Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
badapp is bad
Ruby JavaScript CoffeeScript
branch: master

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
app
config
db
lib
log
public
script
test
vendor
.gitignore
Gemfile
Gemfile.lock
README.md
Rakefile
brakeman_report.html
config.ru
goldberg_config.rb

README.md

A VERY Bad App

This app is intended to trigger Brakeman warnings of all varieties, for PoC research, and fun. You should probably not fork it. You should definitely not base an app off of it.

Moreover, the app probably doesn't work. It is a playground of snippets for a static analysis scanner to detect, not operational code. If you have a funny edge case where Brakeman is missing something important please feel free to create a pull request!

Something went wrong with that request. Please try again.