Skip to content

Fix detection of insecure interpolations in unless parameter#47

Merged
david22swan merged 4 commits into
puppetlabs:mainfrom
smortex:main
Apr 26, 2024
Merged

Fix detection of insecure interpolations in unless parameter#47
david22swan merged 4 commits into
puppetlabs:mainfrom
smortex:main

Conversation

@smortex

@smortex smortex commented Dec 12, 2023

Copy link
Copy Markdown
Contributor

When using the unless parameter of an exec resource with unsafe string interpolation, the linter should warn about the issue.

It happen that it currently doesn't because unless is also a keyword.

Adjust the linter to cope with this.

Also include:

The rspec-collection_matchers documentation advise to require
rspec-collection_matchers form `spec_helper.rb`.

This fix:

```
Failure/Error: expect(problems).to have(1).problems

NoMethodError:
  undefined method `have' for #<RSpec::ExampleGroups::CheckUnsafeInterpolations::WithFixDisabled::ExecWithUnsafeInterpolationInCommand "detects an unsafe exec command argument" (./spec/puppet-lint/plugins/check_unsafe_interpolations_spec.rb:20)>
```
@smortex smortex requested a review from a team as a code owner December 12, 2023 00:42
smortex added 3 commits April 8, 2024 12:35
We produce 2 errors in this example.  We don't want to check that the
first one is present twice: we want to check that each warning is
present once.
These commands are supposed to be supported, but they are not tested, so
add tests to demonstrate that they work as intended.
When using the `unless` parameter of an `exec` resource with unsafe
string interpolation, the linter should warn about the issue.

It happen that it currently doesn't because unless is also a keyword.

Adjust the linter to cope with this.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants