Add details to disabled rubocop

98d0962e · Dominic Couture · Mark Chao · 5f70b3a4 · 98d0962e
Commit 98d0962e authored Dec 07, 2021 by Dominic Couture Committed by Mark Chao Dec 07, 2021
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

app/models/active_session.rb app/models/active_session.rb +2 -0

No files found.
--- a/app/models/active_session.rb
+++ b/app/models/active_session.rb
@@ -177,6 +177,8 @@ class ActiveSession
  # Returns an ActiveSession object
  def self.load_raw_session(raw_session)
    # rubocop:disable Security/MarshalLoad
+    # Explanation of why this Marshal.load call is OK:
+    # https://gitlab.com/gitlab-com/gl-security/appsec/appsec-reviews/-/issues/124#note_744576714
    Marshal.load(raw_session)
    # rubocop:enable Security/MarshalLoad
  end