--exit-on-warn
is now the default (#852)--exit-on-error
is now the default (#1083)- "Plain" report output is now the default
- Add simple pager for reports output to terminal
- Remove low confidence mass assignment warnings
- Reduce warnings about XSS in
link_to
- Treat
request.cookies
likecookies
(#1090) - Treat
fail
/raise
like early returns (#754) - Rename "Cross Site Scripting" to "Cross-Site Scripting" (Paul Tetreau)
- Remove reliance on
CONFIDENCE
constant in checks - Fix
--exit-on-error
and--exit-on-warn
in config files