h(@user.title), company: h(@user.company))
       - else
         = h(@user.title) unless @user.title.blank?
         = h(@user.company) unless @user.company.blank?

data/app/views/users/_user_report.html.haml

@@ -1,6 +1,6 @@
-%li{:id => dom_id(user_report)}
+%li{id: dom_id(user_report)}
   .title
     %span#title
       = user_report.full_name
   %ul.list#opportunities
-    = render :partial => "opportunities/opportunity", :collection => user_report.assigned_opportunities.pipeline.order("opportunities.amount DESC")
+    = render partial: "opportunities/opportunity", collection: user_report.assigned_opportunities.pipeline.order("opportunities.amount DESC")

data/app/views/users/avatar.js.haml

@@ -2,7 +2,7 @@
   crm.flip_form('upload_avatar');
   crm.set_title('upload_avatar', '#{j t(:my_profile)}');
 - else
-  $('#upload_avatar').html('#{ j render(:partial => "avatar") }');
+  $('#upload_avatar').html('#{ j render(partial: "avatar") }');
   crm.hide_form('edit_profile');
   crm.hide_form('change_password');
   crm.flip_form('upload_avatar');

data/app/views/users/change_password.js.haml

@@ -5,7 +5,7 @@
   crm.flash('notice')
   - flash[:notice] = nil
 - else
-  $('#change_password').html('#{ j render(:partial => "password") }');
+  $('#change_password').html('#{ j render(partial: "password") }');
   $('#change_password').effect("shake", { duration:250, distance: 6 });
   - if @user.errors[:current_password].present?
     $('#current_password').focus();

data/app/views/users/edit.js.haml

@@ -2,7 +2,7 @@
   crm.flip_form('edit_profile');
   crm.set_title('edit_profile', '#{ j t(:my_profile) }');
 - else
-  $('#edit_profile').html('#{ j render(:partial => "profile") }');
+  $('#edit_profile').html('#{ j render(partial: "profile") }');
   crm.hide_form('upload_avatar');
   crm.hide_form('change_password');
   crm.flip_form('edit_profile');

data/app/views/users/new.html.haml

@@ -1,9 +1,9 @@
 .standalone
-  = form_for(@user, :html => one_submit_only) do |f|
+  = form_for(@user, html: one_submit_only) do |f|
     .title_tools #{t :already_signed_up} #{link_to t(:login_now_link), login_path}
     .title #{t :sign_up}
 
-    = f.error_messages :object_name => t('user')
+    = f.error_messages object_name: t('user')
 
     .section
       .label #{t :email}:

data/app/views/users/opportunities_overview.html.haml

@@ -4,13 +4,13 @@
 
 - if @users_with_opportunities.any? || @unassigned_opportunities.any?
   %ul
-    = render :partial => "user_report", :collection => @users_with_opportunities
+    = render partial: "user_report", collection: @users_with_opportunities
     - if @unassigned_opportunities.any?
       #unassigned
         .title
           %span#title
             = t(:unassigned_opportunities)
         %ul.list#opportunities
-          = render :partial => "opportunities/opportunity", :collection => @unassigned_opportunities
+          = render partial: "opportunities/opportunity", collection: @unassigned_opportunities
 - else
   = t(:no_opportunities_found)

data/app/views/users/password.js.haml

@@ -2,7 +2,7 @@
   crm.flip_form('change_password');
   crm.set_title('change_password', '#{t(:my_profile)}');
 - else
-  $('#change_password').html('#{ j render(:partial => "password") }');
+  $('#change_password').html('#{ j render(partial: "password") }');
   crm.hide_form('edit_profile');
   crm.hide_form('upload_avatar');
   crm.flip_form('change_password');

data/app/views/users/show.html.haml

@@ -1,8 +1,8 @@
 .title_tools
   - if @user == current_user || current_user.admin?
-    = link_to_inline(:edit_profile, edit_user_path(@user), :text => t(:edit_profile)) + " | "
-    = link_to_inline(:upload_avatar, avatar_user_path(@user), :text => t(:upload_picture)) + " | "
-    = link_to_inline(:change_password, password_user_path(@user), :text => t(:change_password))
+    = link_to_inline(:edit_profile, edit_user_path(@user), text: t(:edit_profile)) + " | "
+    = link_to_inline(:upload_avatar, avatar_user_path(@user), text: t(:upload_picture)) + " | "
+    = link_to_inline(:change_password, password_user_path(@user), text: t(:change_password))
 .title#title= (@user == current_user ? t(:my_profile) : t(:profile))
 %div#edit_profile{ hidden }
 %div#upload_avatar{ hidden }
@@ -12,4 +12,4 @@
 
 = hook(:show_user_bottom, self)
 
