Unhandled Insecure Source URI

[kaysiz]

Summary:

• On local setup, we are handling the Insecure Source URI successfully but on production, the app breaks.

Current Behaviour

• The application is breaking in production.

2022-06-07T21:41:57.765564+00:00 app[web.1]: /app/app/models/gemfile.rb:63: warning: calling URI.open via Kernel#open is deprecated, call URI.open directly or use URI#open
2022-06-07T21:41:57.811241+00:00 app[web.1]: I, [2022-06-07T21:41:57.811173 #4]  INFO -- : [93f0b41a-9898-4fc2-9a64-2685d353b034] Completed 500 Internal Server Error in 56ms (ActiveRecord: 2.0ms | Allocations: 10934)
2022-06-07T21:41:57.811793+00:00 app[web.1]: F, [2022-06-07T21:41:57.811740 #4] FATAL -- : [93f0b41a-9898-4fc2-9a64-2685d353b034]   
2022-06-07T21:41:57.811794+00:00 app[web.1]: [93f0b41a-9898-4fc2-9a64-2685d353b034] ArgumentError (bad argument (expected URI object or URI string)):
2022-06-07T21:41:57.811795+00:00 app[web.1]: [93f0b41a-9898-4fc2-9a64-2685d353b034]   
2022-06-07T21:41:57.811795+00:00 app[web.1]: [93f0b41a-9898-4fc2-9a64-2685d353b034] app/models/gemfile.rb:26:in `check_with_bundler_audit'
2022-06-07T21:41:57.811795+00:00 app[web.1]: [93f0b41a-9898-4fc2-9a64-2685d353b034] app/controllers/gemfiles_controller.rb:43:in `render_vulnerabilities'
2022-06-07T21:41:57.811796+00:00 app[web.1]: [93f0b41a-9898-4fc2-9a64-2685d353b034] app/controllers/gemfiles_controller.rb:20:in `show'
2022-06-07T21:59:01.198054+00:00 app[web.1]: I, [2022-06-07T21:59:01.197984 #4]  INFO -- : [c1db31eb-3d03-43f2-b2f1-190187982ccb] Started GET "/gemfiles/8A193F56"

Expected behaviour

• Render the show page and display Insecure Source URI as Warnings

Steps to replicate

1. Change an https URL to http in Gemfile.lock and upload to https://audit.fastruby.io/ - app breaks
2. Upload same file on local setup - works fine