brakeman 5.0.4 → 5.2.1

data/lib/brakeman.rb

@@ -65,6 +65,7 @@ module Brakeman
   #  * :report_routes - show found routes on controllers (default: false)
   #  * :run_checks - array of checks to run (run all if not specified)
   #  * :safe_methods - array of methods to consider safe
+  #  * :sql_safe_methods - array of sql sanitization methods to consider safe
   #  * :skip_libs - do not process lib/ directory (default: false)
   #  * :skip_vendor - do not process vendor/ directory (default: true)
   #  * :skip_checks - checks not to run (run all if not specified)
@@ -198,6 +199,7 @@ module Brakeman
       :relative_path => false,
       :report_progress => true,
       :safe_methods => Set.new,
+      :sql_safe_methods => Set.new,
       :skip_checks => Set.new,
       :skip_vendor => true,
     }
@@ -250,6 +252,8 @@ module Brakeman
       [:to_sarif]
     when :sonar, :to_sonar
       [:to_sonar]
+    when :github, :to_github
+      [:to_github]
     else
       [:to_text]
     end
@@ -283,6 +287,8 @@ module Brakeman
         :to_sarif
       when /\.sonar$/i
         :to_sonar
+      when /\.github$/i
+        :to_github
       else
         :to_text
       end
@@ -388,7 +394,7 @@ module Brakeman
     if options[:parallel_checks]
       notify "Running checks in parallel..."
     else
-      notify "Runnning checks..."
+      notify "Running checks..."
     end
 
     tracker.run_checks
@@ -473,7 +479,7 @@ module Brakeman
     $stderr.puts message if @debug
   end
 
-  # Compare JSON ouptut from a previous scan and return the diff of the two scans
+  # Compare JSON output from a previous scan and return the diff of the two scans
   def self.compare options
     require 'json'
     require 'brakeman/differ'

data/lib/ruby_parser/bm_sexp.rb

@@ -543,6 +543,20 @@ class Sexp
     self.body.unshift :rlist
   end
 
+  # Number of "statements" in a method.
+  # This is more efficient than `Sexp#body.length`
+  # because `Sexp#body` creates a new Sexp.
+  def method_length
+    expect :defn, :defs
+
+    case self.node_type
+    when :defn
+      self.length - 3
+    when :defs
+      self.length - 4
+    end
+  end
+
   def render_type
     expect :render
     self[1]
@@ -628,4 +642,14 @@ end
   RUBY
 end
 
+class String
+  ##
+  # This is a hack used by the lexer to sneak in line numbers at the
+  # identifier level. This should be MUCH smaller than making
+  # process_token return [value, lineno] and modifying EVERYTHING that
+  # reduces tIDENTIFIER.
+
+  attr_accessor :lineno
+end
+
 class WrongSexpError < RuntimeError; end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: brakeman
 version: !ruby/object:Gem::Version
-  version: 5.0.4
+  version: 5.2.1
 platform: ruby
 authors:
 - Justin Collins
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-08 00:00:00.000000000 Z
+date: 2022-01-30 00:00:00.000000000 Z
 dependencies: []
 description: Brakeman detects security vulnerabilities in Ruby on Rails applications
   via static analysis.
@@ -56,46 +56,46 @@ files:
 - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/tiny.rb
 - bundle/ruby/2.7.0/gems/erubis-2.7.0/lib/erubis/util.rb
 - bundle/ruby/2.7.0/gems/erubis-2.7.0/setup.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/CHANGELOG.md
-- bundle/ruby/2.7.0/gems/haml-5.2.1/FAQ.md
-- bundle/ruby/2.7.0/gems/haml-5.2.1/Gemfile
-- bundle/ruby/2.7.0/gems/haml-5.2.1/MIT-LICENSE
-- bundle/ruby/2.7.0/gems/haml-5.2.1/README.md
-- bundle/ruby/2.7.0/gems/haml-5.2.1/REFERENCE.md
-- bundle/ruby/2.7.0/gems/haml-5.2.1/TODO
-- bundle/ruby/2.7.0/gems/haml-5.2.1/haml.gemspec
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_builder.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_compiler.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/attribute_parser.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/buffer.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/compiler.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/engine.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/error.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/escapable.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/exec.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/filters.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/generator.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_extensions.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_mods.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/action_view_xss_mods.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/safe_erubi_template.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/safe_erubis_template.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/helpers/xss_mods.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/options.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/parser.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/plugin.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/railtie.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/sass_rails_filter.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/template.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/template/options.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/temple_engine.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/temple_line_counter.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/util.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/lib/haml/version.rb
-- bundle/ruby/2.7.0/gems/haml-5.2.1/yard/default/fulldoc/html/css/common.sass
-- bundle/ruby/2.7.0/gems/haml-5.2.1/yard/default/layout/html/footer.erb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/CHANGELOG.md
+- bundle/ruby/2.7.0/gems/haml-5.2.2/FAQ.md
+- bundle/ruby/2.7.0/gems/haml-5.2.2/Gemfile
+- bundle/ruby/2.7.0/gems/haml-5.2.2/MIT-LICENSE
+- bundle/ruby/2.7.0/gems/haml-5.2.2/README.md
+- bundle/ruby/2.7.0/gems/haml-5.2.2/REFERENCE.md
+- bundle/ruby/2.7.0/gems/haml-5.2.2/TODO
+- bundle/ruby/2.7.0/gems/haml-5.2.2/haml.gemspec
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_builder.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_compiler.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/attribute_parser.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/buffer.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/compiler.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/engine.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/error.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/escapable.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/exec.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/filters.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/generator.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_extensions.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_mods.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/action_view_xss_mods.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/safe_erubi_template.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/safe_erubis_template.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/helpers/xss_mods.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/options.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/parser.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/plugin.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/railtie.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/sass_rails_filter.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/template.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/template/options.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/temple_engine.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/temple_line_counter.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/util.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/lib/haml/version.rb
+- bundle/ruby/2.7.0/gems/haml-5.2.2/yard/default/fulldoc/html/css/common.sass
+- bundle/ruby/2.7.0/gems/haml-5.2.2/yard/default/layout/html/footer.erb
 - bundle/ruby/2.7.0/gems/highline-2.0.3/AUTHORS
 - bundle/ruby/2.7.0/gems/highline-2.0.3/COPYING
 - bundle/ruby/2.7.0/gems/highline-2.0.3/Changelog.md
@@ -132,6 +132,10 @@ files:
 - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/terminal/unix_stty.rb
 - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/version.rb
 - bundle/ruby/2.7.0/gems/highline-2.0.3/lib/highline/wrapper.rb
+- bundle/ruby/2.7.0/gems/parallel-1.21.0/MIT-LICENSE.txt
+- bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel.rb
+- bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/processor_count.rb
+- bundle/ruby/2.7.0/gems/parallel-1.21.0/lib/parallel/version.rb
 - bundle/ruby/2.7.0/gems/rexml-3.2.5/LICENSE.txt
 - bundle/ruby/2.7.0/gems/rexml-3.2.5/NEWS.md
 - bundle/ruby/2.7.0/gems/rexml-3.2.5/README.md
@@ -189,39 +193,42 @@ files:
 - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/Manifest.txt
 - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/README.rdoc
 - bundle/ruby/2.7.0/gems/ruby2ruby-2.4.4/lib/ruby2ruby.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/History.rdoc
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/Manifest.txt
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/README.rdoc
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/compare/normalize.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/debugging.md
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/rp_extensions.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/rp_stringscanner.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby20_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby20_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby21_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby21_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby22_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby22_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby23_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby23_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby24_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby24_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby25_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby25_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby26_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby26_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby27_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby27_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby30_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby30_parser.y
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_lexer.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_lexer.rex
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_lexer.rex.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_parser.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_parser.yy
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/ruby_parser_extras.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/tools/munge.rb
-- bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/tools/ripper.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/History.rdoc
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/Manifest.txt
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/README.rdoc
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/compare/normalize.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/debugging.md
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/gauntlet.md
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/rp_extensions.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/rp_stringscanner.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby20_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby20_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby21_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby21_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby22_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby22_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby23_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby23_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby24_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby24_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby25_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby25_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby26_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby26_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby27_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby27_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby30_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby30_parser.y
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby3_parser.yy
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer.rex
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer.rex.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_lexer_strings.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_parser.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_parser.yy
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/lib/ruby_parser_extras.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/tools/munge.rb
+- bundle/ruby/2.7.0/gems/ruby_parser-3.18.1/tools/ripper.rb
 - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/History.rdoc
 - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/Manifest.txt
 - bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/README.rdoc
@@ -266,16 +273,16 @@ files:
 - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/lib/safe_yaml/version.rb
 - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/run_specs_all_ruby_versions.sh
 - bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/safe_yaml.gemspec
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/History.rdoc
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/Manifest.txt
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/README.rdoc
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/composite_sexp_processor.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/pt_testcase.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/sexp.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/sexp_matcher.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/sexp_processor.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/strict_sexp.rb
-- bundle/ruby/2.7.0/gems/sexp_processor-4.15.3/lib/unique.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/History.rdoc
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/Manifest.txt
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/README.rdoc
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/composite_sexp_processor.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/pt_testcase.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp_matcher.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/sexp_processor.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/strict_sexp.rb
+- bundle/ruby/2.7.0/gems/sexp_processor-4.16.0/lib/unique.rb
 - bundle/ruby/2.7.0/gems/slim-4.1.0/CHANGES
 - bundle/ruby/2.7.0/gems/slim-4.1.0/Gemfile
 - bundle/ruby/2.7.0/gems/slim-4.1.0/LICENSE
@@ -418,15 +425,15 @@ files:
 - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/typescript.rb
 - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/wikicloth.rb
 - bundle/ruby/2.7.0/gems/tilt-2.0.10/lib/tilt/yajl.rb
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/CHANGELOG.md
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/MIT-LICENSE.txt
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/README.md
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/data/display_width.marshal.gz
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width.rb
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/constants.rb
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/index.rb
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/no_string_ext.rb
-- bundle/ruby/2.7.0/gems/unicode-display_width-1.7.0/lib/unicode/display_width/string_ext.rb
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/CHANGELOG.md
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/MIT-LICENSE.txt
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/README.md
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/data/display_width.marshal.gz
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width.rb
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/constants.rb
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/index.rb
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/no_string_ext.rb
+- bundle/ruby/2.7.0/gems/unicode-display_width-1.8.0/lib/unicode/display_width/string_ext.rb
 - lib/brakeman.rb
 - lib/brakeman/app_tree.rb
 - lib/brakeman/call_index.rb
@@ -445,6 +452,8 @@ files:
 - lib/brakeman/checks/check_digest_dos.rb
 - lib/brakeman/checks/check_divide_by_zero.rb
 - lib/brakeman/checks/check_dynamic_finders.rb
+- lib/brakeman/checks/check_eol_rails.rb
+- lib/brakeman/checks/check_eol_ruby.rb
 - lib/brakeman/checks/check_escape_function.rb
 - lib/brakeman/checks/check_evaluation.rb
 - lib/brakeman/checks/check_execute.rb
@@ -511,6 +520,7 @@ files:
 - lib/brakeman/checks/check_without_protection.rb
 - lib/brakeman/checks/check_xml_dos.rb
 - lib/brakeman/checks/check_yaml_parsing.rb
+- lib/brakeman/checks/eol_check.rb
 - lib/brakeman/codeclimate/engine_configuration.rb
 - lib/brakeman/commandline.rb
 - lib/brakeman/differ.rb
@@ -568,6 +578,7 @@ files:
 - lib/brakeman/report/report_base.rb
 - lib/brakeman/report/report_codeclimate.rb
 - lib/brakeman/report/report_csv.rb
+- lib/brakeman/report/report_github.rb
 - lib/brakeman/report/report_hash.rb
 - lib/brakeman/report/report_html.rb
 - lib/brakeman/report/report_json.rb
@@ -597,6 +608,7 @@ files:
 - lib/brakeman/tracker/constants.rb
 - lib/brakeman/tracker/controller.rb
 - lib/brakeman/tracker/library.rb
+- lib/brakeman/tracker/method_info.rb
 - lib/brakeman/tracker/model.rb
 - lib/brakeman/tracker/template.rb
 - lib/brakeman/util.rb
@@ -624,7 +636,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.4.0
+      version: 2.5.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="

