placate brakeman...

Author: 24c02

app/controllers/docs_controller.rb

@@ -39,8 +39,9 @@ def set_doc_path
       raise ActionController::RoutingError, "Invalid documentation path"
     end
 
-    erb_path = Rails.root.join("app", "views", "docs", "#{slug}.md.erb")
-    md_path = Rails.root.join("app", "views", "docs", "#{slug}.md")
+    docs_dir = Rails.root.join("app", "views", "docs")
+    erb_path = docs_dir.join("#{slug}.md.erb")
+    md_path = docs_dir.join("#{slug}.md")
 
     @doc_file_path = File.exist?(erb_path) ? erb_path : md_path
   end

app/views/addresses/_form.html.erb

@@ -8,7 +8,7 @@
   # Strip country code prefix for display (it's shown separately)
   raw_phone = address.phone_number.presence || current_identity&.phone_number
   display_phone = if raw_phone.present? && raw_phone.start_with?("+")
-    raw_phone.sub(/^\+#{initial_calling_code}/, "")
+    raw_phone.sub(/^\+#{Regexp.escape(initial_calling_code)}/, "")
   else
     raw_phone
   end