rubocop-gitlab-security 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2c65bedf0e3528bc2dc5170eb1dbf121e9c699bf
-  data.tar.gz: 83066a7d3c32e86a9fc1af8d6eb08f0419b5c445
+  metadata.gz: 0df0bdbc8d95c279e3efb8eafbebada37c239175
+  data.tar.gz: 84457ddbb4749bcedf241ce8b4eb634ce6473e7f
 SHA512:
-  metadata.gz: 84d7f7cac070f0544e069c38cc78538d127f3887a34ccbded7b3110e5b63cdfcddaed5b3324f460ed792f1fea383b0126c5358517b1890cd4c21b28ce8fda177
-  data.tar.gz: 5f17b1cede77035a9baf73e8d4b38e12fa1175e810b863f9e294e1ae6837a3a3435d5766d38aafecbc1d602653c9b7cd3132446925218a8e7e9f127965ba1e84
+  metadata.gz: b98c83920653896642ed811ef53c9962e0b43e6f1b6c1c656ba95c437f9f19c5030315ff3ae23833385020350c20960891a9b0cc6b780ecf00e3814d75961d15
+  data.tar.gz: 47255a332d585b3bfa5f063e252c9c6a80acb8319378e9d4d74e28dc8d839d2a6f3d0bc0a81ff2bf0e57a25122b9b67e68861f12dd9562ba74f4641ba41b35cc

data/README.md

@@ -79,7 +79,7 @@ cop. For example:
 ```yaml
 GitlabSecurity/PublicSend:
   Exclude:
-    - app/my_file.rb
+    - 'spec/**/*'
 ```
 
 ## Contributing

data/lib/rubocop/cop/gitlab-security/public_send.rb

@@ -1,6 +1,26 @@
 module RuboCop
   module Cop
     module GitlabSecurity
+      # Check for use of the dangerous public_send() and send() methods.
+      #
+      # If passed untrusted input these methods can be used to execute arbitrary methods on behalf
+      # of an attacker.
+      # 
+      # @example
+      #
+      #   # bad
+      #   myobj.public_send("#{params[:foo]}")
+      # 
+      #   # good
+      #   case params[:foo].to_s
+      #   when 'choice1'
+      #     items.choice1
+      #   when 'choice2'
+      #     items.choice2
+      #   when 'choice3'
+      #     items.choice3
+      #   end
+      #
       class PublicSend < RuboCop::Cop::Cop
         MSG = 'Avoid using `send`'
 

data/lib/rubocop/gitlab-security/version.rb

@@ -4,7 +4,7 @@ module RuboCop
   module GitlabSecurity
     # Version information for the GitlabSecurity Rubocop  plugin.
     module Version
-      STRING = '0.0.1'.freeze
+      STRING = '0.0.2'.freeze
     end
   end
 end

data/rubocop-gitlab-security.gemspec

@@ -30,7 +30,7 @@ Gem::Specification.new do |spec|
   ]
   spec.extra_rdoc_files = ['MIT-LICENSE.md', 'README.md']
 
-  spec.add_runtime_dependency 'rubocop', '>= 0.49.0'
+  spec.add_runtime_dependency 'rubocop', '>= 0.47.1'
 
   spec.add_development_dependency 'rake'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rubocop-gitlab-security
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Brian Neel
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-06-12 00:00:00.000000000 Z
+date: 2017-06-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rubocop
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.49.0
+        version: 0.47.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.49.0
+        version: 0.47.1
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement