Security Warning - Cross-Site Scripting #211
Comments
|
@pandu-cls Thanks for asking this question. I believe this is a bug in brakeman that has been fixed if you upgrade to the latest version. See these issues for deeper context: |
|
I've pinned #209 to hopefully help others who see this. |
|
@flavorjones Thank you very much for quick response. We have upgraded our brakeman version and it start passing now. Appreciated 👍 |
va-bot
pushed a commit
to department-of-veterans-affairs/caseflow
that referenced
this issue
Jul 20, 2021
Snooze the jquery-rails gem security warning while we work on updating it safely See this PR for updating the gem: #16514 Updating jquery-rails updates loofah to a version that revealed a bug in brakeman. See: flavorjones/loofah#211 Updating brakeman is going to be a more complicated step so snoozing to unblock prs for now
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
We are using Loofah as a dependency on some other gem. When it got upgraded to latest version 2.10.0 our brakeman is showing a security warning (Cross-Site Scripting). Please take a look at below for more details.
We are using below versions.
Rails - 6.1.3.2
Ruby - 2.7.4
Brakeman - 4.8.2
Please let us know if any resolution is made or we have to downgrade to 2.9.1
The text was updated successfully, but these errors were encountered: