brakeman 0.8.2 → 0.8.3

data/bin/brakeman

@@ -59,6 +59,10 @@ OptionParser.new do |opts|
     options[:safe_methods].merge methods.map {|e| e.to_sym }
   end
 
+  opts.on "--skip-libs", "Skip processing lib directory" do
+    options[:skip_libs] = true
+  end
+
   opts.on "-t", "--test Check1,Check2,etc", Array, "Only run the specified checks" do |checks|
     checks.each_with_index do |s, index|
       if s[0,5] != "Check"

data/lib/report.rb

@@ -70,8 +70,15 @@ class Report
   def generate_errors
     unless tracker.errors.empty?
       table = Ruport::Data::Table(["Error", "Location"])
+      
+     
       tracker.errors.each do |w|
         p w if OPTIONS[:debug]
+
+        if OPTIONS[:output_format] == :to_html
+          w[:error] = CGI.escapeHTML w[:error]
+        end
+
         table << { "Error" => w[:error], "Location" => w[:backtrace][0] }
       end
 
@@ -275,7 +282,7 @@ class Report
 
     res = generate_errors
     if res
-        out << "<div onClick=\"toggle('errors_table');\">  <h2>Exceptions raised during the analysis (click to see them)</h2 ></div> <div id='errors_table' style='display:none'>" << res.to_html<< '</div>'
+        out << "<div onClick=\"toggle('errors_table');\">  <h2>Exceptions raised during the analysis (click to see them)</h2 ></div> <div id='errors_table' style='display:none'>" << res.to_html << '</div>'
     end
 
     res = generate_warnings
@@ -647,6 +654,7 @@ class Report
       [:model_warnings, "Model"], [:template_warnings, "Template"]].map do |meth, category|
 
       checks.send(meth).map do |w|
+        next if w.confidence > OPTIONS[:min_confidence]
         line = w.line || 0
         w.warning_type.gsub!(/[^\w\s]/, ' ')
         "#{file_for w}\t#{line}\t#{w.warning_type}\t#{category}\t#{w.format_message}\t#{TEXT_CONFIDENCE[w.confidence]}"

data/lib/scanner.rb

@@ -113,6 +113,11 @@ class Scanner
   #
   #Adds parsed information to tracker.libs.
   def process_libs
+    if OPTIONS[:skip_libs]
+      warn '[Skipping]'
+      return
+    end
+
     Dir.glob(@path + "/lib/**/*.rb").sort.each do |f|
       begin
         @processor.process_lib RubyParser.new.parse(File.read(f)), f

data/lib/version.rb

@@ -1 +1 @@
-Version = "0.8.2"
+Version = "0.8.3"

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: brakeman
 version: !ruby/object:Gem::Version 
-  hash: 59
+  hash: 57
   prerelease: 
   segments: 
   - 0
   - 8
-  - 2
-  version: 0.8.2
+  - 3
+  version: 0.8.3
 platform: ruby
 authors: 
 - Justin Collins
@@ -15,7 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2011-09-30 00:00:00 -07:00
+date: 2011-10-25 00:00:00 -07:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency 
@@ -50,9 +50,25 @@ dependencies:
   type: :runtime
   version_requirements: *id002
 - !ruby/object:Gem::Dependency 
-  name: ruport
+  name: ruby_parser
   prerelease: false
   requirement: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 2
+        - 3
+        - 0
+        version: 2.3.0
+  type: :runtime
+  version_requirements: *id003
+- !ruby/object:Gem::Dependency 
+  name: ruport
+  prerelease: false
+  requirement: &id004 !ruby/object:Gem::Requirement 
     none: false
     requirements: 
     - - ~>
@@ -64,11 +80,11 @@ dependencies:
         - 3
         version: 1.6.3
   type: :runtime
-  version_requirements: *id003
+  version_requirements: *id004
 - !ruby/object:Gem::Dependency 
   name: erubis
   prerelease: false
-  requirement: &id004 !ruby/object:Gem::Requirement 
+  requirement: &id005 !ruby/object:Gem::Requirement 
     none: false
     requirements: 
     - - ~>
@@ -80,11 +96,11 @@ dependencies:
         - 5
         version: 2.6.5
   type: :runtime
-  version_requirements: *id004
+  version_requirements: *id005
 - !ruby/object:Gem::Dependency 
   name: haml
   prerelease: false
-  requirement: &id005 !ruby/object:Gem::Requirement 
+  requirement: &id006 !ruby/object:Gem::Requirement 
     none: false
     requirements: 
     - - ~>
@@ -96,7 +112,7 @@ dependencies:
         - 12
         version: 3.0.12
   type: :runtime
-  version_requirements: *id005
+  version_requirements: *id006
 description: Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis.
 email: 
 executables: