`unsafe_load` ruleset for ruby
Open
enhancement
- Dominant language
- JavaScript
- Stars
- 22
- Forks
- 8
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 40
Description
Similarly to https://semgrep.dev/r?q=python.lang.security.deserialization.avoid-pyyaml-load.avoid-pyyaml-load YAML.load might be used to load ruby object. This is now allowlisted, but the old `unsafe_load` might still be called explicitly.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.