Files
codeql/ruby/ql/test/query-tests/security/cwe-295/Typhoeus.rb
2026-06-15 23:03:46 +01:00

12 lines
279 B
Ruby

require "typhoeus"
# BAD
Typhoeus.get("https://www.example.com", ssl_verifypeer: false) # $ Alert
# BAD
post_options = { body: "some data", ssl_verifypeer: false }
Typhoeus.post("https://www.example.com", post_options) # $ Alert
# GOOD
Typhoeus.get("https://www.example.com")