Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: avoid detecting phlex components as dynamic render paths #1805

Merged
merged 3 commits into from Dec 24, 2023

Conversation

ElMassimo
Copy link
Contributor

Description 📖

This pull request adds support for phlex, preventing brakeman from detecting usages of Phlex components as occurrences of Dynamic Render Paths.

Background 📜

This problem is similar to what used to happen in the past for view_components:

@presidentbeef
Copy link
Owner

Can you add a test or two?

Copy link

dryrunsecurity bot commented Dec 5, 2023

Contextual Security Analysis

As DryRun Security performs checks, we’ll summarize them here. You can always dive into the results in the section below for checks.

Status DryRun Security Check
AI-powered Sensitive Function Check
Configured Sensitive Files Check
AI-powered Sensitive Files Check

Chat with your AI-powered Security Buddy by typing /dryrunsec: (or /drs:) followed by your question. Example: /dryrunsec: From a security perspective, what are some sensitive files in an Express application?

Install and configure more repositories at DryRun Security

@presidentbeef presidentbeef merged commit 60be285 into presidentbeef:main Dec 24, 2023
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants