brakeman 4.8.0 → 5.2.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (273) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGES.md +144 -2
  3. data/README.md +23 -6
  4. data/bundle/load.rb +7 -5
  5. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/CHANGELOG.md +24 -0
  6. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/FAQ.md +0 -0
  7. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/Gemfile +1 -4
  8. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/MIT-LICENSE +0 -0
  9. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/README.md +21 -16
  10. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/REFERENCE.md +39 -10
  11. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/TODO +0 -0
  12. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/haml.gemspec +2 -1
  13. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/attribute_builder.rb +58 -3
  14. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/attribute_compiler.rb +45 -32
  15. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/attribute_parser.rb +0 -0
  16. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/buffer.rb +0 -56
  17. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/compiler.rb +0 -0
  18. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/engine.rb +0 -0
  19. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/error.rb +0 -0
  20. data/bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/escapable.rb +77 -0
  21. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/exec.rb +0 -0
  22. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/filters.rb +0 -0
  23. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/generator.rb +0 -0
  24. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/helpers/action_view_extensions.rb +0 -0
  25. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/helpers/action_view_mods.rb +0 -0
  26. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/helpers/action_view_xss_mods.rb +0 -0
  27. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/helpers/safe_erubi_template.rb +0 -0
  28. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/helpers/safe_erubis_template.rb +0 -0
  29. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/helpers/xss_mods.rb +6 -3
  30. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/helpers.rb +7 -1
  31. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/options.rb +0 -0
  32. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/parser.rb +32 -4
  33. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/plugin.rb +18 -1
  34. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/railtie.rb +5 -0
  35. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/sass_rails_filter.rb +0 -0
  36. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/template/options.rb +0 -0
  37. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/template.rb +0 -0
  38. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/temple_engine.rb +2 -1
  39. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/temple_line_counter.rb +0 -0
  40. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/util.rb +1 -1
  41. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml/version.rb +1 -1
  42. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/lib/haml.rb +0 -0
  43. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/yard/default/fulldoc/html/css/common.sass +0 -0
  44. data/bundle/ruby/2.7.0/gems/{haml-5.1.2 → haml-5.2.2}/yard/default/layout/html/footer.erb +0 -0
  45. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/MIT-LICENSE.txt +20 -0
  46. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/processor_count.rb +45 -0
  47. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/version.rb +4 -0
  48. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel.rb +532 -0
  49. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/LICENSE.txt +22 -0
  50. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/NEWS.md +178 -0
  51. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/README.md +48 -0
  52. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/attlistdecl.rb +63 -0
  53. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/attribute.rb +205 -0
  54. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/cdata.rb +68 -0
  55. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/child.rb +97 -0
  56. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/comment.rb +80 -0
  57. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/doctype.rb +311 -0
  58. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/document.rb +451 -0
  59. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/attlistdecl.rb +11 -0
  60. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/dtd.rb +47 -0
  61. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/elementdecl.rb +18 -0
  62. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/entitydecl.rb +57 -0
  63. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/notationdecl.rb +40 -0
  64. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/element.rb +2599 -0
  65. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/encoding.rb +51 -0
  66. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/entity.rb +171 -0
  67. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/formatters/default.rb +116 -0
  68. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/formatters/pretty.rb +142 -0
  69. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/formatters/transitive.rb +58 -0
  70. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/functions.rb +447 -0
  71. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/instruction.rb +79 -0
  72. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/light/node.rb +188 -0
  73. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/namespace.rb +59 -0
  74. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/node.rb +76 -0
  75. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/output.rb +30 -0
  76. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parent.rb +166 -0
  77. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parseexception.rb +52 -0
  78. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/baseparser.rb +694 -0
  79. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/lightparser.rb +59 -0
  80. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/pullparser.rb +197 -0
  81. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/sax2parser.rb +273 -0
  82. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/streamparser.rb +61 -0
  83. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/treeparser.rb +101 -0
  84. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/ultralightparser.rb +57 -0
  85. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/xpathparser.rb +689 -0
  86. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/quickpath.rb +266 -0
  87. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/rexml.rb +37 -0
  88. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/sax2listener.rb +98 -0
  89. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/security.rb +28 -0
  90. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/source.rb +298 -0
  91. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/streamlistener.rb +93 -0
  92. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/text.rb +424 -0
  93. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/undefinednamespaceexception.rb +9 -0
  94. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/validation/relaxng.rb +539 -0
  95. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/validation/validation.rb +144 -0
  96. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/validation/validationexception.rb +10 -0
  97. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xmldecl.rb +130 -0
  98. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xmltokens.rb +85 -0
  99. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xpath.rb +81 -0
  100. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xpath_parser.rb +974 -0
  101. data/bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml.rb +3 -0
  102. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/History.rdoc +148 -0
  103. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/Manifest.txt +7 -0
  104. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/README.rdoc +1 -0
  105. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/compare/normalize.rb +51 -6
  106. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/debugging.md +190 -0
  107. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/gauntlet.md +106 -0
  108. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/rp_extensions.rb +15 -36
  109. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/rp_stringscanner.rb +33 -0
  110. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby20_parser.rb +7128 -0
  111. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby20_parser.y +420 -296
  112. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby21_parser.rb +7182 -0
  113. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby21_parser.y +415 -293
  114. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby22_parser.rb +7228 -0
  115. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby22_parser.y +419 -295
  116. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby23_parser.rb +7237 -0
  117. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby23_parser.y +419 -295
  118. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby24_parser.rb +7268 -0
  119. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby24_parser.y +419 -295
  120. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby25_parser.rb +7268 -0
  121. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2/lib/ruby26_parser.y → ruby_parser-3.18.1/lib/ruby25_parser.y} +418 -308
  122. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby26_parser.rb +7287 -0
  123. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2/lib/ruby_parser.yy → ruby_parser-3.18.1/lib/ruby26_parser.y} +419 -399
  124. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby27_parser.rb +8517 -0
  125. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2/lib/ruby25_parser.y → ruby_parser-3.18.1/lib/ruby27_parser.y} +1030 -294
  126. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby30_parser.rb +8751 -0
  127. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby30_parser.y +3472 -0
  128. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby3_parser.yy +3476 -0
  129. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby_lexer.rb +308 -605
  130. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby_lexer.rex +33 -27
  131. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby_lexer.rex.rb +65 -31
  132. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer_strings.rb +638 -0
  133. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby_parser.rb +4 -0
  134. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_parser.yy +3487 -0
  135. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/lib/ruby_parser_extras.rb +341 -127
  136. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/tools/munge.rb +43 -10
  137. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.14.2 → ruby_parser-3.18.1}/tools/ripper.rb +15 -10
  138. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/History.rdoc +39 -0
  139. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/Manifest.txt +0 -0
  140. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/README.rdoc +0 -0
  141. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/lib/composite_sexp_processor.rb +0 -0
  142. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/lib/pt_testcase.rb +9 -4
  143. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/lib/sexp.rb +19 -9
  144. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/lib/sexp_matcher.rb +4 -7
  145. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/lib/sexp_processor.rb +1 -1
  146. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/lib/strict_sexp.rb +25 -3
  147. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.14.1 → sexp_processor-4.16.0}/lib/unique.rb +0 -0
  148. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/CHANGES +4 -0
  149. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/Gemfile +12 -13
  150. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/LICENSE +0 -0
  151. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/README.jp.md +0 -0
  152. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/README.md +0 -0
  153. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/code_attributes.rb +0 -0
  154. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/command.rb +13 -13
  155. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/controls.rb +0 -0
  156. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/do_inserter.rb +0 -0
  157. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/embedded.rb +0 -0
  158. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/end_inserter.rb +0 -0
  159. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/engine.rb +0 -0
  160. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/erb_converter.rb +0 -0
  161. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/filter.rb +0 -0
  162. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/grammar.rb +0 -0
  163. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/include.rb +0 -0
  164. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/interpolation.rb +0 -0
  165. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/logic_less/context.rb +0 -0
  166. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/logic_less/filter.rb +0 -0
  167. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/logic_less.rb +0 -0
  168. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/parser.rb +1 -1
  169. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/smart/escaper.rb +0 -0
  170. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/smart/filter.rb +0 -0
  171. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/smart/parser.rb +0 -0
  172. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/smart.rb +0 -0
  173. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/splat/builder.rb +0 -0
