Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Mar 8, 2012

• Merge branch 'master' of github.com:presidentbeef/brakeman

  

  Justin Collins

  committed
  d133235

  Copy full SHA for d133235

• Add more tests for link_to

  

  Justin Collins

  committed
  cf9c7fd

  Copy full SHA for cf9c7fd

Commits on Mar 7, 2012

• Fixes to CheckLinkTo for Rails 2.0 and 2.3

  Show description for 7edfbf2
  

  Justin Collins

  committed
  7edfbf2

  Copy full SHA for 7edfbf2

Commits on Mar 6, 2012

• Bump to 1.5.1

  Show description for 31bb46b
  presidentbeef

  committed
  31bb46b

  Copy full SHA for 31bb46b

• Update CHANGES

  presidentbeef

  committed
  0f40fcf

  Copy full SHA for 0f40fcf

• Remove duplicate method on Rails2XSSErubis

  presidentbeef

  committed
  bdc3ad7

  Copy full SHA for bdc3ad7

• Add test for Rails 3 partial rendoring

  presidentbeef

  committed
  ccecea3

  Copy full SHA for ccecea3

• Support Rails 3 partial render (no :partial => ...)

  Show description for e96abab
  presidentbeef

  committed
  e96abab

  Copy full SHA for e96abab

• tracker.config[:rails3] => tracker.options[:rails3]

  presidentbeef

  committed
  759856c

  Copy full SHA for 759856c

• Fix concatentation of module name

  presidentbeef

  committed
  4908056

  Copy full SHA for 4908056

Commits on Mar 5, 2012

• Add additional check for global mass assign disable

  Show description for 87a8b19
  presidentbeef

  committed
  87a8b19

  Copy full SHA for 87a8b19

• Report module in Brakeman::FindCall results

  Show description for adcd3d1
  presidentbeef

  committed
  adcd3d1

  Copy full SHA for adcd3d1

• Track class and module in BaseProcessor

  presidentbeef

  committed
  b701fea

  Copy full SHA for b701fea

• Cache check result for disabled mass assignment

  presidentbeef

  committed
  e5f68c5

  Copy full SHA for e5f68c5

• Debug output of which template is being rendered

  presidentbeef

  committed
  94f0655

  Copy full SHA for 94f0655

• Print out stack trace when interrupted (only Ruby 1.9)

  presidentbeef

  committed
  ac0df98

  Copy full SHA for ac0df98

• More debug output for current item being processed

  presidentbeef

  committed
  09904b6

  Copy full SHA for 09904b6

Commits on Mar 2, 2012

• README updates

  

  Justin Collins

  committed
  f5acf92

  Copy full SHA for f5acf92

• Bump to 1.5.0

  Show description for f9977fa
  presidentbeef

  committed
  f9977fa

  Copy full SHA for f9977fa

• Add check for skipping CSRF with :except

  Show description for ff2e149
  

  Justin Collins

  committed
  ff2e149

  Copy full SHA for ff2e149

• Add test for skipping CSRF with :except

  

  Justin Collins

  committed
  4c3a35a

  Copy full SHA for 4c3a35a

• Add version check for SafeBuffer vulnerability

  Show description for 94872c3
  

  Justin Collins

  committed
  94872c3

  Copy full SHA for 94872c3

• Tests for SafeBuffer vulnerability

  

  Justin Collins

  committed
  0aca60f

  Copy full SHA for 0aca60f

• Oops, update expected warnings for Rails 2 tests

  

  Justin Collins

  committed
  f6dfcce

  Copy full SHA for f6dfcce

• Remove select() as an XSS safe method in Rails 2

  

  Justin Collins

  committed
  99a9930

  Copy full SHA for 99a9930

• Add check for select vulnerability in Rails 3

  Show description for 71222ec
  

  Justin Collins

  committed
  71222ec

  Copy full SHA for 71222ec

• Add test for select vulnerability in Rails 3

  

  Justin Collins

  committed
  2f6fb06

  Copy full SHA for 2f6fb06

Commits on Feb 28, 2012

• Switch to 1.9.2 on Travis CI

  Show description for 05a6ff6
  

  Justin Collins

  committed
  05a6ff6

  Copy full SHA for 05a6ff6

• Ignore resource routes if default routes already

  Show description for 6443246
  

  Justin Collins

  committed
  6443246

  Copy full SHA for 6443246

• Fix check for nested targets in Rails 2 routes

  

  Justin Collins

  committed
  a059fed

  Copy full SHA for a059fed

• Update copyright

  

  Justin Collins

  committed
  0011191

  Copy full SHA for 0011191

• Standardize SQL methods to check

  Show description for db05dab
  

  Justin Collins

  committed
  db05dab

  Copy full SHA for db05dab

• Ignore Model#id for XSS check

  

  Justin Collins

  committed
  317b7b9

  Copy full SHA for 317b7b9

• Use Set[] instead of Set.new([])

  

  Justin Collins

  committed
  ea04b1a

  Copy full SHA for ea04b1a

Commits on Feb 27, 2012

• Add json as a report format

  

  Justin Collins

  committed
  7f51cc6

  Copy full SHA for 7f51cc6

Pagination

Previous

Next