File: safe_params.rb

package info (click to toggle)
gitlab 17.6.5-19
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 629,368 kB
  • sloc: ruby: 1,915,304; javascript: 557,307; sql: 60,639; xml: 6,509; sh: 4,567; makefile: 1,239; python: 406
file content (34 lines) | stat: -rw-r--r-- 711 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
# frozen_string_literal: true

module RuboCop
  module Cop
    class SafeParams < RuboCop::Cop::Base
      MSG = 'Use `safe_params` instead of `params` in url_for.'

      METHOD_NAME_PATTERN = :url_for
      UNSAFE_PARAM = :params

      def on_send(node)
        return unless method_name(node) == METHOD_NAME_PATTERN

        add_offense(node) unless safe_params?(node)
      end

      private

      def safe_params?(node)
        node.descendants.each do |param_node|
          next unless param_node.descendants.empty?

          return false if method_name(param_node) == UNSAFE_PARAM
        end

        true
      end

      def method_name(node)
        node.children[1]
      end
    end
  end
end