Add env protection

basecamp · Aug 29, 2024 · b079b3f · b079b3f
1 parent a879c2c
commit b079b3f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/config/protections.yml b/config/protections.yml
@@ -21,6 +21,7 @@ validations:
     - secret
     - credentials
     - irb
+    - ENV
 forbidden_methods:
   Kernel:
     - eval

diff --git a/test/tampering_cases/flagged/ruby/env.rb b/test/tampering_cases/flagged/ruby/env.rb
@@ -0,0 +1 @@
+ENV['DATABASE_URL']
-Original file line number
+Diff line change
@@ Expand Up / @@ -21,6 +21,7 @@ validations: @@
         - secret
         - credentials
         - irb
+        - ENV
     forbidden_methods:
       Kernel:
         - eval
@@ Expand Down @@