Brakeman v2.3.0 Release Notes

Release Date: 2013-12-12 // over 10 years ago
    • Add check for Parameters#permit!
    • Add check for CVE-2013-4491 (i18n XSS)
    • Add check for CVE-2013-6414 (header DoS)
    • Add check for CVE-2013-6415 (number_to_currency)
    • Add check for CVE-2013-6416 (simple_format XSS)
    • Add check for CVE-2013-6417 (query generation)
    • Fix typos in reflection and translate bug messages
    • Collapse send/try calls
    • Fix Slim XSS false positives (Noah Davis)
    • Whitelist Model#create for redirects
    • Fix scoping issues with instance variables and blocks