Use of Ruby Forwardable module and runtime meta-programming may introduce vulnerabilities

I was digging through the `gitlab-foss` repository and noticed an interested pattern that seems to be adopted in a few places: the use of `Forwardable` with meta-programming over delegators, explicit `attr_reader` methods or `method_missing`. Heads up: the arbitrary file read vulnerability I …

class HelloWorld
  def initialize(attributes)
    @options = OpenStruct.new(attributes)
  end

  def say_it
    "Hello world"
  end

  def method_missing(method, *args)
    @options.send(method, *args)
  end
end