reviewable_history.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/reviewable_history.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/reviewable_history.rb or mark it as false positive.

given_daily_like.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/given_daily_like.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/given_daily_like.rb or mark it as false positive.

color_scheme_color.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/color_scheme_color.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/color_scheme_color.rb or mark it as false positive.

topic_allowed_group.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/topic_allowed_group.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/topic_allowed_group.rb or mark it as false positive.

group_category_notification_default.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/group_category_notification_default.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/group_category_notification_default.rb or mark it as false positive.

post_action_type.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/post_action_type.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/post_action_type.rb or mark it as false positive.

tag.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/tag.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/tag.rb or mark it as false positive.

reviewable.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/reviewable.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/reviewable.rb or mark it as false positive.

backup_draft_post.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/backup_draft_post.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/backup_draft_post.rb or mark it as false positive.

web_hook_event.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/web_hook_event.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/web_hook_event.rb or mark it as false positive.

draft.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/draft.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/draft.rb or mark it as false positive.

screened_url.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/screened_url.rb:8


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/screened_url.rb or mark it as false positive.

category_group.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/category_group.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/category_group.rb or mark it as false positive.

theme_translation_override.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/theme_translation_override.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/theme_translation_override.rb or mark it as false positive.

group_tag_notification_default.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/group_tag_notification_default.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/group_tag_notification_default.rb or mark it as false positive.

linked_topic.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/linked_topic.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/linked_topic.rb or mark it as false positive.

user_warning.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/user_warning.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/user_warning.rb or mark it as false positive.

topic_user.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/topic_user.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/topic_user.rb or mark it as false positive.

category_user.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/category_user.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/category_user.rb or mark it as false positive.

invited_user.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/invited_user.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/invited_user.rb or mark it as false positive.

topic_thumbnail.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/topic_thumbnail.rb:9


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/topic_thumbnail.rb or mark it as false positive.

topic_timer.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/topic_timer.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/topic_timer.rb or mark it as false positive.

api_key.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/api_key.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/api_key.rb or mark it as false positive.

user_export.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/user_export.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/user_export.rb or mark it as false positive.

webhooks_controller.rb
code Critical
Cross-Site Request Forgery
Discovered 4 months ago
Source: static code analysis
Category: Cross-Site Request Forgery
Confidence level: High

Problem

'protect_from_forgery' should be called in WebhooksController

Location

app/controllers/webhooks_controller.rb:5


Category description: Failure to verify that the sender of a web request actually intended to do so.

Solution: fix the issue in app/controllers/webhooks_controller.rb or mark it as false positive.

email_change_request.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/email_change_request.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/email_change_request.rb or mark it as false positive.

optimized_image.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/optimized_image.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/optimized_image.rb or mark it as false positive.

embeddable_host.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/embeddable_host.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/embeddable_host.rb or mark it as false positive.

do_not_disturb_timing.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/do_not_disturb_timing.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/do_not_disturb_timing.rb or mark it as false positive.

topic_embed.rb
code Critical
Attribute Restriction
Discovered 4 months ago
Source: static code analysis
Category: Attribute Restriction
Confidence level: High

Problem

Mass assignment is not restricted using attr_accessible

Location

app/models/topic_embed.rb:3


Category description: This warning comes up if a model does not limit what attributes can be set through mass assignment.

Solution: fix the issue in app/models/topic_embed.rb or mark it as false positive.