[
  {
    "id": "MASS001",
    "pattern": "params\\[:\\w+\\]\\.permit!",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS002",
    "pattern": "\\.update_attributes\\s*\\(\\s*params",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS003",
    "pattern": "\\.update\\s*\\(\\s*params\\[:\\w+\\]\\s*\\)",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS004",
    "pattern": "\\.create\\s*\\(\\s*params\\b(?!\\s*[.\\[])|User\\.create_from_params",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment: create/new/update with unfiltered params hash",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS005",
    "pattern": "\\.new\\s*\\(\\s*registration_params\\b",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment: create/new/update with unfiltered params hash",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS006",
    "pattern": "params\\.require\\s*\\([^)]+\\)\\.permit!",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment: create/new/update with unfiltered params hash",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS007",
    "pattern": "update_attributes!\\s*\\(\\s*\\w*(?:request_params|attrs|hash)",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment: create/new/update with unfiltered params hash",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS008",
    "pattern": "\\.create!\\s*\\(\\s*attrs\\s*\\)",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment: create/new/update with unfiltered params hash",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS009",
    "pattern": "\\bcreate\\s*\\(\\s*params\\s*\\)",
    "flags": "",
    "category": "mass_assignment",
    "description": "Ruby mass assignment: bare create(params)/new(registration_params) call (no receiver dot)",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  },
  {
    "id": "MASS010",
    "pattern": "\\bnew\\s*\\(\\s*registration_params\\b",
    "flags": "i",
    "category": "mass_assignment",
    "description": "Ruby mass assignment: bare create(params)/new(registration_params) call (no receiver dot)",
    "language": [
      "ruby"
    ],
    "severity": "medium"
  }
]