FINE-TUNING SEMGREP FOR RUBY SECURITY: PUNDIT AND SQL INJECTION

Summary from the TLDR InfoSec newsletter

A blog post that walks through the process of creating custom Semgrep rules to address two common issues in Ruby. The first is an in-depth look at a common footgun that's present in the sanitize_sql function and now to build a rule to detect it. The second is an in-depth look at common issues when utilizing Pundit and building rules for them.