Sign upLogin

ManageIQ/manageiq

View on GitHub
Star
app/models/session.rb

Summary

Maintainability
A
0 mins
Test Coverage
A
95%

Avoid using Marshal.load.
Open

    Marshal.load(Base64.decode64(data.split("\n").join))
Severity: Minor
Found in app/models/session.rb by rubocop

Checks for the use of Marshal class methods which have potential security issues leading to remote code execution when loading from an untrusted source.

Example:

# bad
Marshal.load("{}")
Marshal.restore("{}")

# good
Marshal.dump("{}")

# okish - deep copy hack
Marshal.load(Marshal.dump({}))

There are no issues that match your filters.

Category
Status