data/bundle/ruby/2.7.0/gems/ruby_parser-3.16.0/lib/rp_stringscanner.rb

@@ -1,64 +0,0 @@
-require "strscan"
-
-class RPStringScanner < StringScanner
-#   if ENV['TALLY'] then
-#     alias :old_getch :getch
-#     def getch
-#       warn({:getch => caller[0]}.inspect)
-#       old_getch
-#     end
-#   end
-
-  if "".respond_to? :encoding then
-    if "".respond_to? :byteslice then
-      def string_to_pos
-        string.byteslice(0, pos)
-      end
-    else
-      def string_to_pos
-        string.bytes.first(pos).pack("c*").force_encoding(string.encoding)
-      end
-    end
-
-    def charpos
-      string_to_pos.length
-    end
-  else
-    alias :charpos :pos
-
-    def string_to_pos
-      string[0..pos]
-    end
-  end
-
-  def unread_many str # TODO: remove this entirely - we should not need it
-    warn({:unread_many => caller[0]}.inspect) if ENV['TALLY']
-    begin
-      string[charpos, 0] = str
-    rescue IndexError
-      # HACK -- this is a bandaid on a dirty rag on an open festering wound
-    end
-  end
-
-  if ENV['DEBUG'] then
-    alias :old_getch :getch
-    def getch
-      c = self.old_getch
-      p :getch => [c, caller.first]
-      c
-    end
-
-    alias :old_scan :scan
-    def scan re
-      s = old_scan re
-      where = caller[1].split(/:/).first(2).join(":")
-      d :scan => [s, where] if s
-      s
-    end
-  end
-
-  def d o
-    $stderr.puts o.inspect
-  end
-end
-