- Warn about SQL injection even if target is not known ActiveRecord model
- Avoid warning about models as SQL injection (#655, #680, #833)
- Avoid warning about SQLi in
all,first, orlastafter Rails 4.0 - Treat templates without
.htmlas HTML anyway (#790) - Report check name in JSON and plain reports (#971)
- Add
--ensure-latestoption (tamgrosser / Michael Grosser) - Add
--no-summaryto hide summaries in HTML/text reports (#963) - Fail on invalid checks specified by
-xor-t(#970) - Handle
includedblock in concerns (#958) - Updated RubyParser/Ruby2Ruby dependencies