  174. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/splat/filter.rb +0 -0
  175. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/template.rb +0 -0
  176. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/translator.rb +0 -0
  177. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim/version.rb +1 -1
  178. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/lib/slim.rb +0 -0
  179. data/bundle/ruby/2.7.0/gems/{slim-4.0.1 → slim-4.1.0}/slim.gemspec +0 -0
  180. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/CHANGELOG.md +8 -0
  181. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/MIT-LICENSE.txt +0 -0
  182. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/README.md +1 -1
  183. data/bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/data/display_width.marshal.gz +0 -0
  184. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/lib/unicode/display_width/constants.rb +2 -2
  185. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/lib/unicode/display_width/index.rb +0 -0
  186. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/lib/unicode/display_width/no_string_ext.rb +0 -0
  187. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/lib/unicode/display_width/string_ext.rb +0 -0
  188. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.6.1 → unicode-display_width-1.8.0}/lib/unicode/display_width.rb +0 -0
  189. data/lib/brakeman/app_tree.rb +37 -4
  190. data/lib/brakeman/checks/base_check.rb +18 -2
  191. data/lib/brakeman/checks/check_basic_auth.rb +2 -0
  192. data/lib/brakeman/checks/check_csrf_token_forgery_cve.rb +28 -0
  193. data/lib/brakeman/checks/check_deserialize.rb +21 -1
  194. data/lib/brakeman/checks/check_detailed_exceptions.rb +1 -1
  195. data/lib/brakeman/checks/check_eol_rails.rb +23 -0
  196. data/lib/brakeman/checks/check_eol_ruby.rb +26 -0
  197. data/lib/brakeman/checks/check_evaluation.rb +1 -1
  198. data/lib/brakeman/checks/check_execute.rb +12 -1
  199. data/lib/brakeman/checks/check_json_entity_escape.rb +38 -0
  200. data/lib/brakeman/checks/check_json_parsing.rb +1 -1
  201. data/lib/brakeman/checks/check_mass_assignment.rb +37 -9
  202. data/lib/brakeman/checks/check_model_attr_accessible.rb +1 -1
  203. data/lib/brakeman/checks/check_model_attributes.rb +1 -1
  204. data/lib/brakeman/checks/check_page_caching_cve.rb +37 -0
  205. data/lib/brakeman/checks/check_permit_attributes.rb +1 -1
  206. data/lib/brakeman/checks/check_regex_dos.rb +1 -1
  207. data/lib/brakeman/checks/check_render.rb +15 -1
  208. data/lib/brakeman/checks/check_sanitize_methods.rb +2 -1
  209. data/lib/brakeman/checks/check_skip_before_filter.rb +4 -4
  210. data/lib/brakeman/checks/check_sql.rb +60 -9
  211. data/lib/brakeman/checks/check_symbol_dos.rb +1 -1
  212. data/lib/brakeman/checks/check_template_injection.rb +32 -0
  213. data/lib/brakeman/checks/check_unsafe_reflection_methods.rb +68 -0
  214. data/lib/brakeman/checks/check_verb_confusion.rb +75 -0
  215. data/lib/brakeman/checks/eol_check.rb +47 -0
  216. data/lib/brakeman/commandline.rb +25 -1
  217. data/lib/brakeman/file_parser.rb +58 -22
  218. data/lib/brakeman/options.rb +39 -2
  219. data/lib/brakeman/parsers/template_parser.rb +26 -3
  220. data/lib/brakeman/processors/alias_processor.rb +132 -24
  221. data/lib/brakeman/processors/base_processor.rb +4 -4
  222. data/lib/brakeman/processors/controller_alias_processor.rb +6 -43
  223. data/lib/brakeman/processors/controller_processor.rb +1 -1
  224. data/lib/brakeman/processors/gem_processor.rb +3 -0
  225. data/lib/brakeman/processors/haml_template_processor.rb +17 -1
  226. data/lib/brakeman/processors/lib/call_conversion_helper.rb +13 -7
  227. data/lib/brakeman/processors/lib/file_type_detector.rb +64 -0
  228. data/lib/brakeman/processors/lib/find_all_calls.rb +28 -13
  229. data/lib/brakeman/processors/lib/rails3_config_processor.rb +16 -16
  230. data/lib/brakeman/processors/lib/rails3_route_processor.rb +2 -0
  231. data/lib/brakeman/processors/lib/rails4_config_processor.rb +2 -1
  232. data/lib/brakeman/processors/lib/render_helper.rb +3 -1
  233. data/lib/brakeman/processors/library_processor.rb +9 -0
  234. data/lib/brakeman/processors/model_processor.rb +32 -0
  235. data/lib/brakeman/processors/output_processor.rb +1 -1
  236. data/lib/brakeman/processors/template_alias_processor.rb +5 -0
  237. data/lib/brakeman/report/ignore/config.rb +5 -1
  238. data/lib/brakeman/report/ignore/interactive.rb +1 -1
  239. data/lib/brakeman/report/report_base.rb +0 -2
  240. data/lib/brakeman/report/report_csv.rb +37 -60
  241. data/lib/brakeman/report/report_github.rb +31 -0
  242. data/lib/brakeman/report/report_junit.rb +2 -2
  243. data/lib/brakeman/report/report_sarif.rb +133 -0
  244. data/lib/brakeman/report/report_sonar.rb +38 -0
  245. data/lib/brakeman/report/report_tabs.rb +1 -1
  246. data/lib/brakeman/report/report_text.rb +38 -17
  247. data/lib/brakeman/report.rb +19 -1
  248. data/lib/brakeman/rescanner.rb +7 -5
  249. data/lib/brakeman/scanner.rb +65 -31
  250. data/lib/brakeman/tracker/collection.rb +57 -7
  251. data/lib/brakeman/tracker/config.rb +87 -5
  252. data/lib/brakeman/tracker/constants.rb +8 -7
  253. data/lib/brakeman/tracker/controller.rb +1 -1
  254. data/lib/brakeman/tracker/method_info.rb +70 -0
  255. data/lib/brakeman/tracker.rb +42 -5
  256. data/lib/brakeman/util.rb +58 -21
  257. data/lib/brakeman/version.rb +1 -1
  258. data/lib/brakeman/warning.rb +10 -2
  259. data/lib/brakeman/warning_codes.rb +13 -0
  260. data/lib/brakeman.rb +45 -6
  261. data/lib/ruby_parser/bm_sexp.rb +33 -9
  262. metadata +201 -123
  263. data/bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/escapable.rb +0 -50
  264. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/debugging.md +0 -18
  265. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/rp_stringscanner.rb +0 -64
  266. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby20_parser.rb +0 -7042
  267. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby21_parser.rb +0 -7113
  268. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby22_parser.rb +0 -7146
  269. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby23_parser.rb +0 -7163
  270. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby24_parser.rb +0 -7175
  271. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby25_parser.rb +0 -7175
  272. data/bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby26_parser.rb +0 -7195
  273. data/bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/data/display_width.marshal.gz +0 -0
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: brakeman
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.8.0
4
+ version: 5.2.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Justin Collins
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-02-18 00:00:00.000000000 Z
11
+ date: 2022-01-30 00:00:00.000000000 Z
12
12
  dependencies: []
13
13
  description: Brakeman detects security vulnerabilities in Ruby on Rails applications
14
14
  via static analysis.