-%iframe#uploading{ :name => "uploading", :style => "width:100px; height:10px; border:5px" }
+%iframe#uploading{ name: "uploading", style: "width:100px; height:10px; border:5px" }

data/app/views/users/update.js.haml

@@ -1,9 +1,11 @@
 - if @user.errors.empty?
   crm.flip_form('edit_profile');
   crm.set_title('edit_profile', '#{j t(:my_profile)}');
+  $('#flash').html('#{j flash[:notice]}');
+  crm.flash('notice')
   $('#welcome_username').html('#{j current_user.name}');
-  $('#profile').html('#{ j render(:partial => "user") }');
+  $('#profile').html('#{ j render(partial: "user") }');
 - else
-  $('#edit_profile').html('#{ j render(:partial => "profile") }');
+  $('#edit_profile').html('#{ j render(partial: "profile") }');
   $('#edit_profile').effect("shake", { duration:250, distance: 6 });
   $('#user_email').focus();

data/app/views/users/upload_avatar.js.haml

@@ -1,7 +1,7 @@
 - if @user.avatar.nil? || @user.avatar.errors.empty?
   crm.flip_form('upload_avatar');
   crm.set_title('upload_avatar', '#{j t(:my_profile)}');
-  $('#profile').html('#{ j render(:partial => "user") }');
+  $('#profile').html('#{ j render(partial: "user") }');
 - else
-  $('#upload_avatar').html('#{ j render(:partial => "avatar") }');
+  $('#upload_avatar').html('#{ j render(partial: "avatar") }');
   $('#upload_avatar').effect("shake", { duration:250, distance: 6 });

data/app/views/versions/_version.html.haml

@@ -6,12 +6,12 @@
     - else
       - user_name = t('version.anonymous')
     -# If translation doesn't exist, just print event message
-    - if t('version.' + version.event, :default => 0) != 0
-      = t('version.' + version.event, :item => item_type, :by => user_name, :default => version.event)
+    - if t('version.' + version.event, default: 0) != 0
+      = t('version.' + version.event, item: item_type, by: user_name, default: version.event)
     - else
       = auto_link(version.event)
     %small= timeago(version.created_at)
     %tt
       - version.changeset.each do |attr_name, change|
         - label, first, second = parse_version(attr_name, change)
-        = render :partial => 'versions/version_item', :locals => {:label => label, :first => first, :second => second}
+        = render partial: 'versions/version_item', locals: {label: label, first: first, second: second}

data/app/views/versions/_version_item.html.haml

@@ -1,8 +1,8 @@
 - if [first, second].any?(&:present?)
   %br
   - if first.blank? and second.present?
-    = t('version.set_html', :attr => label, :to => second)
+    = t('version.set_html', attr: label, to: second)
   - elsif first.present? and second.present?
-    = t('version.change_html', :attr => label, :from => first, :to => second)
+    = t('version.change_html', attr: label, from: first, to: second)
   - elsif first.present? and second.blank?
-    = t('version.unset_html', :attr => label, :from => first)
+    = t('version.unset_html', attr: label, from: first)

data/app/views/versions/_versions.html.haml

@@ -5,7 +5,7 @@
   %div
     %div{ hidden_if(collapsed) }
       .list
-        - versions = Version.history(object).paginate(:page => 1, :per_page => 20)
-        = render :partial => "versions/version", :collection => versions
+        - versions = Version.history(object).paginate(page: 1, per_page: 20)
+        = render partial: "versions/version", collection: versions
 
       = paginate( collection: versions, id: 'versions_pagination', params: { action: 'versions' } )

data/bin/bundle

@@ -1,3 +1,5 @@
 #!/usr/bin/env ruby
+# frozen_string_literal: true
+
 ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
 load Gem.bin_path('bundler', 'bundle')

data/bin/rails

@@ -1,4 +1,6 @@
 #!/usr/bin/env ruby
-APP_PATH = File.expand_path('../../config/application',  __FILE__)
+# frozen_string_literal: true
+
+APP_PATH = File.expand_path('../../config/application', __FILE__)
 require_relative '../config/boot'
 require 'rails/commands'

data/bin/rake

@@ -1,4 +1,6 @@
 #!/usr/bin/env ruby
+# frozen_string_literal: true
+
 require_relative '../config/boot'
 require 'rake'
 Rake.application.run

data/config.ru

@@ -1,4 +1,6 @@
+# frozen_string_literal: true
+
 # This file is used by Rack-based servers to start the application.
 
