- Add
:BRAKEMAN_SAFE_LITERAL
to represent known-safe literals - Handle
Array#map
andArray#each
over literal arrays (#1208 / #1224) - Use safe literal when accessing literal hash with unknown key (#1213)
- Allow
symbolize_keys
to be called onparams
in SQL (Jacob Evelyn) - Improve handling of conditionals in shell commands (Jacob Evelyn)
- Avoid deprecated use of ERB in Ruby 2.6 (Koichi ITO)
- Ignore
Object#freeze
, use the target instead (#1211) - Ignore
foreign_key
calls in SQL (#1202) - Handle
included
calls outside of classes/modules (#1209) - Fix error when setting line number in implicit renders (#1210)