@@ -56,46 +56,46 @@ files:
56
56
  - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/tiny.rb
57
57
  - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/util.rb
58
58
  - bundle/ruby/2.7.0/gems/erubis-2.7.0/setup.rb
59
- - bundle/ruby/2.7.0/gems/haml-5.1.2/CHANGELOG.md
60
- - bundle/ruby/2.7.0/gems/haml-5.1.2/FAQ.md
61
- - bundle/ruby/2.7.0/gems/haml-5.1.2/Gemfile
62
- - bundle/ruby/2.7.0/gems/haml-5.1.2/MIT-LICENSE
63
- - bundle/ruby/2.7.0/gems/haml-5.1.2/README.md
64
- - bundle/ruby/2.7.0/gems/haml-5.1.2/REFERENCE.md
65
- - bundle/ruby/2.7.0/gems/haml-5.1.2/TODO
66
- - bundle/ruby/2.7.0/gems/haml-5.1.2/haml.gemspec
67
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml.rb
68
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/attribute_builder.rb
69
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/attribute_compiler.rb
70
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/attribute_parser.rb
71
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/buffer.rb
72
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/compiler.rb
73
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/engine.rb
74
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/error.rb
75
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/escapable.rb
76
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/exec.rb
77
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/filters.rb
78
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/generator.rb
79
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/helpers.rb
80
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/helpers/action_view_extensions.rb
81
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/helpers/action_view_mods.rb
82
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/helpers/action_view_xss_mods.rb
83
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/helpers/safe_erubi_template.rb
84
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/helpers/safe_erubis_template.rb
85
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/helpers/xss_mods.rb
86
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/options.rb
87
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/parser.rb
88
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/plugin.rb
89
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/railtie.rb
90
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/sass_rails_filter.rb
91
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/template.rb
92
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/template/options.rb
93
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/temple_engine.rb
94
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/temple_line_counter.rb
95
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/util.rb
96
- - bundle/ruby/2.7.0/gems/haml-5.1.2/lib/haml/version.rb
97
- - bundle/ruby/2.7.0/gems/haml-5.1.2/yard/default/fulldoc/html/css/common.sass
98
- - bundle/ruby/2.7.0/gems/haml-5.1.2/yard/default/layout/html/footer.erb
59
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/CHANGELOG.md
60
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/FAQ.md
61
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/Gemfile
62
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/MIT-LICENSE
63
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/README.md
64
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/REFERENCE.md
65
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/TODO
66
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/haml.gemspec
67
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml.rb
68
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_builder.rb
69
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_compiler.rb
70
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_parser.rb
71
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/buffer.rb
72
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/compiler.rb
73
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/engine.rb
74
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/error.rb
75
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/escapable.rb
76
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/exec.rb
77
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/filters.rb
78
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/generator.rb
79
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers.rb
80
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_extensions.rb
81
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_mods.rb
82
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_xss_mods.rb
83
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/safe_erubi_template.rb
84
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/safe_erubis_template.rb
85
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/xss_mods.rb
86
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/options.rb
87
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/parser.rb
88
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/plugin.rb
89
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/railtie.rb
90
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/sass_rails_filter.rb
91
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/template.rb
92
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/template/options.rb
93
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/temple_engine.rb
94
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/temple_line_counter.rb
95
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/util.rb
96
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/version.rb
97
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/yard/default/fulldoc/html/css/common.sass
98
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/yard/default/layout/html/footer.erb
99
99
  - bundle/ruby/2.7.0/gems/highline-2.0.3/AUTHORS
100
100
  - bundle/ruby/2.7.0/gems/highline-2.0.3/COPYING
101
101
  - bundle/ruby/2.7.0/gems/highline-2.0.3/Changelog.md
@@ -132,39 +132,103 @@ files:
132
132
  - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/terminal/unix_stty.rb
133
133
  - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/version.rb
134
134
  - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/wrapper.rb
135
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/MIT-LICENSE.txt
136
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel.rb
137
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/processor_count.rb
138
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/version.rb
139
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/LICENSE.txt
140
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/NEWS.md
141
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/README.md
142
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml.rb
143
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/attlistdecl.rb
144
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/attribute.rb
145
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/cdata.rb
146
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/child.rb
147
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/comment.rb
148
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/doctype.rb
149
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/document.rb
150
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/attlistdecl.rb
151
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/dtd.rb
152
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/elementdecl.rb
153
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/entitydecl.rb
154
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/dtd/notationdecl.rb
155
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/element.rb
156
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/encoding.rb
157
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/entity.rb
158
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/formatters/default.rb
159
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/formatters/pretty.rb
160
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/formatters/transitive.rb
161
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/functions.rb
162
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/instruction.rb
163
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/light/node.rb
164
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/namespace.rb
165
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/node.rb
166
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/output.rb
167
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parent.rb
168
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parseexception.rb
169
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/baseparser.rb
170
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/lightparser.rb
171
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/pullparser.rb
172
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/sax2parser.rb
173
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/streamparser.rb
174
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/treeparser.rb
175
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/ultralightparser.rb
176
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/parsers/xpathparser.rb
177
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/quickpath.rb
178
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/rexml.rb
179
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/sax2listener.rb
180
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/security.rb
181
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/source.rb
182
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/streamlistener.rb
183
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/text.rb
184
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/undefinednamespaceexception.rb
185
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/validation/relaxng.rb
186
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/validation/validation.rb
187
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/validation/validationexception.rb
188
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xmldecl.rb
189
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xmltokens.rb
190
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xpath.rb
191
+ - bundle/ruby/2.7.0/gems/rexml-3.2.5/lib/rexml/xpath_parser.rb
135
192
  - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/History.rdoc
136
193
  - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/Manifest.txt
137
194
  - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/README.rdoc
138
195
  - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/lib/ruby2ruby.rb
139
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/History.rdoc
140
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/Manifest.txt
141
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/README.rdoc
142
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/compare/normalize.rb
143
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/debugging.md
144
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/rp_extensions.rb
145
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/rp_stringscanner.rb
146
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby20_parser.rb
147
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby20_parser.y
148
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby21_parser.rb
149
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby21_parser.y
150
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby22_parser.rb
151
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby22_parser.y
152
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby23_parser.rb
153
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby23_parser.y
154
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby24_parser.rb
155
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby24_parser.y
156
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby25_parser.rb
157
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby25_parser.y
158
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby26_parser.rb
159
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby26_parser.y
160
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby_lexer.rb
161
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby_lexer.rex
162
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby_lexer.rex.rb
163
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby_parser.rb
164
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby_parser.yy
165
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/lib/ruby_parser_extras.rb
166
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/tools/munge.rb
167
- - bundle/ruby/2.7.0/gems/ruby_parser-3.14.2/tools/ripper.rb
196
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/History.rdoc
197
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/Manifest.txt
198
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/README.rdoc
199
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/compare/normalize.rb
200
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/debugging.md
201
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/gauntlet.md
202
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/rp_extensions.rb
203
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/rp_stringscanner.rb
204
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby20_parser.rb
205
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby20_parser.y
206
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby21_parser.rb
207
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby21_parser.y
208
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby22_parser.rb
209
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby22_parser.y
210
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby23_parser.rb
211
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby23_parser.y
212
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby24_parser.rb
213
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby24_parser.y
214
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby25_parser.rb
215
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby25_parser.y
