|
3ed37115
|
merge
Merge pull request #14 from github/merge_upstream_master
|
Patrick Toomey <p****3@b****m>
|
over 11 years ago
|
|
|
a2f5ddc6
|
merge master and fix conflicts
|
Patrick Toomey <p****3@b****m>
|
over 11 years ago
|
|
|
d6a69049
|
merge
Merge pull request #13 from github/merge_upstream_3_0_0
|
Patrick Toomey <p****3@u****m>
|
over 11 years ago
|
|
|
ef15c030
|
remove unused/unintended file
|
Patrick Toomey <p****3@b****m>
|
over 11 years ago
|
|
|
36cae98f
|
merge v3.0.0 and fix merge conflicts
|
Patrick Toomey <p****3@b****m>
|
over 11 years ago
|
|
|
2951df2e
|
merge
merge upstream master and fix merge conflicts
|
Patrick Toomey <p****3@b****m>
|
almost 12 years ago
|
|
|
9587fdb8
|
merge
Merge pull request #569 from presidentbeef/more_line_numbers_for_gems
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
dcc60602
|
merge
Merge pull request #568 from presidentbeef/make_separate_models_default
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
6f7f56da
|
Adjust tests for CVE line numbers and file
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
3c8e923c
|
Add line number and right file for all CVEs
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
e128a692
|
merge
Merge commit 'pull/origin/557'
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
302307e3
|
Make --separate-models the default
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
57d4611d
|
Bump to 2.6.3
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
eda4c3ea
|
Update CHANGES
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
8a448fa5
|
merge
Merge pull request #567 from presidentbeef/add_find_by_id_bang_unscoped_finds
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
0023c4e3
|
Add find_by_id! to unscoped find check
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
cc4d1bc1
|
merge
Merge pull request #566 from presidentbeef/whitelist_exists_for_arel
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
bcfc68d0
|
Whitelist `exists` arel method from sqli
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
81ab4980
|
Update CHANGES
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
c4128373
|
merge
Merge pull request #564 from presidentbeef/moar_safe_params_to_symbols
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
92b97e98
|
merge
Merge pull request #560 from presidentbeef/dont_process_in_class_name_util
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
6f823d13
|
merge
Merge pull request #563 from presidentbeef/add_optional_checks_list
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
7941d519
|
Avoid warning about Symbol DoS on safe params
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
50d14785
|
Update travis config
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
ed8762bc
|
Add option to list optional checks
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
c9a4784a
|
merge
Merge pull request #469 from github/unscoped_find
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
281d07ce
|
Add test for stack overflow in Util#class_name
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
f2941e45
|
find returns the original object
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
05a6c937
|
actual grab the matched input
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
97742f9a
|
only use include_user_input? and include match in report
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
4b1a49a1
|
For warnings on Libraries (Gemfile, Gemfile.lock) add :file and :line descrip...
|
Rob Fletcher <r****r@o****m>
|
almost 12 years ago
|
|
|
e3205b9e
|
test that this requires user input
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
841c6da1
|
make sure arg is user controlled
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
c5d2303b
|
make all tests run in various scenarios
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
59893233
|
make optional
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
7d1fa943
|
update fingerprint
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
df911f3a
|
merge
Merge branch 'master' into unscoped_find
|
Mastahyeti <m****i@u****m>
|
almost 12 years ago
|
|
|
048b1c17
|
merge
Merge pull request #555 from presidentbeef/optional_checks
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
c9d5b55b
|
Add tests for optional checks
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
1e1520f3
|
Add framework for optional checks
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
41624807
|
merge
Merge pull request #550 from cschramm/master
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
e011767b
|
Don't process sexps in ProcessHelper.class_name
|
Justin Collins <j****n@p****m>
|
almost 12 years ago
|
|
|
d8f65dcb
|
merge
Merge pull request #543 from codeclimate/stack-level-too-deep
|
Justin <p****f@u****m>
|
almost 12 years ago
|
|
|
d75d53d6
|
Make TemplateAliasProcessor work with top-level partials
|
Christopher Schramm <c****m@s****g>
|
almost 12 years ago
|
|
|
eea08cc9
|
Eliminate cyclic dependency resolution
|
JR Richardson <j****r@c****m>
|
about 12 years ago
|
|
|
297a735b
|
Create a test around preventing SystemStackError
|
Jeff Rafter <j****r@g****m>
|
about 12 years ago
|
|
|
52a02371
|
merge
Merge pull request #542 from bfish510/patch-3
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
d76bc405
|
Added warning types and ordered alphabetically.
|
William Fischer <b****0@g****m>
|
about 12 years ago
|
|
|
2af5230f
|
Fix CVE-2014-3514 test names
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
5ffdd790
|
Bump to 2.6.2
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
4927b7e5
|
merge
Merge pull request #540 from presidentbeef/add_check_for_CVE-2014-3415
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
6988cc17
|
Add check for CVE-2014-3415
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
61775277
|
merge
Merge pull request #539 from presidentbeef/ensure_app_path_is_absolute_in_app...
