presidentbeef/brakeman — Issue #21: Anchoring in Regular Expression Checks
Author: knaveofdiamonds
Created: 2011-12-09 10:20:15+00:00
State: open

Not entirely sure if this is a bug/incomplete feature or not. In the Regular Expression checks, you're looking for \A and \Z to check that the validation is anchored correctly. Is it not equally valid to use '^' and '$' (which is what I'm doing, resulting in what might be false positives if my understanding is right)?

Happy to provide a patch to fix this if '^' and '$' should be allowed as well.