Files
codeql/ruby/ql/test/query-tests/security/cwe-312/app/models/user.rb

21 lines
615 B
Ruby

class User < ActiveRecord::Base
def set_password_1
new_password = "06c38c6a8a9c11a9d3b209a3193047b4"
# BAD: directly storing a potential cleartext password to a field
self.update(password: new_password)
end
def set_password_2
new_password = "52652fb5c709fb6b9b5a0194af7c6067"
# BAD: directly storing a potential cleartext password to a field
update(password: new_password)
end
def set_password_3
new_password = "f982bf2531c149a8a1444a951b12e830"
# BAD: directly assigning a potential cleartext password to a field
self.password = new_password
self.save
end
end