michaeledgar/laser

Security coverage

egandrew opened this issue · 1 comments

egandrew commented

Hi,
I was looking for any Ruby static analysis tools that focussed on security. Laser came up as a static analysis tool, but it's not clear how much the tool focusses on security-testing. What's there level of security-scanning that it does?
Thanks,
Andrew

dgutov commented

If you're thinking of checking for unsanitized user input, SQL injection vulnerabilities, etc, then none.