This release involves a bit of shuffling and changes to internals, so 
expect minor changes in warnings and please report any bugs. Performance 
for code using `+=` inside of if expressions has improved dramatically. 
If you previously skipped any files for performance reasons, please try 
scanning them with this release.

The next release is planned to be mostly bugfixes.

Changes since 2.5.0:

* Improve default route detection in Rails 3/4 (Jeff Jarmoc)
* Handle controllers and models split across files (Patrick Toomey)
* Fix handling of `protected_attributes` gem in Rails 4 (Geoffrey 
Hichborn)
* Add check for CVE-2014-0130
* Add `find_by`/`find_by!` to SQLi check for Rails 4
* Do not branch values for `+=`
* Parse most files upfront instead of on demand
* Fix CheckRender with nested render calls
* Fix detection of `:host` setting in redirects
* Ignore more model methods in redirects
* Update to use RubyParser 3.5.0

See the release post for more details: 
http://brakemanscanner.org/blog/2014/06/06/brakeman-2-dot-6-0-released/

Reply via email to