From fb192889816e985eac87e8e9d5a7a056f1029c3c Mon Sep 17 00:00:00 2001 From: Joe Farebrother Date: Mon, 25 Mar 2024 14:44:24 +0000 Subject: [PATCH] Address review comments - Fix docs typo and add a reference --- ruby/ql/src/queries/security/cwe-915/MassAssignment.qhelp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ruby/ql/src/queries/security/cwe-915/MassAssignment.qhelp b/ruby/ql/src/queries/security/cwe-915/MassAssignment.qhelp index 7a96cd49b049..289f3a6a6ec1 100644 --- a/ruby/ql/src/queries/security/cwe-915/MassAssignment.qhelp +++ b/ruby/ql/src/queries/security/cwe-915/MassAssignment.qhelp @@ -5,7 +5,7 @@

Operations that allow for mass assignment (setting multiple attributes of an object using a hash), such as ActiveRecord::Base.new, should take care not to - allow arbitrary parameters to be set by the user. Otherwise, unintended attributes may be set, such as an isAdmin feild for a User object. + allow arbitrary parameters to be set by the user. Otherwise, unintended attributes may be set, such as an is_admin field for a User object.

@@ -29,6 +29,6 @@ - +
  • Rails guides: Strong Parameters.