ece517-p3/expertiza

View on GitHub
config/routes.rb

Summary

Maintainability
A
0 mins
Test Coverage

All public methods in controllers are available as actions in routes.rb
Open

  get ':controller(/:action(/:id))(.:format)'
Severity: Critical
Found in config/routes.rb by brakeman

The general default routes warning means there is a call to

#Rails 2.x
map.connect ":controller/:action/:id"

or

Rails 3.x
match ':controller(/:action(/:id(.:format)))'

in config/routes.rb. This allows any public method on any controller to be called as an action.

If this warning is reported for a particular controller, it means there is a route to that controller containing :action.

Default routes can be dangerous if methods are made public which are not intended to be used as URLs or actions.

There are no issues that match your filters.

Category
Status