brakeman 1.0.rc1 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. data/README.md +7 -3
  2. data/bin/brakeman +1 -1
  3. data/lib/brakeman.rb +15 -6
  4. data/lib/brakeman/checks/check_sql.rb +4 -0
  5. data/lib/brakeman/format/style.css +105 -0
  6. data/lib/brakeman/processors/alias_processor.rb +58 -5
  7. data/lib/brakeman/processors/controller_processor.rb +0 -1
  8. data/lib/brakeman/scanner.rb +30 -21
  9. data/lib/brakeman/tracker.rb +1 -1
  10. data/lib/brakeman/util.rb +13 -0
  11. data/lib/brakeman/version.rb +1 -1
  12. data/lib/ruby_parser/ruby18_parser.rb +5544 -0
  13. data/lib/ruby_parser/ruby19_parser.rb +5756 -0
  14. data/lib/ruby_parser/ruby_lexer.rb +48 -19
  15. data/lib/ruby_parser/ruby_parser.rb +4 -5568
  16. data/lib/ruby_parser/ruby_parser_extras.rb +1075 -0
  17. metadata +36 -59
metadata CHANGED
@@ -1,14 +1,12 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: brakeman
3
3
  version: !ruby/object:Gem::Version
4
- hash: 447512930
5
- prerelease: 4
4
+ prerelease: false
6
5
  segments:
7
6
  - 1
8
7
  - 0
9
- - rc
10
- - 1
11
- version: 1.0.rc1
8
+ - 0
9
+ version: 1.0.0
12
10
  platform: ruby
13
11
  authors:
14
12
  - Justin Collins
@@ -16,7 +14,7 @@ autorequire:
16
14
  bindir: bin
17
15
  cert_chain: []
18
16
 
19
- date: 2011-12-05 00:00:00 -08:00
17
+ date: 2011-12-08 00:00:00 -08:00
20
18
  default_executable:
21
19
  dependencies:
22
20
  - !ruby/object:Gem::Dependency
@@ -27,7 +25,6 @@ dependencies:
27
25
  requirements:
28
26
  - - ~>
29
27
  - !ruby/object:Gem::Version
30
- hash: 35040058
31
28
  segments:
32
29
  - 2
33
30
  - 2
@@ -42,7 +39,6 @@ dependencies:
42
39
  requirements:
43
40
  - - ~>
44
41
  - !ruby/object:Gem::Version
45
- hash: 199563509
46
42
  segments:
47
43
  - 1
48
44
  - 2
@@ -50,70 +46,51 @@ dependencies:
50
46
  version: 1.2.4
51
47
  type: :runtime
52
48
  version_requirements: *id002
53
- - !ruby/object:Gem::Dependency
54
- name: ruby_parser
55
- prerelease: false
56
- requirement: &id003 !ruby/object:Gem::Requirement
57
- none: false
58
- requirements:
59
- - - ">="
60
- - !ruby/object:Gem::Version
61
- hash: 349353174
62
- segments:
63
- - 2
64
- - 3
65
- - 0
66
- version: 2.3.0
67
- type: :runtime
68
- version_requirements: *id003
69
49
  - !ruby/object:Gem::Dependency
70
50
  name: ruport
71
51
  prerelease: false
72
- requirement: &id004 !ruby/object:Gem::Requirement
52
+ requirement: &id003 !ruby/object:Gem::Requirement
73
53
  none: false
74
54
  requirements:
75
55
  - - ~>
76
56
  - !ruby/object:Gem::Version
77
- hash: 443479320
78
57
  segments:
79
58
  - 1
80
59
  - 6
81
60
  - 3
82
61
  version: 1.6.3
83
62
  type: :runtime
84
- version_requirements: *id004
63
+ version_requirements: *id003
85
64
  - !ruby/object:Gem::Dependency
86
65
  name: erubis
87
66
  prerelease: false
88
- requirement: &id005 !ruby/object:Gem::Requirement
67
+ requirement: &id004 !ruby/object:Gem::Requirement
89
68
  none: false
90
69
  requirements:
91
70
  - - ~>
92
71
  - !ruby/object:Gem::Version
93
- hash: 576733947
94
72
  segments:
95
73
  - 2
96
74
  - 6
97
75
  - 5
98
76
  version: 2.6.5
99
77
  type: :runtime
100
- version_requirements: *id005
78
+ version_requirements: *id004
101
79
  - !ruby/object:Gem::Dependency
102
80
  name: haml
103
81
  prerelease: false
104
- requirement: &id006 !ruby/object:Gem::Requirement
82
+ requirement: &id005 !ruby/object:Gem::Requirement
105
83
  none: false
106
84
  requirements:
107
85
  - - ~>
108
86
  - !ruby/object:Gem::Version
109
- hash: 359472903
110
87
  segments:
111
88
  - 3
112
89
  - 0
113
90
  - 12
114
91
  version: 3.0.12
115
92
  type: :runtime
116
- version_requirements: *id006
93
+ version_requirements: *id005
117
94
  description: Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis.
