dynamic render path error too aggressive

[KevinColemanInc]

brakeman/lib/brakeman/checks/check_render.rb

Line 72 in 2bd52a0

if params? view

I am getting a warning High error warning on this line in my code:

render params[:action], status: status

I think that this is safe, because rails overrides 'action' parameters with the controller's action method.

see this line:

https://github.com/rails/rails/blob/0450642c27af3af35b449208b21695fd55c30f90/actionpack/lib/action_dispatch/http/parameters.rb#L30

I think that params[:action] and params[:controller] should not trigger a warning.

[presidentbeef]

Hi Kevin,

I think you are right. It's no problem to exclude those two keys.