This release is just bug fixes, but I am especially excited about a 
change to how immediate model attributes are detected. While the 
detection is basically the same, the value returned is now the entire 
call instead of just the part with the model as a target. This means 
more accurate information in the warning, particularly for "user input", 
and also fewer false positives.

Changes since 2.1.0:

* More accurate results for model attribute warnings
* Do not warn on attr_accessible using roles
* New warning code for dangerous attributes in attr_accessible
* Fix infinite loop when run as rake task (Matthew Shanley)
* Use exit code zero with -z if all warnings ignored
* Respect ignored warnings in rescans
* Respect ignored warnings in tabs format reports
* Ignore dynamic controller names in routes

More information in the release post: 
http://brakemanscanner.org/blog/2013/08/21/brakeman-2-dot-1-1-released/

Reply via email to