-require ::File.expand_path('../config/environment',  __FILE__)
+require ::File.expand_path('../config/environment', __FILE__)
 run FatFreeCRM::Application

data/config/application.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # Copyright (c) 2008-2013 Michael Dvorkin and contributors.
 #
 # Fat Free CRM is freely distributable under the terms of MIT license.

data/config/boot.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # Copyright (c) 2008-2013 Michael Dvorkin and contributors.
 #
 # Fat Free CRM is freely distributable under the terms of MIT license.

data/config/brakeman.ignore

@@ -0,0 +1,139 @@
+{
+  "ignored_warnings": [
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "100bd27b675db63563a2aa0de82022a2119af30503571cd503288fdf4bde25b0",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/home/_account.html.haml",
+      "line": 17,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "t(:added_ago, :value => timeago(Account.new.created_at))",
+      "render_path": [{"type":"controller","class":"HomeController","method":"index","line":19,"file":"app/controllers/home_controller.rb"},{"type":"template","name":"home/index","line":26,"file":"app/views/home/index.html.haml"}],
+      "location": {
+        "type": "template",
+        "template": "home/_account"
+      },
+      "user_input": "Account.new.created_at",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "2843f0dae3f31458dc00c7fa7e9e5944aa0aa155d60236d8c97d72ef70ddec1e",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/admin/fields/_field.html.haml",
+      "line": 14,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "t(:added_ago, :value => timeago((Unresolved Model).new.created_at))",
+      "render_path": [{"type":"template","name":"admin/field_groups/_field_group","line":22,"file":"app/views/admin/field_groups/_field_group.html.haml"}],
+      "location": {
+        "type": "template",
+        "template": "admin/fields/_field"
+      },
+      "user_input": "(Unresolved Model).new.created_at",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "6c45e6cf0d6e61819782455353ab37edc4062fbe6ea2d085e3bb8611e1026330",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/admin/users/_user.html.haml",
+      "line": 44,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "t(:last_logged_in, timeago((Unresolved Model).new.current_login_at))",
+      "render_path": [{"type":"template","name":"admin/users/index","line":11,"file":"app/views/admin/users/index.html.haml"}],
+      "location": {
+        "type": "template",
+        "template": "admin/users/_user"
+      },
+      "user_input": "(Unresolved Model).new.current_login_at",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "b4d60598e6437c34eaf6215fa47bb2fec050b556c0467c7124279b98dd9a8079",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/home/_opportunity.html.haml",
+      "line": 17,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "t(:added_ago, :value => timeago(Opportunity.new.created_at))",
+      "render_path": [{"type":"controller","class":"HomeController","method":"index","line":19,"file":"app/controllers/home_controller.rb"},{"type":"template","name":"home/index","line":17,"file":"app/views/home/index.html.haml"}],
+      "location": {
+        "type": "template",
+        "template": "home/_opportunity"
+      },
+      "user_input": "Opportunity.new.created_at",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "bd48a463fc9dfd02569c959225eabf9e9486e6ed2a9077c264f4e005df734a7e",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/layouts/application.html.haml",
+      "line": 30,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "raw(User.all.map do\n \"'#{j(u.full_name)} (@#{j(u.username)})'\"\n end.join(\",\\n\"))",
+      "render_path": [{"type":"controller","class":"AccountsController","method":"show","line":30,"file":"app/controllers/entities/accounts_controller.rb"}],
+      "location": {
+        "type": "template",
+        "template": "layouts/application"
+      },
+      "user_input": "User.all.map",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "d496ab28166e569e049733e44555316961769f72c1cb3928f1f8b0d3291c99ae",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/home/_account.html.haml",
+      "line": 15,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "t(:added_by, :time_ago => timeago(Account.new.created_at), :user => h(Account.new.user.full_name))",
+      "render_path": [{"type":"controller","class":"HomeController","method":"index","line":19,"file":"app/controllers/home_controller.rb"},{"type":"template","name":"home/index","line":26,"file":"app/views/home/index.html.haml"}],
+      "location": {
+        "type": "template",
+        "template": "home/_account"
+      },
+      "user_input": "Account.new.created_at",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "f7c2504bcdf33fa16064570a42da7afe0ddac86a64beebb8786b519c3fbe4a8b",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/home/_opportunity.html.haml",
+      "line": 15,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "t(:added_by, :time_ago => timeago(Opportunity.new.created_at), :user => h(Opportunity.new.user.full_name))",
+      "render_path": [{"type":"controller","class":"HomeController","method":"index","line":19,"file":"app/controllers/home_controller.rb"},{"type":"template","name":"home/index","line":17,"file":"app/views/home/index.html.haml"}],
+      "location": {
+        "type": "template",
+        "template": "home/_opportunity"
+      },
+      "user_input": "Opportunity.new.created_at",
+      "confidence": "Weak",
+      "note": ""
+    }
+  ],
+  "updated": "2018-01-18 16:15:02 +0900",
+  "brakeman_version": "4.1.1"
+}