118
95
  email:
119
96
  executables:
@@ -127,18 +104,12 @@ files:
127
104
  - WARNING_TYPES
128
105
  - FEATURES
129
106
  - README.md
130
- - lib/brakeman.rb
107
+ - lib/ruby_parser/ruby18_parser.rb
108
+ - lib/ruby_parser/ruby_parser_extras.rb
131
109
  - lib/ruby_parser/ruby_lexer.rb
132
110
  - lib/ruby_parser/ruby_parser.rb
111
+ - lib/ruby_parser/ruby19_parser.rb
133
112
  - lib/brakeman/warning.rb
134
- - lib/brakeman/tracker.rb
135
- - lib/brakeman/util.rb
136
- - lib/brakeman/report.rb
137
- - lib/brakeman/version.rb
138
- - lib/brakeman/call_index.rb
139
- - lib/brakeman/scanner.rb
140
- - lib/brakeman/checks.rb
141
- - lib/brakeman/processor.rb
142
113
  - lib/brakeman/processors/gem_processor.rb
143
114
  - lib/brakeman/processors/params_processor.rb
144
115
  - lib/brakeman/processors/controller_alias_processor.rb
@@ -150,6 +121,15 @@ files:
150
121
  - lib/brakeman/processors/template_alias_processor.rb
151
122
  - lib/brakeman/processors/route_processor.rb
152
123
  - lib/brakeman/processors/model_processor.rb
124
+ - lib/brakeman/processors/lib/find_all_calls.rb
125
+ - lib/brakeman/processors/lib/find_call.rb
126
+ - lib/brakeman/processors/lib/processor_helper.rb
127
+ - lib/brakeman/processors/lib/rails3_route_processor.rb
128
+ - lib/brakeman/processors/lib/route_helper.rb
129
+ - lib/brakeman/processors/lib/rails2_config_processor.rb
130
+ - lib/brakeman/processors/lib/rails2_route_processor.rb
131
+ - lib/brakeman/processors/lib/render_helper.rb
132
+ - lib/brakeman/processors/lib/rails3_config_processor.rb
153
133
  - lib/brakeman/processors/alias_processor.rb
154
134
  - lib/brakeman/processors/output_processor.rb
155
135
  - lib/brakeman/processors/config_processor.rb
@@ -180,15 +160,16 @@ files:
180
160
  - lib/brakeman/checks/check_redirect.rb
181
161
  - lib/brakeman/checks/check_forgery_setting.rb
182
162
  - lib/brakeman/checks/check_render.rb
183
- - lib/brakeman/processors/lib/find_all_calls.rb
184
- - lib/brakeman/processors/lib/find_call.rb
185
- - lib/brakeman/processors/lib/processor_helper.rb
186
- - lib/brakeman/processors/lib/rails3_route_processor.rb
187
- - lib/brakeman/processors/lib/route_helper.rb
188
- - lib/brakeman/processors/lib/rails2_config_processor.rb
189
- - lib/brakeman/processors/lib/rails2_route_processor.rb
190
- - lib/brakeman/processors/lib/render_helper.rb
191
- - lib/brakeman/processors/lib/rails3_config_processor.rb
163
+ - lib/brakeman/tracker.rb
164
+ - lib/brakeman/util.rb
165
+ - lib/brakeman/report.rb
166
+ - lib/brakeman/version.rb
167
+ - lib/brakeman/call_index.rb
168
+ - lib/brakeman/scanner.rb
169
+ - lib/brakeman/checks.rb
170
+ - lib/brakeman/processor.rb
171
+ - lib/brakeman.rb
172
+ - lib/brakeman/format/style.css
192
173
  has_rdoc: true
193
174
  homepage: http://brakemanscanner.org
194
175
  licenses: []
@@ -203,25 +184,21 @@ required_ruby_version: !ruby/object:Gem::Requirement
203
184
  requirements:
204
185
  - - ">="
205
186
  - !ruby/object:Gem::Version
206
- hash: 881230260
207
187
  segments:
208
188
  - 0
209
189
  version: "0"
210
190
  required_rubygems_version: !ruby/object:Gem::Requirement
211
191
  none: false
212
192
  requirements:
213
- - - ">"
193
+ - - ">="
214
194
  - !ruby/object:Gem::Version
215
- hash: 357276212
216
195
  segments:
217
- - 1
218
- - 3
219
- - 1
220
- version: 1.3.1
196
+ - 0
197
+ version: "0"
221
198
  requirements: []
222
199
 
223
200
  rubyforge_project:
224
- rubygems_version: 1.5.2
201
+ rubygems_version: 1.3.7
225
202
  signing_key:
226
203
  specification_version: 3
227
204
  summary: Security vulnerability scanner for Ruby on Rails.