Fix brakeman information

Gemfile.lock

@@ -72,6 +72,17 @@ GEM
       sass (>= 3.2.19)
     bootstrap-wysihtml5-rails (0.3.3.8)
       railties (>= 3.0)
+    brakeman (3.1.1)
+      erubis (~> 2.6)
+      fastercsv (~> 1.5)
+      haml (>= 3.0, < 5.0)
+      highline (~> 1.6)
+      multi_json (~> 1.2)
+      ruby2ruby (>= 2.1.1, < 2.3.0)
+      ruby_parser (~> 3.7.0)
+      sass (~> 3.0)
+      slim (>= 1.3.6, < 4.0)
+      terminal-table (~> 1.4)
     builder (3.2.2)
     byebug (5.0.0)
       columnize (= 0.9.0)
@@ -132,6 +143,7 @@ GEM
       activesupport (>= 3.0.0)
     faraday (0.9.1)
       multipart-post (>= 1.2, < 3)
+    fastercsv (1.5.5)
     ffi (1.9.6)
     font-awesome-rails (4.4.0.0)
       railties (>= 3.2, < 5.0)
@@ -165,6 +177,7 @@ GEM
       html2haml (>= 1.0.1)
       railties (>= 4.0.1)
     hashie (3.4.1)
+    highline (1.7.8)
     html2haml (2.0.0)
       erubis (~> 2.7.0)
       haml (~> 4.0.0)
@@ -346,6 +359,9 @@ GEM
       rubocop (>= 0.20.1)
     rubocop-rspec (1.3.0)
     ruby-progressbar (1.7.5)
+    ruby2ruby (2.1.4)
+      ruby_parser (~> 3.1)
+      sexp_processor (~> 4.0)
     ruby_parser (3.7.0)
       sexp_processor (~> 4.1)
     rubyzip (1.1.7)
@@ -377,6 +393,9 @@ GEM
       multi_json (~> 1.0)
       simplecov-html (~> 0.8.0)
     simplecov-html (0.8.0)
+    slim (3.0.6)
+      temple (~> 0.7.3)
+      tilt (>= 1.3.3, < 2.1)
     slop (3.6.0)
     smart_listing (1.1.2)
       coffee-rails
@@ -399,8 +418,10 @@ GEM
       httpclient (>= 2.4)
       i18n
       json (>= 1.4.3)
+    temple (0.7.6)
     terminal-notifier (1.6.3)
     terminal-notifier-guard (1.6.4)
+    terminal-table (1.5.2)
     therubyracer (0.12.2)
       libv8 (~> 3.16.14.0)
       ref
@@ -463,6 +484,7 @@ DEPENDENCIES
   bootstrap-datepicker-rails
   bootstrap-sass (~> 3.3.5)
   bootstrap-wysihtml5-rails (~> 0.3.3.8)
+  brakeman
   byebug
   capybara
   carrierwave

app/controllers/france_connect/particulier_controller.rb

@@ -11,7 +11,7 @@ class FranceConnect::ParticulierController < ApplicationController
         state: session[:state],
         nonce: session[:nonce]
     )
-    redirect_to authorization_uri
+    redirect_to URI.parse(authorization_uri).to_s
   end
 
   def callback

app/views/admin/procedures/show.html.haml

@@ -54,7 +54,7 @@
       %h4.text-info
         = @facade.procedure.libelle
 
-      = @facade.procedure.description.html_safe
+      = h @facade.procedure.description.html_safe
     .champs.col-md-4.col-lg-4
       %h4.text-info
         Champs

app/views/dossiers/_infos_dossier.html.haml

@@ -7,7 +7,7 @@
         = @facade.dossier.procedure.libelle
 
       .description
-        = @facade.dossier.description.html_safe
+        = h @facade.dossier.description.html_safe
 
       - if @facade.dossier.mandataire_social && gestionnaire_signed_in?
         .mandataire_social.text-success.center

app/views/users/dossiers/new.html.haml

@@ -14,7 +14,7 @@
       %h2#titre_procedure.text-info
         = @dossier.procedure.libelle
       %p
-        = @dossier.procedure.description.html_safe
+        = h @dossier.procedure.description.html_safe
       %br
 
       = form_for @dossier, url: {controller: 'users/dossiers', action: :create}, method: :post do |f|