brakeman 3.6.2 → 3.7.0

data/lib/brakeman/tracker/constants.rb

@@ -2,14 +2,18 @@ require 'brakeman/processors/output_processor'
 
 module Brakeman
   class Constant
-    attr_reader :name, :name_array, :file, :value
+    attr_reader :name, :name_array, :file, :value, :context
 
-    def initialize name, value = nil, context = nil 
+    def initialize name, value, context = {}
       set_name name, context
       @value = value
       @context = context
 
       if @context
+        if @context[:class].is_a? Brakeman::Controller
+          @context[:class] = @context[:class].name
+        end
+
         @file = @context[:file]
       end
     end
@@ -88,6 +92,11 @@ module Brakeman
       nil
     end
 
+    def find_all exp
+      base_name = Constants.get_constant_base_name(exp)
+      @constants[base_name]
+    end
+
     def add name, value, context = nil
       if call? value and value.method == :freeze
         value = value.target

data/lib/brakeman/version.rb

@@ -1,3 +1,3 @@
 module Brakeman
-  Version = "3.6.2"
+  Version = "3.7.0"
 end

data/lib/ruby_parser/bm_sexp.rb

@@ -120,14 +120,6 @@ class Sexp
     old_find_node(*args)
   end
 
-  #Iterates over the Sexps in an Sexp, skipping values that are not
-  #an Sexp.
-  def each_sexp
-    self.each do |e|
-      yield e if Sexp === e
-    end
-  end
-
   #Raise a WrongSexpError if the nodes type does not match one of the expected
   #types.
   def expect *types

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: brakeman
 version: !ruby/object:Gem::Version
-  version: 3.6.2
+  version: 3.7.0
 platform: ruby
 authors:
 - Justin Collins
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain:
 - brakeman-public_cert.pem
-date: 2017-05-19 00:00:00.000000000 Z
+date: 2017-06-30 00:00:00.000000000 Z
 dependencies: []
 description: Brakeman detects security vulnerabilities in Ruby on Rails applications
   via static analysis.
@@ -1216,18 +1216,18 @@ files:
 - bundle/ruby/2.3.0/gems/tilt-2.0.7/test/tilt_wikiclothtemplate_test.rb
 - bundle/ruby/2.3.0/gems/tilt-2.0.7/test/tilt_yajltemplate_test.rb
 - bundle/ruby/2.3.0/gems/tilt-2.0.7/tilt.gemspec
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/CHANGELOG.md
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/MIT-LICENSE.txt
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/README.md
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/Rakefile
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/data/display_width.marshal.gz
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/lib/unicode/display_width.rb
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/lib/unicode/display_width/constants.rb
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/lib/unicode/display_width/index.rb
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/lib/unicode/display_width/no_string_ext.rb
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/lib/unicode/display_width/string_ext.rb
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/spec/display_width_spec.rb
-- bundle/ruby/2.3.0/gems/unicode-display_width-1.2.1/unicode-display_width.gemspec
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/CHANGELOG.md
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/MIT-LICENSE.txt
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/README.md
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/Rakefile
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/data/display_width.marshal.gz
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/lib/unicode/display_width.rb
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/lib/unicode/display_width/constants.rb
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/lib/unicode/display_width/index.rb
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/lib/unicode/display_width/no_string_ext.rb
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/lib/unicode/display_width/string_ext.rb
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/spec/display_width_spec.rb
+- bundle/ruby/2.3.0/gems/unicode-display_width-1.3.0/unicode-display_width.gemspec
 - lib/brakeman.rb
 - lib/brakeman/app_tree.rb
 - lib/brakeman/call_index.rb