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
fbee2431
|
merge
Merge pull request #538 from presidentbeef/avoid_warning_about_symbol_creatio...
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
bc5a7485
|
Make sure file paths are absolute in AppTree
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
94088928
|
Avoid warning about symbolizing safe parameters
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
4fb72d1b
|
merge
Merge pull request #537 from presidentbeef/update_ruby2ruby
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
a2829681
|
Remove hacky Ruby2Ruby Regexp fix
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
5ee87b67
|
Fix formatting code with rescue blocks
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
d82b1b37
|
Update ruby2ruby
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
df7d1a2c
|
merge
Merge pull request #535 from presidentbeef/add_gems_to_config_by_default
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
992ab544
|
Set tracker.config[:gems] by default
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
16715a01
|
Update CHANGES
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
ffc00b27
|
merge
Merge pull request #534 from codeclimate/extract-app-path
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
9784d48e
|
Always use tracker app_path and cache the result
|
Jeff Rafter <j****r@g****m>
|
about 12 years ago
|
|
|
5918f260
|
Localize path expansions to helper method
|
Jeff Rafter <j****r@g****m>
|
about 12 years ago
|
|
|
30dcde63
|
merge
Merge pull request #533 from codeclimate/gemfile-https
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
3b133574
|
Use https in the Gemfile
|
Jeff Rafter <j****r@g****m>
|
about 12 years ago
|
|
|
0ff973e9
|
merge
Merge pull request #532 from clintgibler/feature/out-of-tree-checks_new
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
b3a6fd34
|
Implement external checks test
|
Clint Gibler <c****r@n****m>
|
about 12 years ago
|
|
|
6ffb3b70
|
Add test for external checks loading
|
Clint Gibler <c****r@n****m>
|
about 12 years ago
|
|
|
2808c45c
|
merge
Merge branch 'master' into feature/out-of-tree-checks_new
|
Clint Gibler <c****r@n****m>
|
about 12 years ago
|
|
|
670de386
|
Allow checks outside the brakeman source tree
|
Clint Gibler <c****r@n****m>
|
about 12 years ago
|
|
|
abd86537
|
merge
Merge pull request #531 from presidentbeef/more_sanity_tests_for_csv
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
a2baa5c9
|
Check that CSV reports actually parse as CSV
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
b490eca4
|
merge
Merge pull request #528 from presidentbeef/fix_sqli_detection_in_nested_strin...
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
48880a5e
|
Fix SQLi detection in deeply nested string building
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
ac2e6f06
|
merge
Merge pull request #527 from presidentbeef/add_rails4_option
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
6e26a0f0
|
Properly set "4.x" version if it can't be determined
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
cf5b837c
|
merge
Merge pull request #524 from presidentbeef/check_nested_sends
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
670f5f9b
|
Add -4 option to force Rails 4 mode
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
71f54ebf
|
Add test for nested send()
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
66bfdbf5
|
Check entire call for send()
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
fbf7172f
|
merge
Merge pull request #521 from presidentbeef/search_sub_dirs_for_gitignore
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
02ab727a
|
Check for .gitignore secrets in subdirectories
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
468376e3
|
merge
Merge pull request #520 from presidentbeef/fix_erubis_add_stmt
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
a5c337d1
|
merge
Merge pull request #517 from JasonBarnabe/path_in_process_controller
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
4f6251db
|
Fix block statement endings in erubis
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
14c02113
|
Fix undefined variable in Scanner.process_controller error handler
|
Jason Barnabe <j****e@g****m>
|
about 12 years ago
|
|
|
cca23f00
|
Bump to 2.6.1
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
7ae59692
|
merge
Merge pull request #515 from presidentbeef/postgres_cves
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
88d4341c
|
Add check for CVE-2014-3482 and CVE-2014-3483
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
55dfa872
|
merge
Merge pull request #514 from bfish510/patch-2
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
9693f531
|
CVE_2013_6415 and CVE_2013_6415_call commented out
|
William Fischer <b****0@g****m>
|
about 12 years ago
|
|
|
0e3379b7
|
merge
Merge pull request #513 from presidentbeef/keyword_arguments_in_block
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
f49414d7
|
Support keyword arguments in blocks
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
047a0cf2
|
merge
Merge pull request #510 from bfish510/patch-1
|
Justin <p****f@u****m>
|
about 12 years ago
|
|
|
bc4a6acb
|
Nonexistent CVE
|
William Fischer <b****0@g****m>
|
about 12 years ago
|
|
|
a0ffd436
|
Bump to 2.6.0
|
Justin Collins <j****n@p****m>
|
about 12 years ago
|
|
|
c6fdbdb9
|
merge
Merge pull request #507 from presidentbeef/fix_redirect_false_positive_except
|
Justin <p****f@u****m>
|
about 12 years ago
|
|