Alex Robbin

False Positive: Dynamic render path is not taking into account allow-listed values

3

Hi Brakeman folks! Love the library, but ran into a situation where Brakeman is reporting a warning that I think might be a false positive. ### Background Brakeman version: 5.0.0...

Initially reported in https://github.com/activeadmin/activeadmin/pull/6884#issuecomment-1042099107 and moved to it's own ticket! ### Did you find a bug? When attempting to ugprade to AA 2.10, I ran into an issue to do...

### Configuration - Provider Gem: `omniauth-auth0` - Ruby Version: `2.7.3` - Framework: `Rails 6.1.3.1` - Platform: `macOS` ### Expected Behavior `before_callback_phase` hook is invoked when mocking out a failed auth....

Failed to open TCP connection after upgrading to v0.54.2

15

After upgrading to ddtrace v0.54.2, we started receiving these errors during app shutdown: ``` E, [2022-01-21T18:52:02.250127 #4] ERROR -- ddtrace: [ddtrace] (/app/vendor/bundle/ruby/3.0.0/gems/ddtrace-0.54.2/lib/ddtrace/transport/http/client.rb:37:in `rescue in send_request') Internal error during HTTP transport...

Caching assets at boot time doesn't map asset names to fingerprinted filenames

3

I could definitely be doing something wrong here, but I've been unable to get the `CachedAssetFile` to work out of the box when using Webpacker. Given this scenario: * A...

### Issue I am running an application on the [`.localhost` TLD](https://en.wikipedia.org/wiki/.localhost), in particular a multi-level subdomain (i.e. `foo.bar.localhost:3000`), which works out of the box without any `/etc/hosts` customization in Google...

Make Action Cable and Listen optional dependencies

3

First off, really appreciate the work already done on Lookbook! Auto-refresh as a feature is convenient, but the dependencies required to support it are not insignificant (Action Cable and Listen)....

Include a representation of the Stripe "concept" and action in instrumentation event payloads

4

### Is your feature request related to a problem? Please describe. This issue has gone the other direction of most, coming out of #1168, where there was discussion about the...

`http.route` tag causes exception when interacting with engine route path helpers

6

**Current behaviour** Starting in v1.21 (I believe due to #3345), we've started seeing errors from ddtrace when using a route helper from an engine (in our case, [Motor Admin](https://github.com/motor-admin/motor-admin-rails)) in...

**Current behaviour** When leveraging Active Record's async queries functionality ([`load_async`](https://api.rubyonrails.org/classes/ActiveRecord/Relation.html#method-i-load_async), [`async_count`](https://api.rubyonrails.org/classes/ActiveRecord/Calculations.html#method-i-async_count), etc.), the queries that are executed, while noticed by ddtrace and wrapped in spans, are considered separate traces, and...