brakeman 0.8.0 → 0.8.1

data/bin/brakeman

@@ -34,6 +34,10 @@ OptionParser.new do |opts|
   opts.separator ""
   opts.separator "Scanning options:"
 
+  opts.on "-a", "--assume-routes", "Assume all controller methods are actions" do
+    options[:assume_all_routes] = true
+  end
+
   opts.on "--ignore-model-output", "Consider model attributes XSS-safe" do
     options[:ignore_model_output] = true
   end

data/lib/processors/controller_alias_processor.rb

@@ -131,7 +131,7 @@ class ControllerAliasProcessor < AliasProcessor
 
   #Returns true if the given method name is also a route
   def route? method
-    return true if @tracker.routes[:allow_all_actions]
+    return true if @tracker.routes[:allow_all_actions] or OPTIONS[:assume_all_routes]
     routes = @tracker.routes[@current_class]
     routes and (routes == :allow_all_actions or routes.include? method)
   end

data/lib/scanner.rb

@@ -129,7 +129,13 @@ class Scanner
   #Adds parsed information to tracker.routes
   def process_routes
     if File.exists? "#@path/config/routes.rb"
-      @processor.process_routes RubyParser.new.parse(File.read("#@path/config/routes.rb"))
+      begin
+        @processor.process_routes RubyParser.new.parse(File.read("#@path/config/routes.rb"))
+      rescue Exception => e
+        tracker.error e.exception(e.message + "\nWhile processing routes.rb"), e.backtrace
+        warn "[Notice] Error while processing routes - assuming all public controller methods are actions."
+        OPTIONS[:assume_all_routes] = true
+      end
     else
       warn "[Notice] No route information found"
     end

data/lib/version.rb

@@ -1 +1 @@
-Version = "0.8.0"
+Version = "0.8.1"

metadata

@@ -5,8 +5,8 @@ version: !ruby/object:Gem::Version
   segments: 
   - 0
   - 8
-  - 0
-  version: 0.8.0
+  - 1
+  version: 0.8.1
 platform: ruby
 authors: 
 - Justin Collins
@@ -14,7 +14,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2011-09-15 00:00:00 -07:00
+date: 2011-09-28 00:00:00 -07:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency