File rubygem-brakeman.changes of Package rubygem-brakeman
-------------------------------------------------------------------
Fri Jun 22 04:57:08 UTC 2012 - coolo@suse.com
- update to 1.6.2
Add checks for CVE-2012-2660, CVE-2012-2661, CVE-2012-2694, CVE-2012-2695 (Dave Worth)
Avoid warning when redirecting to a model instance
Raise confidence level for model attributes in redirects
Add request.parameters as a parameters hash
Return non-zero exit code when missing dependencies
Fix before_filter :except logic
Only accept symbol literals as before_filter names
Cache before_filter lookups
Turn off quiet mode by default for --compare
-------------------------------------------------------------------
Wed Apr 25 12:29:36 UTC 2012 - coolo@suse.com
- update to 1.6.0
Remove the Ruport dependency (Neil Matatall)
Add more informational JSON output (Neil Matatall)
Add comparison to previous JSON report (Neil Matatall)
Add highlighting of dangerous values in HTML/text reports
Model#update_attribute should not raise mass assignment warning (Dave Worth)
Don’t check find_by_* method for SQL injection
Fix duplicate reporting of mass assignment and SQL injection
Fix rescanning of deleted files
Properly check for rails_xss in Gemfile
-------------------------------------------------------------------
Wed Apr 11 12:01:46 UTC 2012 - coolo@suse.com
- update to 1.5.3
Multiple output files can be specified
-------------------------------------------------------------------
Mon Apr 9 18:44:45 UTC 2012 - coolo@suse.com
- initial package