Showing 134 of 134 total issues
Nested attributes rejection proc bypass in Active Record Open
Open
activerecord (4.2.5)
- Read upRead up
- Exclude checks
Advisory: CVE-2015-7577
Criticality: Medium
URL: https://groups.google.com/forum/#!topic/rubyonrails-security/cawsWcQ6c8g
Solution: upgrade to >= 5.0.0.beta1.1, >= 4.2.5.1, ~> 4.2.5, >= 4.1.14.1, ~> 4.1.14, ~> 3.2.22.1
TODO found Open
Open
<p>[TODO]: please fill in terms and conditions</p>
- Exclude checks
TODO found Open
Open
If you are getting bored, feel free to help. [Here](./public/doc/TODO.md) is our [TODO list](./public/doc/TODO.md).
- Exclude checks
TODO found Open
Open
If you are getting bored, feel free to help. [Here](./public/doc/TODO.md) is our [TODO list](./public/doc/TODO.md).
- Exclude checks
HACK found Open
Open
(TODO, FIXME, OPTIMIZE, HACK, REVIEW).
- Exclude checks
TODO found Open
Open
# TODO list
- Exclude checks
TODO found Open
Open
UPLOAD_CHUNK = 1024000 # TODO: to be tuned
- Exclude checks
TODO found Open
Open
(TODO, FIXME, OPTIMIZE, HACK, REVIEW).
- Exclude checks
TODO found Open
Open
<p>[TODO]: Find me in app/views/pages/welcome.html.erb</p>
- Exclude checks
TODO found Open
Open
# TODO: in the remote ajax actions: instead of render do:
- Exclude checks
TODO found Open
Open
# TODO Comment out these rules if you are OK with secrets being uploaded to the repo
- Exclude checks
TODO found Open
Open
If you are getting bored, feel free to help. [Here](./public/doc/TODO.md) is our [TODO list](./public/doc/TODO.md).
- Exclude checks
FIXME found Open
Open
(TODO, FIXME, OPTIMIZE, HACK, REVIEW).
- Exclude checks
TODO found Open
Open
# TODO: deal with updates
- Exclude checks