216
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby26_parser.rb
217
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby26_parser.y
218
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby27_parser.rb
219
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby27_parser.y
220
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby30_parser.rb
221
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby30_parser.y
222
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby3_parser.yy
223
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer.rb
224
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer.rex
225
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer.rex.rb
226
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer_strings.rb
227
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_parser.rb
228
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_parser.yy
229
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_parser_extras.rb
230
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/tools/munge.rb
231
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/tools/ripper.rb
168
232
  - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/History.rdoc
169
233
  - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/Manifest.txt
170
234
  - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/README.rdoc
@@ -209,48 +273,48 @@ files:
209
273
  - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/lib/safe_yaml/version.rb
210
274
  - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/run_specs_all_ruby_versions.sh
211
275
  - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/safe_yaml.gemspec
212
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/History.rdoc
213
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/Manifest.txt
214
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/README.rdoc
215
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/lib/composite_sexp_processor.rb
216
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/lib/pt_testcase.rb
217
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/lib/sexp.rb
218
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/lib/sexp_matcher.rb
219
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/lib/sexp_processor.rb
220
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/lib/strict_sexp.rb
221
- - bundle/ruby/2.7.0/gems/sexp_processor-4.14.1/lib/unique.rb
222
- - bundle/ruby/2.7.0/gems/slim-4.0.1/CHANGES
223
- - bundle/ruby/2.7.0/gems/slim-4.0.1/Gemfile
224
- - bundle/ruby/2.7.0/gems/slim-4.0.1/LICENSE
225
- - bundle/ruby/2.7.0/gems/slim-4.0.1/README.jp.md
226
- - bundle/ruby/2.7.0/gems/slim-4.0.1/README.md
227
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim.rb
228
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/code_attributes.rb
229
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/command.rb
230
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/controls.rb
231
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/do_inserter.rb
232
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/embedded.rb
233
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/end_inserter.rb
234
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/engine.rb
235
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/erb_converter.rb
236
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/filter.rb
237
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/grammar.rb
238
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/include.rb
239
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/interpolation.rb
240
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/logic_less.rb
241
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/logic_less/context.rb
242
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/logic_less/filter.rb
243
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/parser.rb
244
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/smart.rb
245
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/smart/escaper.rb
246
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/smart/filter.rb
247
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/smart/parser.rb
248
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/splat/builder.rb
249
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/splat/filter.rb
250
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/template.rb
251
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/translator.rb
252
- - bundle/ruby/2.7.0/gems/slim-4.0.1/lib/slim/version.rb
253
- - bundle/ruby/2.7.0/gems/slim-4.0.1/slim.gemspec
276
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/History.rdoc
277
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/Manifest.txt
278
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/README.rdoc
279
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/composite_sexp_processor.rb
280
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/pt_testcase.rb
281
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp.rb
282
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp_matcher.rb
283
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp_processor.rb
284
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/strict_sexp.rb
285
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/unique.rb
286
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/CHANGES
287
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/Gemfile
288
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/LICENSE
289
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/README.jp.md
290
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/README.md
291
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim.rb
292
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/code_attributes.rb
293
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/command.rb
294
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/controls.rb
295
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/do_inserter.rb
296
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/embedded.rb
297
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/end_inserter.rb
298
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/engine.rb
299
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/erb_converter.rb
300
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/filter.rb
301
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/grammar.rb
302
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/include.rb
303
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/interpolation.rb
304
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/logic_less.rb
305
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/logic_less/context.rb
306
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/logic_less/filter.rb
307
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/parser.rb
308
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/smart.rb
309
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/smart/escaper.rb
310
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/smart/filter.rb
311
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/smart/parser.rb
312
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/splat/builder.rb
313
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/splat/filter.rb
314
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/template.rb
315
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/translator.rb
316
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/lib/slim/version.rb
317
+ - bundle/ruby/2.7.0/gems/slim-4.1.0/slim.gemspec
254
318
  - bundle/ruby/2.7.0/gems/temple-0.8.2/CHANGES
255
319
  - bundle/ruby/2.7.0/gems/temple-0.8.2/EXPRESSIONS.md
256
320
  - bundle/ruby/2.7.0/gems/temple-0.8.2/Gemfile
@@ -361,15 +425,15 @@ files:
361
425
  - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/typescript.rb
362
426
  - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/wikicloth.rb
363
427
  - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/yajl.rb
364
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/CHANGELOG.md
365
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/MIT-LICENSE.txt
366
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/README.md
367
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/data/display_width.marshal.gz
368
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/lib/unicode/display_width.rb
369
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/lib/unicode/display_width/constants.rb
370
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/lib/unicode/display_width/index.rb
371
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/lib/unicode/display_width/no_string_ext.rb
372
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.6.1/lib/unicode/display_width/string_ext.rb
428
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/CHANGELOG.md
429
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/MIT-LICENSE.txt
430
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/README.md
431
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/data/display_width.marshal.gz
432
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width.rb
433
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/constants.rb
434
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/index.rb
435
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/no_string_ext.rb
436
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/string_ext.rb
373
437
  - lib/brakeman.rb
374
438
  - lib/brakeman/app_tree.rb
375
439
  - lib/brakeman/call_index.rb
@@ -381,12 +445,15 @@ files:
381
445
  - lib/brakeman/checks/check_cookie_serialization.rb
382
446
  - lib/brakeman/checks/check_create_with.rb
383
447
  - lib/brakeman/checks/check_cross_site_scripting.rb
448
+ - lib/brakeman/checks/check_csrf_token_forgery_cve.rb
384
449
  - lib/brakeman/checks/check_default_routes.rb
385
450
  - lib/brakeman/checks/check_deserialize.rb
386
451
  - lib/brakeman/checks/check_detailed_exceptions.rb
387
452
  - lib/brakeman/checks/check_digest_dos.rb
388
453
  - lib/brakeman/checks/check_divide_by_zero.rb
389
454
  - lib/brakeman/checks/check_dynamic_finders.rb
455
+ - lib/brakeman/checks/check_eol_rails.rb
456
+ - lib/brakeman/checks/check_eol_ruby.rb
390
457
  - lib/brakeman/checks/check_escape_function.rb
391
458
  - lib/brakeman/checks/check_evaluation.rb
392
459
  - lib/brakeman/checks/check_execute.rb
@@ -399,6 +466,7 @@ files:
399
466
  - lib/brakeman/checks/check_i18n_xss.rb
400
467
  - lib/brakeman/checks/check_jruby_xml.rb
401
468
  - lib/brakeman/checks/check_json_encoding.rb
469
+ - lib/brakeman/checks/check_json_entity_escape.rb
402
470
  - lib/brakeman/checks/check_json_parsing.rb
403
471
  - lib/brakeman/checks/check_link_to.rb
404
472
  - lib/brakeman/checks/check_link_to_href.rb
@@ -411,6 +479,7 @@ files:
411
479
  - lib/brakeman/checks/check_nested_attributes.rb
412
480
  - lib/brakeman/checks/check_nested_attributes_bypass.rb
413
481
  - lib/brakeman/checks/check_number_to_currency.rb
482
+ - lib/brakeman/checks/check_page_caching_cve.rb
414
483
  - lib/brakeman/checks/check_permit_attributes.rb
415
484
  - lib/brakeman/checks/check_quote_table_name.rb
416
485
  - lib/brakeman/checks/check_redirect.rb
@@ -440,14 +509,18 @@ files:
440
509
  - lib/brakeman/checks/check_strip_tags.rb
441
510
  - lib/brakeman/checks/check_symbol_dos.rb
442
511
  - lib/brakeman/checks/check_symbol_dos_cve.rb
512
+ - lib/brakeman/checks/check_template_injection.rb
443
513
  - lib/brakeman/checks/check_translate_bug.rb
444
514
  - lib/brakeman/checks/check_unsafe_reflection.rb
515
+ - lib/brakeman/checks/check_unsafe_reflection_methods.rb
445
516
  - lib/brakeman/checks/check_unscoped_find.rb
446
517
  - lib/brakeman/checks/check_validation_regex.rb
518
+ - lib/brakeman/checks/check_verb_confusion.rb
447
519
  - lib/brakeman/checks/check_weak_hash.rb
448
520
  - lib/brakeman/checks/check_without_protection.rb
449
521
  - lib/brakeman/checks/check_xml_dos.rb
450
522
  - lib/brakeman/checks/check_yaml_parsing.rb
523
+ - lib/brakeman/checks/eol_check.rb
451
524
  - lib/brakeman/codeclimate/engine_configuration.rb
452
525
  - lib/brakeman/commandline.rb
453
526
  - lib/brakeman/differ.rb
@@ -474,6 +547,7 @@ files:
474
547
  - lib/brakeman/processors/haml_template_processor.rb
475
548
  - lib/brakeman/processors/lib/basic_processor.rb
476
549
  - lib/brakeman/processors/lib/call_conversion_helper.rb
550
+ - lib/brakeman/processors/lib/file_type_detector.rb
477
551
  - lib/brakeman/processors/lib/find_all_calls.rb
478
552
  - lib/brakeman/processors/lib/find_call.rb
479
553
  - lib/brakeman/processors/lib/find_return_value.rb
@@ -504,11 +578,14 @@ files:
504
578
  - lib/brakeman/report/report_base.rb
505
579
  - lib/brakeman/report/report_codeclimate.rb
506
580
  - lib/brakeman/report/report_csv.rb
581
+ - lib/brakeman/report/report_github.rb
507
582
  - lib/brakeman/report/report_hash.rb
508
583
  - lib/brakeman/report/report_html.rb
509
584
  - lib/brakeman/report/report_json.rb
510
585
  - lib/brakeman/report/report_junit.rb
511
586
  - lib/brakeman/report/report_markdown.rb
587
+ - lib/brakeman/report/report_sarif.rb
588
+ - lib/brakeman/report/report_sonar.rb
512
589
  - lib/brakeman/report/report_table.rb
513
590
  - lib/brakeman/report/report_tabs.rb
514
591
  - lib/brakeman/report/report_text.rb
@@ -531,6 +608,7 @@ files:
531
608
  - lib/brakeman/tracker/constants.rb
532
609
  - lib/brakeman/tracker/controller.rb
533
610
  - lib/brakeman/tracker/library.rb
611
+ - lib/brakeman/tracker/method_info.rb
534
612
  - lib/brakeman/tracker/model.rb
535
613
  - lib/brakeman/tracker/template.rb
536
614
  - lib/brakeman/util.rb
@@ -558,7 +636,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
558
636
  requirements:
559
637
  - - ">="
560
638
  - !ruby/object:Gem::Version
561
- version: 2.3.0
639
+ version: 2.5.0
562
640
  required_rubygems_version: !ruby/object:Gem::Requirement
563
641
  requirements:
564
642
  - - ">="
@@ -1,50 +0,0 @@
1
- # frozen_string_literal: true
2
-
3
- module Haml
4
- # Like Temple::Filters::Escapable, but with support for escaping by
5
- # Haml::Herlpers.html_escape and Haml::Herlpers.escape_once.
6
- class Escapable < Temple::Filter
7
- def initialize(*)
8
- super
9
- @escape_code = "::Haml::Helpers.html_escape((%s))"
10
- @escaper = eval("proc {|v| #{@escape_code % 'v'} }")
11
- @once_escape_code = "::Haml::Helpers.escape_once((%s))"
12
- @once_escaper = eval("proc {|v| #{@once_escape_code % 'v'} }")
13
- @escape = false
14
- end
15
-
16
- def on_escape(flag, exp)
17
- old = @escape
18
- @escape = flag
19
- compile(exp)
20
- ensure
21
- @escape = old
22
- end
23
-
24
- # The same as Haml::AttributeBuilder.build_attributes
25
- def on_static(value)
26
- [:static,
27
- if @escape == :once
28
- @once_escaper[value]
29
- elsif @escape
30
- @escaper[value]
31
- else
32
- value
33
- end
34
- ]
35
- end
36
-
37
- # The same as Haml::AttributeBuilder.build_attributes
38
- def on_dynamic(value)
39
- [:dynamic,
40
- if @escape == :once
41
- @once_escape_code % value
42
- elsif @escape
43
- @escape_code % value
44
- else
45
- "(#{value}).to_s"
46
- end
47
- ]
48
- end
49
- end
50
- end
@@ -1,18 +0,0 @@
1
- # Quick Notes to Help with Debugging
2
-
3
- ## Comparing against ruby / ripper:
4
-
5
- ```
6
- % rake cmp3 F=file.rb
7
- ```
8
-
9
- This compiles the parser & lexer and then parses file.rb using both
10
- ruby, ripper, and ruby_parser in debug modes. The output is munged to
11
- be as uniform as possible and diffable. I'm using emacs'
12
- `ediff-files3` to compare these files (via `rake cmp3`) all at once,
13
- but regular `diff -u tmp/{ruby,rp}` will suffice for most tasks.
14
-
15
- From there? Good luck. I'm currently trying to backtrack from rule
16
- reductions to state change differences. I'd like to figure out a way
17
- to go from this sort of diff to a reasonable test that checks state
18
- changes but I don't have that set up at this point.
@@ -1,64 +0,0 @@
1
- require "strscan"
2
-
3
- class RPStringScanner < StringScanner
4
- # if ENV['TALLY'] then
5
- # alias :old_getch :getch
6
- # def getch
7
- # warn({:getch => caller[0]}.inspect)
8
- # old_getch
9
- # end
10
- # end
11
-
12
- if "".respond_to? :encoding then
13
- if "".respond_to? :byteslice then
14
- def string_to_pos
15
- string.byteslice(0, pos)
16
- end
17
- else
18
- def string_to_pos
19
- string.bytes.first(pos).pack("c*").force_encoding(string.encoding)
20
- end
21
- end
22
-
23
- def charpos
24
- string_to_pos.length
25
- end
26
- else
27
- alias :charpos :pos
28
-
29
- def string_to_pos
30
- string[0..pos]
31
- end
32
- end
33
-
34
- def unread_many str # TODO: remove this entirely - we should not need it
35
- warn({:unread_many => caller[0]}.inspect) if ENV['TALLY']
36
- begin
37
- string[charpos, 0] = str
38
- rescue IndexError
39
- # HACK -- this is a bandaid on a dirty rag on an open festering wound
40
- end
41
- end
42
-
43
- if ENV['DEBUG'] then
44
- alias :old_getch :getch
45
- def getch
46
- c = self.old_getch
47
- p :getch => [c, caller.first]
48
- c
49
- end
50
-
51
- alias :old_scan :scan
52
- def scan re
53
- s = old_scan re
54
- where = caller[1].split(/:/).first(2).join(":")
55
- d :scan => [s, where] if s
56
- s
57
- end
58
- end
59
-
60
- def d o
61
- $stderr.puts o.inspect
62
- end
63
- end
64
-