Don't warn about evaluating a safe value

presidentbeef · Dec 30, 2024 · 1ed8dd3 · 1ed8dd3
1 parent 0203178
commit 1ed8dd3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/brakeman/checks/check_evaluation.rb b/lib/brakeman/checks/check_evaluation.rb
@@ -28,6 +28,8 @@ def process_result result
     elsif string_evaluation? result[:call].first_arg
       confidence = :low
       message = "Dynamic string evaluated as code"
+    elsif safe_literal? result[:call].first_arg
+      # don't warn
     elsif result[:call].method == :eval
       confidence = :low
       message = "Dynamic code evaluation"