This is entirely a bug fix release, but it does update the ruby_parser 
dependency to 3.6.2 (later versions do not affect Brakeman). Various bug 
fixes will likely affect warnings, line numbers, and fingerprints.

Changes since 3.0.1:

* Fix HTML reports with GitHub repos
* Handle processing of explictly shadowed block arguments
* Fix CSV output when there are no warnings
* Update ruby_parser to ~> 3.6.2
* Treat primary_key, table_name_prefix, table_name_suffix as safe in SQL
* Fix using --compare and --add-checks-path together
* Alias process methods called in class scope on models
* Avoid warning about mass assignment with string literals
* Only report original regex DoS locations
* Report correct file for simple_format usage CVE warning
* Ignore case value in XSS checks

For full details, please see the release post: 
http://brakemanscanner.org/blog/2015/03/09/brakeman-3-dot-0-2-released/

Reply via email to