presidentbeef/brakeman — Issue #30: SQL injection question
Author: a5sk4s
Created: 2012-01-13 22:03:29+00:00
State: open

I'm new to running brakeman and wondered why it discovered

def self.find_recent(options = {:limit => 5})
find(:all, :conditions => "created_at > '#{14.days.ago.to_s :db}'", :order => "created_at DESC", :limit => options[:limit])
end

but not

named_scope :since, lambda { |days|
{ :conditions => "published_at > '#{days.ago.to_s :db}'" }
}