diff options
author | Brian Neel <brian@gitlab.com> | 2017-08-04 05:20:34 +0300 |
---|---|---|
committer | Brian Neel <brian@gitlab.com> | 2017-08-08 17:50:54 +0300 |
commit | 9770c57fab0315865a33c8b6df269eded0d57b5c (patch) | |
tree | 5a7c7a9fccbce5ef3ccf6b02b1297aace41101fd /lib/api | |
parent | b612a47da0e0225332a59ab961206f84602ad629 (diff) |
Re-enable SqlInjection and CommandInjection
Diffstat (limited to 'lib/api')
-rw-r--r-- | lib/api/helpers/members_helpers.rb | 4 | ||||
-rw-r--r-- | lib/api/notes.rb | 2 |
2 files changed, 4 insertions, 2 deletions
diff --git a/lib/api/helpers/members_helpers.rb b/lib/api/helpers/members_helpers.rb index d9cae1501f8..a50ea0b52aa 100644 --- a/lib/api/helpers/members_helpers.rb +++ b/lib/api/helpers/members_helpers.rb @@ -1,8 +1,10 @@ +# rubocop:disable GitlabSecurity/PublicSend + module API module Helpers module MembersHelpers def find_source(source_type, id) - public_send("find_#{source_type}!", id) + public_send("find_#{source_type}!", id) # rubocop:disable GitlabSecurity/PublicSend end def authorize_admin_source!(source_type, source) diff --git a/lib/api/notes.rb b/lib/api/notes.rb index 65ff89edf65..4e4e473994b 100644 --- a/lib/api/notes.rb +++ b/lib/api/notes.rb @@ -139,7 +139,7 @@ module API helpers do def find_project_noteable(noteables_str, noteable_id) - public_send("find_project_#{noteables_str.singularize}", noteable_id) + public_send("find_project_#{noteables_str.singularize}", noteable_id) # rubocop:disable GitlabSecurity/PublicSend end def noteable_read_ability_name(noteable) |