feat: add sanitized patterns (#87)

Bearer · Jun 5, 2023 · c4ddcc5 · c4ddcc5
1 parent ad579fd
commit c4ddcc5
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/ruby/rails/open_redirect.yml b/ruby/rails/open_redirect.yml
@@ -12,6 +12,8 @@ languages:
 auxiliary:
   - id: ruby_rails_open_redirect_sanitized
     patterns:
+      - $<_>.to_i
+      - $<_>.to_f
       - pattern: $<...>$<METHOD>($<...>$<!>$<_>$<...>)
         filters:
           - variable: METHOD

diff --git a/ruby/rails/open_redirect/testdata/ok.rb b/ruby/rails/open_redirect/testdata/ok.rb
@@ -6,4 +6,10 @@ def notify
   def orders
     redirect_to Rails.application.routes.url_helpers.orders_path(shop_id: params[:shop_id])
   end
+
+  def show
+    id = params[:user_id].to_i
+
+    redirect_to organization.users.where(id: id)
+  end
 end