presidentbeef/brakeman — Issue #43: Dynamic Render Path semi-false positive
Author: oreoshake
Created: 2012-02-03 01:30:19+00:00
State: open

Ran into a case where we were getting a warning on Dynamic Render paths.

<%= render :partial => find_patial(@param) %>

def find_partial param
param == "a" ? "partial_a" : "partial_b"
end

While it is "dynamic" the values are from a finite set and are not defined by an external source.

Yay? Nay?