Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Padawan #43

Merged
merged 93 commits into from
Jan 6, 2025
Merged

Padawan #43

merged 93 commits into from
Jan 6, 2025

Conversation

dcordz
Copy link
Contributor

@dcordz dcordz commented Jan 5, 2025

No description provided.

dcordz added 30 commits June 6, 2024 16:23
@dcordz dcordz self-assigned this Jan 5, 2025
Copy link

jit-ci bot commented Jan 5, 2025

Hi, I’m Jit, a friendly security platform designed to help developers build secure applications from day zero with an MVS (Minimal viable security) mindset.

In case there are security findings, they will be communicated to you as a comment inside the PR.

Hope you’ll enjoy using Jit.

Questions? Comments? Want to learn more? Get in touch with us.

Copy link

@jit-ci jit-ci bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Jit has detected 1 important finding in this PR that you should review.


Jit encountered an internal error and cannot comment on each finding.

You can ask a Jit admin to comment #jit_ignore_all on this PR to ignore the findings.

Here are the findings in this PR:

  • Security Control: Static Code Analysis Ruby
    • Type: Cross-Site Request Forgery (Csrf) Protection Disabled
    • Description: Detected controller which does not enable cross-site request forgery protections using 'protect_from_forgery'. Add 'protect_from_forgery :with => :exception' to your controller class.
    • Severity: HIGH
    • Learn More: Link
    • Filename: app/controllers/application_controller.rb
    • Lines: 4-238

@dcordz dcordz merged commit cbd7a59 into main Jan 6, 2025
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant