Sobelow v0.11.0 Sobelow.RCE.EEx View Source
Insecure EEx evaluation
If user input is passed to EEx eval functions, it may result in arbitrary code execution. The root cause of these issues is often directory traversal.
EEx checks can be ignored with the following command:
$ mix sobelow -i RCE.EExLink to this section Summary
Link to this section Functions
Link to this function
details() View Source
Link to this function
parse_def(fun, eex_fun) View Source
Link to this function
rule() View Source
Link to this function