presidentbeef/brakeman — Issue #35: Brakeman alerts that an SQL injection is present in scopes
Author: daveworth
Created: 2012-01-29 17:06:04+00:00
State: open

Given a scope that properly(?) uses a prepared statement Brakeman alerts of an existing SQL injection. See https://gist.github.com/1699632 for details. Perhaps I am misunderstanding the vulnerability and an injection *does* exist but it is my understanding that this is the "right way (TM)" to do this search (if not using MetaWhere for example).