brakeman 5.0.4 → 5.1.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (150) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGES.md +40 -1
  3. data/README.md +1 -1
  4. data/bundle/load.rb +5 -4
  5. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/CHANGELOG.md +8 -0
  6. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/FAQ.md +0 -0
  7. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/Gemfile +0 -0
  8. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/MIT-LICENSE +0 -0
  9. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/README.md +19 -13
  10. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/REFERENCE.md +10 -3
  11. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/TODO +0 -0
  12. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/haml.gemspec +0 -0
  13. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/attribute_builder.rb +55 -0
  14. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/attribute_compiler.rb +4 -2
  15. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/attribute_parser.rb +0 -0
  16. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/buffer.rb +0 -56
  17. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/compiler.rb +0 -0
  18. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/engine.rb +0 -0
  19. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/error.rb +0 -0
  20. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/escapable.rb +0 -0
  21. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/exec.rb +0 -0
  22. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/filters.rb +0 -0
  23. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/generator.rb +0 -0
  24. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/helpers/action_view_extensions.rb +0 -0
  25. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/helpers/action_view_mods.rb +0 -0
  26. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/helpers/action_view_xss_mods.rb +0 -0
  27. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/helpers/safe_erubi_template.rb +0 -0
  28. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/helpers/safe_erubis_template.rb +0 -0
  29. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/helpers/xss_mods.rb +0 -0
  30. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/helpers.rb +0 -0
  31. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/options.rb +0 -0
  32. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/parser.rb +0 -0
  33. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/plugin.rb +18 -1
  34. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/railtie.rb +5 -0
  35. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/sass_rails_filter.rb +0 -0
  36. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/template/options.rb +0 -0
  37. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/template.rb +0 -0
  38. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/temple_engine.rb +2 -1
  39. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/temple_line_counter.rb +0 -0
  40. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/util.rb +0 -0
  41. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml/version.rb +1 -1
  42. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/lib/haml.rb +0 -0
  43. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/yard/default/fulldoc/html/css/common.sass +0 -0
  44. data/bundle/ruby/2.7.0/gems/{haml-5.2.1 → haml-5.2.2}/yard/default/layout/html/footer.erb +0 -0
  45. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/MIT-LICENSE.txt +20 -0
  46. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/processor_count.rb +45 -0
  47. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/version.rb +4 -0
  48. data/bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel.rb +532 -0
  49. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/History.rdoc +76 -0
  50. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/Manifest.txt +3 -0
  51. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/README.rdoc +1 -0
  52. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/compare/normalize.rb +6 -1
  53. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/debugging.md +0 -0
  54. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/gauntlet.md +106 -0
  55. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/rp_extensions.rb +15 -36
  56. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/rp_stringscanner.rb +33 -0
  57. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby20_parser.rb +7122 -0
  58. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby20_parser.y +326 -249
  59. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby21_parser.rb +7176 -0
  60. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby21_parser.y +321 -246
  61. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby22_parser.rb +7222 -0
  62. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby22_parser.y +325 -248
  63. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby23_parser.rb +7231 -0
  64. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0/lib/ruby24_parser.y → ruby_parser-3.18.0/lib/ruby23_parser.y} +326 -257
  65. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby24_parser.rb +7262 -0
  66. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0/lib/ruby30_parser.y → ruby_parser-3.18.0/lib/ruby24_parser.y} +327 -302
  67. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby25_parser.rb +7262 -0
  68. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0/lib/ruby26_parser.y → ruby_parser-3.18.0/lib/ruby25_parser.y} +326 -264
  69. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby26_parser.rb +7281 -0
  70. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0/lib/ruby27_parser.y → ruby_parser-3.18.0/lib/ruby26_parser.y} +325 -285
  71. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby27_parser.rb +8511 -0
  72. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0/lib/ruby_parser.yy → ruby_parser-3.18.0/lib/ruby27_parser.y} +897 -377
  73. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby30_parser.rb +8741 -0
  74. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby30_parser.y +3463 -0
  75. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby3_parser.yy +3467 -0
  76. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby_lexer.rb +261 -609
  77. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby_lexer.rex +27 -20
  78. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby_lexer.rex.rb +59 -23
  79. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_lexer_strings.rb +638 -0
  80. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby_parser.rb +0 -0
  81. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_parser.yy +3481 -0
  82. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/lib/ruby_parser_extras.rb +296 -115
  83. data/bundle/ruby/2.7.0/gems/{ruby_parser-3.16.0 → ruby_parser-3.18.0}/tools/munge.rb +34 -6
  84. data/bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/tools/ripper.rb +44 -0
  85. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/History.rdoc +15 -0
  86. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/Manifest.txt +0 -0
  87. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/README.rdoc +0 -0
  88. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/lib/composite_sexp_processor.rb +0 -0
  89. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/lib/pt_testcase.rb +7 -2
  90. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/lib/sexp.rb +19 -9
  91. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/lib/sexp_matcher.rb +0 -0
  92. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/lib/sexp_processor.rb +1 -1
  93. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/lib/strict_sexp.rb +25 -3
  94. data/bundle/ruby/2.7.0/gems/{sexp_processor-4.15.3 → sexp_processor-4.16.0}/lib/unique.rb +0 -0
  95. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/CHANGELOG.md +4 -0
  96. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/MIT-LICENSE.txt +0 -0
  97. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/README.md +1 -1
  98. data/bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/data/display_width.marshal.gz +0 -0
  99. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/lib/unicode/display_width/constants.rb +2 -2
  100. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/lib/unicode/display_width/index.rb +0 -0
  101. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/lib/unicode/display_width/no_string_ext.rb +0 -0
  102. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/lib/unicode/display_width/string_ext.rb +0 -0
  103. data/bundle/ruby/2.7.0/gems/{unicode-display_width-1.7.0 → unicode-display_width-1.8.0}/lib/unicode/display_width.rb +0 -0
  104. data/lib/brakeman/app_tree.rb +1 -1
  105. data/lib/brakeman/checks/check_detailed_exceptions.rb +1 -1
  106. data/lib/brakeman/checks/check_evaluation.rb +1 -1
  107. data/lib/brakeman/checks/check_execute.rb +10 -0
  108. data/lib/brakeman/checks/check_json_parsing.rb +1 -1
  109. data/lib/brakeman/checks/check_render.rb +15 -1
  110. data/lib/brakeman/checks/check_sql.rb +58 -8
  111. data/lib/brakeman/checks/check_verb_confusion.rb +1 -1
  112. data/lib/brakeman/file_parser.rb +45 -15
  113. data/lib/brakeman/options.rb +7 -2
  114. data/lib/brakeman/processors/alias_processor.rb +91 -9
  115. data/lib/brakeman/processors/controller_alias_processor.rb +6 -43
  116. data/lib/brakeman/processors/haml_template_processor.rb +9 -0
  117. data/lib/brakeman/processors/lib/call_conversion_helper.rb +12 -6
  118. data/lib/brakeman/processors/library_processor.rb +9 -0
  119. data/lib/brakeman/processors/model_processor.rb +32 -0
  120. data/lib/brakeman/report/ignore/config.rb +1 -1
  121. data/lib/brakeman/report/ignore/interactive.rb +1 -1
  122. data/lib/brakeman/report/report_csv.rb +1 -1
  123. data/lib/brakeman/report/report_github.rb +31 -0
  124. data/lib/brakeman/report/report_sarif.rb +22 -3
  125. data/lib/brakeman/report/report_text.rb +1 -1
  126. data/lib/brakeman/report.rb +4 -1
  127. data/lib/brakeman/rescanner.rb +1 -1
  128. data/lib/brakeman/scanner.rb +16 -13
  129. data/lib/brakeman/tracker/collection.rb +57 -7
  130. data/lib/brakeman/tracker/method_info.rb +70 -0
  131. data/lib/brakeman/tracker.rb +33 -4
  132. data/lib/brakeman/util.rb +34 -18
  133. data/lib/brakeman/version.rb +1 -1
  134. data/lib/brakeman.rb +8 -2
  135. data/lib/ruby_parser/bm_sexp.rb +24 -0
  136. metadata +103 -94
  137. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/rp_stringscanner.rb +0 -64
  138. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby20_parser.rb +0 -7075
  139. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby21_parser.rb +0 -7148
  140. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby22_parser.rb +0 -7185
  141. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby23_parser.rb +0 -7199
  142. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby23_parser.y +0 -2643
  143. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby24_parser.rb +0 -7219
  144. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby25_parser.rb +0 -7218
  145. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby25_parser.y +0 -2651
  146. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby26_parser.rb +0 -7240
  147. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby27_parser.rb +0 -7358
  148. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby30_parser.rb +0 -7358
  149. data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/tools/ripper.rb +0 -39
  150. data/bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/data/display_width.marshal.gz +0 -0
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: brakeman
3
3
  version: !ruby/object:Gem::Version
4
- version: 5.0.4
4
+ version: 5.1.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Justin Collins
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-06-08 00:00:00.000000000 Z
11
+ date: 2021-10-28 00:00:00.000000000 Z
12
12
  dependencies: []
13
13
  description: Brakeman detects security vulnerabilities in Ruby on Rails applications
14
14
  via static analysis.
@@ -56,46 +56,46 @@ files:
56
56
  - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/tiny.rb
57
57
  - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/util.rb
58
58
  - bundle/ruby/2.7.0/gems/erubis-2.7.0/setup.rb
59
- - bundle/ruby/2.7.0/gems/haml-5.2.1/CHANGELOG.md
60
- - bundle/ruby/2.7.0/gems/haml-5.2.1/FAQ.md
61
- - bundle/ruby/2.7.0/gems/haml-5.2.1/Gemfile
62
- - bundle/ruby/2.7.0/gems/haml-5.2.1/MIT-LICENSE
63
- - bundle/ruby/2.7.0/gems/haml-5.2.1/README.md
64
- - bundle/ruby/2.7.0/gems/haml-5.2.1/REFERENCE.md
65
- - bundle/ruby/2.7.0/gems/haml-5.2.1/TODO
66
- - bundle/ruby/2.7.0/gems/haml-5.2.1/haml.gemspec
67
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml.rb
68
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_builder.rb
69
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_compiler.rb
70
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_parser.rb
71
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/buffer.rb
72
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/compiler.rb
73
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/engine.rb
74
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/error.rb
75
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/escapable.rb
76
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/exec.rb
77
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/filters.rb
78
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/generator.rb
79
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers.rb
80
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_extensions.rb
81
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_mods.rb
82
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_xss_mods.rb
83
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/safe_erubi_template.rb
84
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/safe_erubis_template.rb
85
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/xss_mods.rb
86
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/options.rb
87
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/parser.rb
88
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/plugin.rb
89
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/railtie.rb
90
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/sass_rails_filter.rb
91
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/template.rb
92
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/template/options.rb
93
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/temple_engine.rb
94
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/temple_line_counter.rb
95
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/util.rb
96
- - bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/version.rb
97
- - bundle/ruby/2.7.0/gems/haml-5.2.1/yard/default/fulldoc/html/css/common.sass
98
- - bundle/ruby/2.7.0/gems/haml-5.2.1/yard/default/layout/html/footer.erb
59
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/CHANGELOG.md
60
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/FAQ.md
61
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/Gemfile
62
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/MIT-LICENSE
63
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/README.md
64
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/REFERENCE.md
65
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/TODO
66
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/haml.gemspec
67
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml.rb
68
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_builder.rb
69
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_compiler.rb
70
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_parser.rb
71
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/buffer.rb
72
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/compiler.rb
73
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/engine.rb
74
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/error.rb
75
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/escapable.rb
76
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/exec.rb
77
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/filters.rb
78
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/generator.rb
79
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers.rb
80
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_extensions.rb
81
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_mods.rb
82
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_xss_mods.rb
83
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/safe_erubi_template.rb
84
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/safe_erubis_template.rb
85
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/xss_mods.rb
86
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/options.rb
87
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/parser.rb
88
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/plugin.rb
89
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/railtie.rb
90
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/sass_rails_filter.rb
91
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/template.rb
92
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/template/options.rb
93
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/temple_engine.rb
94
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/temple_line_counter.rb
95
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/util.rb
96
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/version.rb
97
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/yard/default/fulldoc/html/css/common.sass
98
+ - bundle/ruby/2.7.0/gems/haml-5.2.2/yard/default/layout/html/footer.erb
99
99
  - bundle/ruby/2.7.0/gems/highline-2.0.3/AUTHORS
100
100
  - bundle/ruby/2.7.0/gems/highline-2.0.3/COPYING
101
101
  - bundle/ruby/2.7.0/gems/highline-2.0.3/Changelog.md
@@ -132,6 +132,10 @@ files:
132
132
  - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/terminal/unix_stty.rb
133
133
  - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/version.rb
134
134
  - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/wrapper.rb
135
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/MIT-LICENSE.txt
136
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel.rb
137
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/processor_count.rb
138
+ - bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/version.rb
135
139
  - bundle/ruby/2.7.0/gems/rexml-3.2.5/LICENSE.txt
136
140
  - bundle/ruby/2.7.0/gems/rexml-3.2.5/NEWS.md
137
141
  - bundle/ruby/2.7.0/gems/rexml-3.2.5/README.md
@@ -189,39 +193,42 @@ files:
189
193
  - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/Manifest.txt
190
194
  - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/README.rdoc
191
195
  - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/lib/ruby2ruby.rb
192
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/History.rdoc
193
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/Manifest.txt
194
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/README.rdoc
195
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/compare/normalize.rb
196
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/debugging.md
197
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/rp_extensions.rb
198
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/rp_stringscanner.rb
199
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby20_parser.rb
200
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby20_parser.y
201
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby21_parser.rb
202
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby21_parser.y
203
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby22_parser.rb
204
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby22_parser.y
205
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby23_parser.rb
206
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby23_parser.y
207
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby24_parser.rb
208
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby24_parser.y
209
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby25_parser.rb
210
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby25_parser.y
211
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby26_parser.rb
212
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby26_parser.y
213
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby27_parser.rb
214
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby27_parser.y
215
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby30_parser.rb
216
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby30_parser.y
217
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_lexer.rb
218
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_lexer.rex
219
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_lexer.rex.rb
220
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_parser.rb
221
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_parser.yy
222
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_parser_extras.rb
223
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/tools/munge.rb
224
- - bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/tools/ripper.rb
196
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/History.rdoc
197
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/Manifest.txt
198
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/README.rdoc
199
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/compare/normalize.rb
200
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/debugging.md
201
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/gauntlet.md
202
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/rp_extensions.rb
203
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/rp_stringscanner.rb
204
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby20_parser.rb
205
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby20_parser.y
206
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby21_parser.rb
207
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby21_parser.y
208
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby22_parser.rb
209
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby22_parser.y
210
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby23_parser.rb
211
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby23_parser.y
212
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby24_parser.rb
213
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby24_parser.y
214
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby25_parser.rb
215
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby25_parser.y
216
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby26_parser.rb
217
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby26_parser.y
218
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby27_parser.rb
219
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby27_parser.y
220
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby30_parser.rb
221
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby30_parser.y
222
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby3_parser.yy
223
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_lexer.rb
224
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_lexer.rex
225
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_lexer.rex.rb
226
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_lexer_strings.rb
227
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_parser.rb
228
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_parser.yy
229
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/lib/ruby_parser_extras.rb
230
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/tools/munge.rb
231
+ - bundle/ruby/2.7.0/gems/ruby_parser-3.18.0/tools/ripper.rb
225
232
  - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/History.rdoc
226
233
  - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/Manifest.txt
227
234
  - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/README.rdoc
@@ -266,16 +273,16 @@ files:
266
273
  - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/lib/safe_yaml/version.rb
267
274
  - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/run_specs_all_ruby_versions.sh
268
275
  - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/safe_yaml.gemspec
269
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/History.rdoc
270
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/Manifest.txt
271
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/README.rdoc
272
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/composite_sexp_processor.rb
273
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/pt_testcase.rb
274
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/sexp.rb
275
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/sexp_matcher.rb
276
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/sexp_processor.rb
277
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/strict_sexp.rb
278
- - bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/unique.rb
276
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/History.rdoc
277
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/Manifest.txt
278
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/README.rdoc
279
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/composite_sexp_processor.rb
280
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/pt_testcase.rb
281
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp.rb
282
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp_matcher.rb
283
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp_processor.rb
284
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/strict_sexp.rb
285
+ - bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/unique.rb
279
286
  - bundle/ruby/2.7.0/gems/slim-4.1.0/CHANGES
280
287
  - bundle/ruby/2.7.0/gems/slim-4.1.0/Gemfile
281
288
  - bundle/ruby/2.7.0/gems/slim-4.1.0/LICENSE
@@ -418,15 +425,15 @@ files:
418
425
  - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/typescript.rb
419
426
  - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/wikicloth.rb
420
427
  - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/yajl.rb
421
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/CHANGELOG.md
422
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/MIT-LICENSE.txt
423
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/README.md
424
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/data/display_width.marshal.gz
425
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width.rb
426
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/constants.rb
427
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/index.rb
428
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/no_string_ext.rb
429
- - bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/string_ext.rb
428
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/CHANGELOG.md
429
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/MIT-LICENSE.txt
430
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/README.md
431
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/data/display_width.marshal.gz
432
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width.rb
433
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/constants.rb
434
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/index.rb
435
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/no_string_ext.rb
436
+ - bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/string_ext.rb
430
437
  - lib/brakeman.rb
431
438
  - lib/brakeman/app_tree.rb
432
439
  - lib/brakeman/call_index.rb
@@ -568,6 +575,7 @@ files:
568
575
  - lib/brakeman/report/report_base.rb
569
576
  - lib/brakeman/report/report_codeclimate.rb
570
577
  - lib/brakeman/report/report_csv.rb
578
+ - lib/brakeman/report/report_github.rb
571
579
  - lib/brakeman/report/report_hash.rb
572
580
  - lib/brakeman/report/report_html.rb
573
581
  - lib/brakeman/report/report_json.rb
@@ -597,6 +605,7 @@ files:
597
605
  - lib/brakeman/tracker/constants.rb
598
606
  - lib/brakeman/tracker/controller.rb
599
607
  - lib/brakeman/tracker/library.rb
608
+ - lib/brakeman/tracker/method_info.rb
600
609
  - lib/brakeman/tracker/model.rb
601
610
  - lib/brakeman/tracker/template.rb
602
611
  - lib/brakeman/util.rb
@@ -1,64 +0,0 @@
1
- require "strscan"
2
-
3
- class RPStringScanner < StringScanner
4
- # if ENV['TALLY'] then
5
- # alias :old_getch :getch
6
- # def getch
7
- # warn({:getch => caller[0]}.inspect)
8
- # old_getch
9
- # end
10
- # end
11
-
12
- if "".respond_to? :encoding then
13
- if "".respond_to? :byteslice then
14
- def string_to_pos
15
- string.byteslice(0, pos)
16
- end
17
- else
18
- def string_to_pos
19
- string.bytes.first(pos).pack("c*").force_encoding(string.encoding)
20
- end
21
- end
22
-
23
- def charpos
24
- string_to_pos.length
25
- end
26
- else
27
- alias :charpos :pos
28
-
29
- def string_to_pos
30
- string[0..pos]
31
- end
32
- end
33
-
34
- def unread_many str # TODO: remove this entirely - we should not need it
35
- warn({:unread_many => caller[0]}.inspect) if ENV['TALLY']
36
- begin
37
- string[charpos, 0] = str
38
- rescue IndexError
39
- # HACK -- this is a bandaid on a dirty rag on an open festering wound
40
- end
41
- end
42
-
43
- if ENV['DEBUG'] then
44
- alias :old_getch :getch
45
- def getch
46
- c = self.old_getch
47
- p :getch => [c, caller.first]
48
- c
49
- end
50
-
51
- alias :old_scan :scan
52
- def scan re
53
- s = old_scan re
54
- where = caller[1].split(/:/).first(2).join(":")
55
- d :scan => [s, where] if s
56
- s
57
- end
58
- end
59
-
60
- def d o
61
- $stderr.puts o.inspect
62
- end
63
- end
64
-