diff --git a/lib/brakeman/checks/base_check.rb b/lib/brakeman/checks/base_check.rb index 6a5b1b6e86b24d85a57fe5615404d86f20cb6276..732a3e1249e05d2ac648c0518c8c4f60003bf95e 100644 --- a/lib/brakeman/checks/base_check.rb +++ b/lib/brakeman/checks/base_check.rb @@ -282,7 +282,7 @@ class Brakeman::BaseCheck < Brakeman::SexpProcessor when :string_eval if sexp? exp.value if exp.value.node_type == :rlist - exp.value.each_exp do |e| + exp.value.each_sexp do |e| match = has_immediate_user_input?(e) return match if match end