| Rules | Description | Example | KPI | |
|---|---|---|---|---|
| Attribute Restriction | Action Controller parameters are forbidden to be used in Active Model mass assignments until they have been permitted. | Security | medium | |
| HTTP Verb Confusion | Brakeman will warn when an 'if' expression checks request.get? but has an else clause instead of elseif ..... | Security | medium |