brakeman 5.0.0.pre1 → 5.0.0

data/lib/brakeman/report/report_junit.rb

@@ -47,7 +47,7 @@ class Brakeman::Report::JUnit < Brakeman::Report::Base
       warning.add_attribute 'brakeman:file', warning_file(w)
       warning.add_attribute 'brakeman:line', w.line
       warning.add_attribute 'brakeman:fingerprint', w.fingerprint
-      warning.add_attribute 'brakeman:confidence', TEXT_CONFIDENCE[w.confidence]
+      warning.add_attribute 'brakeman:confidence', w.confidence_name 
       warning.add_attribute 'brakeman:code', w.format_code
       warning.add_text w.to_s
     }
@@ -88,7 +88,7 @@ class Brakeman::Report::JUnit < Brakeman::Report::Base
           failure.add_attribute 'brakeman:fingerprint', warning.fingerprint
           failure.add_attribute 'brakeman:file', warning_file(warning)
           failure.add_attribute 'brakeman:line', warning.line
-          failure.add_attribute 'brakeman:confidence', TEXT_CONFIDENCE[warning.confidence]
+          failure.add_attribute 'brakeman:confidence', warning.confidence_name 
           failure.add_attribute 'brakeman:code', warning.format_code
           failure.add_text warning.to_s
         }

data/lib/brakeman/report/report_sarif.rb

@@ -27,7 +27,7 @@ class Brakeman::Report::SARIF < Brakeman::Report::Base
   def rules
     @rules ||= unique_warnings_by_warning_code.map do |warning|
       rule_id = render_id warning
-      check_name = warning.check.gsub(/^Brakeman::Check/, '')
+      check_name = warning.check_name
       check_description = render_message check_descriptions[check_name]
       {
         :id => rule_id,

data/lib/brakeman/report/report_tabs.rb

@@ -10,7 +10,7 @@ class Brakeman::Report::Tabs < Brakeman::Report::Table
       self.send(meth).map do |w|
         line = w.line || 0
         w.warning_type.gsub!(/[^\w\s]/, ' ')
-        "#{(w.file.absolute)}\t#{line}\t#{w.warning_type}\t#{category}\t#{w.format_message}\t#{TEXT_CONFIDENCE[w.confidence]}"
+        "#{(w.file.absolute)}\t#{line}\t#{w.warning_type}\t#{category}\t#{w.format_message}\t#{w.confidence_name}"
       end.join "\n"
 
     end.join "\n"

data/lib/brakeman/report/report_text.rb

@@ -160,7 +160,7 @@ class Brakeman::Report::Text < Brakeman::Report::Base
     when :category
       label('Category', w.warning_type.to_s)
     when :check
-      label('Check', w.check.gsub(/^Brakeman::Check/, ''))
+      label('Check', w.check_name)
     when :message
       label('Message', w.message)
     when :code

data/lib/brakeman/scanner.rb

@@ -25,7 +25,7 @@ class Brakeman::Scanner
 
     if (!@app_tree.root || !@app_tree.exists?("app")) && !options[:force_scan]
       message = "Please supply the path to a Rails application (looking in #{@app_tree.root}).\n" <<
-                "  Use `--force` to run a scan anyway - for example if there are many applications in one directory."
+                "  Use `--force` to run a scan anyway."
 
       raise Brakeman::NoApplication, message
     end
@@ -139,6 +139,8 @@ class Brakeman::Scanner
     if @app_tree.exists? ".ruby-version"
       tracker.config.set_ruby_version @app_tree.file_path(".ruby-version").read
     end
+
+    tracker.config.load_rails_defaults
   end
 
   def process_config_file file

data/lib/brakeman/tracker/config.rb

@@ -149,5 +149,78 @@ module Brakeman
     def session_settings
       @rails.dig(:action_controller, :session)
     end
+
+
+    # Set Rails config option value
+    # where path is an array of attributes, e.g.
+    #
+    #   :action_controller, :perform_caching
+    #
+    # then this will set
+    #
+    #   rails[:action_controller][:perform_caching] = value
+    def set_rails_config value, *path
+      config = self.rails
+
+      path[0..-2].each do |o|
+        config[o] ||= {}
+
+        option = config[o]
+
+        if not option.is_a? Hash
+          Brakeman.debug "[Notice] Skipping config setting: #{path.map(&:to_s).join(".")}"
+          return
+        end
+
+        config = option
+      end
+
+      config[path.last] = value
+    end
+
+    # Load defaults based on config.load_defaults value
+    # as documented here: https://guides.rubyonrails.org/configuring.html#results-of-config-load-defaults
+    def load_rails_defaults
+      return unless number? tracker.config.rails[:load_defaults]
+
+      version = tracker.config.rails[:load_defaults].value
+      true_value = Sexp.new(:true)
+      false_value = Sexp.new(:false)
+
+      if version >= 5.0
+        set_rails_config(true_value, :action_controller, :per_form_csrf_tokens)
+        set_rails_config(true_value, :action_controller, :forgery_protection_origin_check)
+        set_rails_config(true_value, :active_record, :belongs_to_required_by_default)
+        # Note: this may need to be changed, because ssl_options is a Hash
+        set_rails_config(true_value, :ssl_options, :hsts, :subdomains)
+      end
+
+      if version >= 5.1
+        set_rails_config(false_value, :assets, :unknown_asset_fallback)
+        set_rails_config(true_value, :action_view, :form_with_generates_remote_forms)
+      end
+
+      if version >= 5.2
+        set_rails_config(true_value, :active_record, :cache_versioning)
+        set_rails_config(true_value, :action_dispatch, :use_authenticated_cookie_encryption)
+        set_rails_config(true_value, :active_support, :use_authenticated_message_encryption)
+        set_rails_config(true_value, :active_support, :use_sha1_digests)
+        set_rails_config(true_value, :action_controller, :default_protect_from_forgery)
+        set_rails_config(true_value, :action_view, :form_with_generates_ids)
+      end
+
+      if version >= 6.0
+        set_rails_config(Sexp.new(:lit, :zeitwerk), :autoloader)
+        set_rails_config(false_value, :action_view, :default_enforce_utf8)
+        set_rails_config(true_value, :action_dispatch, :use_cookies_with_metadata)
+        set_rails_config(false_value, :action_dispatch, :return_only_media_type_on_content_type)
+        set_rails_config(Sexp.new(:str, 'ActionMailer::MailDeliveryJob'), :action_mailer, :delivery_job)
+        set_rails_config(true_value, :active_job, :return_false_on_aborted_enqueue)
+        set_rails_config(Sexp.new(:lit, :active_storage_analysis), :active_storage, :queues, :analysis)
+        set_rails_config(Sexp.new(:lit, :active_storage_purge), :active_storage, :queues, :purge)
+        set_rails_config(true_value, :active_storage, :replace_on_assign_to_many)
+        set_rails_config(true_value, :active_record, :collection_cache_versioning)
+      end
+    end
   end
 end

data/lib/brakeman/tracker/controller.rb

@@ -125,7 +125,7 @@ module Brakeman
         value = args[-1][2]
         case value.node_type
         when :array
-          filter[option] = value[1..-1].map {|v| v[1] }
+          filter[option] = value.sexp_body.map {|v| v[1] }
         when :lit, :str
           filter[option] = value[1]
         else

data/lib/brakeman/util.rb

@@ -321,7 +321,7 @@ module Brakeman::Util
       if node_type? current, :class
         return true
       elsif sexp? current
-        todo = current[1..-1].concat todo
+        todo = current.sexp_body.concat todo
       end
     end
 
@@ -334,7 +334,7 @@ module Brakeman::Util
     if args.empty? or args.first.empty?
       #nothing to do
     elsif node_type? args.first, :arglist
-      call.concat args.first[1..-1]
+      call.concat args.first.sexp_body
     elsif args.first.node_type.is_a? Sexp #just a list of args
       call.concat args.first
     else

data/lib/brakeman/version.rb

@@ -1,3 +1,3 @@
 module Brakeman
-  Version = "5.0.0.pre1"
+  Version = "5.0.0"
 end

data/lib/brakeman/warning.rb

@@ -275,6 +275,14 @@ class Brakeman::Warning
     self.file.relative
   end
 
+  def check_name
+    @check_name ||= self.check.sub(/^Brakeman::Check/, '')
+  end
+
+  def confidence_name
+    TEXT_CONFIDENCE[self.confidence]
+  end
+
   def to_hash absolute_paths: true
     if self.called_from and not absolute_paths
       render_path = self.called_from.with_relative_paths
@@ -285,7 +293,7 @@ class Brakeman::Warning
     { :warning_type => self.warning_type,
       :warning_code => @warning_code,
       :fingerprint => self.fingerprint,
-      :check_name => self.check.gsub(/^Brakeman::Check/, ''),
+      :check_name => self.check_name,
       :message => self.message.to_s,
       :file => (absolute_paths ? self.file.absolute : self.file.relative),
       :line => self.line,
@@ -294,7 +302,7 @@ class Brakeman::Warning
       :render_path => render_path,
       :location => self.location(false),
       :user_input => (@user_input && self.format_user_input(false)),
-      :confidence => TEXT_CONFIDENCE[self.confidence]
+      :confidence => self.confidence_name
     }
   end
 

data/lib/ruby_parser/bm_sexp.rb

@@ -175,7 +175,7 @@ class Sexp
     start_index = 3
 
     if exp.is_a? Sexp and exp.node_type == :arglist
-      exp = exp[1..-1]
+      exp = exp.sexp_body
     end
 
     exp.each_with_index do |e, i|
@@ -198,10 +198,10 @@ class Sexp
 
     case self.node_type
     when :call, :attrasgn, :safe_call, :safe_attrasgn
-      self[3..-1].unshift :arglist
+      self.sexp_body(3).unshift :arglist
     when :super, :zsuper
       if self[1]
-        self[1..-1].unshift :arglist
+        self.sexp_body.unshift :arglist
       else
         Sexp.new(:arglist)
       end
@@ -218,13 +218,13 @@ class Sexp
     case self.node_type
     when :call, :attrasgn, :safe_call, :safe_attrasgn
       if self[3]
-        self[3..-1]
+        self.sexp_body(3)
       else
         Sexp.new
       end
     when :super, :zsuper
       if self[1]
-        self[1..-1]
+        self.sexp_body
       else
         Sexp.new
       end
@@ -512,7 +512,7 @@ class Sexp
     self.slice!(index..-1) #Remove old body
 
     if exp.first == :rlist
-      exp = exp[1..-1]
+      exp = exp.sexp_body
     end
 
     #Insert new body
@@ -529,11 +529,11 @@ class Sexp
 
     case self.node_type
     when :defn, :class
-      self[3..-1]
+      self.sexp_body(3)
     when :defs
-      self[4..-1]
+      self.sexp_body(4)
     when :module
-      self[2..-1]
+      self.sexp_body(2)
     end
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: brakeman
 version: !ruby/object:Gem::Version
-  version: 5.0.0.pre1
+  version: 5.0.0
 platform: ruby
 authors:
 - Justin Collins
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-11-18 00:00:00.000000000 Z
+date: 2021-01-27 00:00:00.000000000 Z
 dependencies: []
 description: Brakeman detects security vulnerabilities in Ruby on Rails applications
   via static analysis.
@@ -56,46 +56,46 @@ files:
 - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/tiny.rb
 - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/util.rb
 - bundle/ruby/2.7.0/gems/erubis-2.7.0/setup.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/CHANGELOG.md
-- bundle/ruby/2.7.0/gems/haml-5.2.0/FAQ.md
-- bundle/ruby/2.7.0/gems/haml-5.2.0/Gemfile
-- bundle/ruby/2.7.0/gems/haml-5.2.0/MIT-LICENSE
-- bundle/ruby/2.7.0/gems/haml-5.2.0/README.md
-- bundle/ruby/2.7.0/gems/haml-5.2.0/REFERENCE.md
-- bundle/ruby/2.7.0/gems/haml-5.2.0/TODO
-- bundle/ruby/2.7.0/gems/haml-5.2.0/haml.gemspec
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/attribute_builder.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/attribute_compiler.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/attribute_parser.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/buffer.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/compiler.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/engine.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/error.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/escapable.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/exec.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/filters.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/generator.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/helpers.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/helpers/action_view_extensions.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/helpers/action_view_mods.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/helpers/action_view_xss_mods.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/helpers/safe_erubi_template.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/helpers/safe_erubis_template.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/helpers/xss_mods.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/options.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/parser.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/plugin.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/railtie.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/sass_rails_filter.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/template.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/template/options.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/temple_engine.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/temple_line_counter.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/util.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/lib/haml/version.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.0/yard/default/fulldoc/html/css/common.sass
-- bundle/ruby/2.7.0/gems/haml-5.2.0/yard/default/layout/html/footer.erb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/CHANGELOG.md
+- bundle/ruby/2.7.0/gems/haml-5.2.1/FAQ.md
+- bundle/ruby/2.7.0/gems/haml-5.2.1/Gemfile
+- bundle/ruby/2.7.0/gems/haml-5.2.1/MIT-LICENSE
+- bundle/ruby/2.7.0/gems/haml-5.2.1/README.md
+- bundle/ruby/2.7.0/gems/haml-5.2.1/REFERENCE.md
+- bundle/ruby/2.7.0/gems/haml-5.2.1/TODO
+- bundle/ruby/2.7.0/gems/haml-5.2.1/haml.gemspec
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_builder.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_compiler.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_parser.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/buffer.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/compiler.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/engine.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/error.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/escapable.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/exec.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/filters.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/generator.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_extensions.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_mods.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_xss_mods.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/safe_erubi_template.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/safe_erubis_template.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/xss_mods.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/options.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/parser.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/plugin.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/railtie.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/sass_rails_filter.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/template.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/template/options.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/temple_engine.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/temple_line_counter.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/util.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/version.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.1/yard/default/fulldoc/html/css/common.sass
+- bundle/ruby/2.7.0/gems/haml-5.2.1/yard/default/layout/html/footer.erb
 - bundle/ruby/2.7.0/gems/highline-2.0.3/AUTHORS
 - bundle/ruby/2.7.0/gems/highline-2.0.3/COPYING
 - bundle/ruby/2.7.0/gems/highline-2.0.3/Changelog.md
@@ -132,41 +132,95 @@ files:
 - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/terminal/unix_stty.rb
 - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/version.rb
 - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/wrapper.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/Gemfile
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/LICENSE.txt
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/NEWS.md
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/README.md
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/attlistdecl.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/attribute.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/cdata.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/child.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/comment.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/doctype.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/document.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/dtd/attlistdecl.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/dtd/dtd.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/dtd/elementdecl.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/dtd/entitydecl.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/dtd/notationdecl.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/element.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/encoding.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/entity.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/formatters/default.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/formatters/pretty.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/formatters/transitive.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/functions.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/instruction.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/light/node.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/namespace.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/node.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/output.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parent.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parseexception.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/baseparser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/lightparser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/pullparser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/sax2parser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/streamparser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/treeparser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/ultralightparser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/parsers/xpathparser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/quickpath.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/rexml.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/sax2listener.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/security.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/source.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/streamlistener.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/text.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/undefinednamespaceexception.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/validation/relaxng.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/validation/validation.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/validation/validationexception.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/xmldecl.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/xmltokens.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/xpath.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/lib/rexml/xpath_parser.rb
+- bundle/ruby/2.7.0/gems/rexml-3.2.4/rexml.gemspec
 - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/History.rdoc
 - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/Manifest.txt
 - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/README.rdoc
 - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/lib/ruby2ruby.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/History.rdoc
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/Manifest.txt
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/README.rdoc
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/compare/normalize.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/debugging.md
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/rp_extensions.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/rp_stringscanner.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby20_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby20_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby21_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby21_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby22_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby22_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby23_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby23_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby24_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby24_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby25_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby25_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby26_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby26_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby27_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby27_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby_lexer.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby_lexer.rex
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby_lexer.rex.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby_parser.yy
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/lib/ruby_parser_extras.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/tools/munge.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.15.0/tools/ripper.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/History.rdoc
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/Manifest.txt
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/README.rdoc
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/compare/normalize.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/debugging.md
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/rp_extensions.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/rp_stringscanner.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby20_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby20_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby21_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby21_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby22_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby22_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby23_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby23_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby24_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby24_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby25_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby25_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby26_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby26_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby27_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby27_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby_lexer.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby_lexer.rex
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby_lexer.rex.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby_parser.yy
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/lib/ruby_parser_extras.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/tools/munge.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.15.1/tools/ripper.rb
 - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/History.rdoc
 - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/Manifest.txt
 - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/README.rdoc
@@ -211,16 +265,16 @@ files:
 - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/lib/safe_yaml/version.rb
 - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/run_specs_all_ruby_versions.sh
 - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/safe_yaml.gemspec
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/History.rdoc
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/Manifest.txt
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/README.rdoc
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/lib/composite_sexp_processor.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/lib/pt_testcase.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/lib/sexp.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/lib/sexp_matcher.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/lib/sexp_processor.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/lib/strict_sexp.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.1/lib/unique.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/History.rdoc
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/Manifest.txt
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/README.rdoc
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/lib/composite_sexp_processor.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/lib/pt_testcase.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/lib/sexp.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/lib/sexp_matcher.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/lib/sexp_processor.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/lib/strict_sexp.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.15.2/lib/unique.rb
 - bundle/ruby/2.7.0/gems/slim-4.1.0/CHANGES
 - bundle/ruby/2.7.0/gems/slim-4.1.0/Gemfile
 - bundle/ruby/2.7.0/gems/slim-4.1.0/LICENSE
@@ -572,9 +626,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.4.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubygems_version: 3.1.2
 signing_key: