Skip to content

Commit

Permalink
Fixing conflict
Browse files Browse the repository at this point in the history
  • Loading branch information
thesp0nge committed Apr 1, 2014
1 parent fc0b9ed commit 56584e2
Showing 1 changed file with 0 additions and 4 deletions.
Expand Up @@ -19,13 +19,9 @@ def initialize
:attack_pattern => ["Application.config.session_store :active_record_store"],
:negative_search=>true,
:avoid_comments=>true,
<<<<<<< HEAD
:evidences=>["In your session_store.rb file you are not using ActiveRecord to store session data. This will let rails to use a cookie based session and it can expose your web application to a session replay attack."],
=======
:check_family=>:owasp_ror_cheatsheet,
:severity=>:info,
:evidences=>["In your session_store.rb file you are not using ActiveRercord to store session data. This will let rails to use a cookie based session and it can expose your web application to a session replay attack."],
>>>>>>> development
:mitigation=>"Use ActiveRecord or the ORM you love most to handle your code session_store. Add \"Application.config.session_store :active_record_store\" to your session_store.rb file."
})
# @debug = true
Expand Down

0 comments on commit 56584e2

Please sign in to comment.