From 5d8d39550c2bb38ba7cc61e958c569605b36cae7 Mon Sep 17 00:00:00 2001 From: Justin Collins Date: Mon, 9 Mar 2015 00:48:56 -0700 Subject: [PATCH] Update CHANGES * Avoid warning about mass assignment with string literals * Only report original regex DoS locations * Improve render path information implementation * Report correct file for simple_format usage CVE warning * Remove URI.escape from HTML reports with GitHub repos * Update ruby_parser to ~> 3.6.2 * Remove formatting newlines in HAML template output * Ignore case value in XSS checks * Fix CSV output when there are no warnings * Handle processing of explictly shadowed block arguments --- CHANGES | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/CHANGES b/CHANGES index 62b5246d..c8fa70ad 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,16 @@ +# Unreleased + +* Avoid warning about mass assignment with string literals +* Only report original regex DoS locations +* Improve render path information implementation +* Report correct file for simple_format usage CVE warning +* Remove URI.escape from HTML reports with GitHub repos +* Update ruby_parser to ~> 3.6.2 +* Remove formatting newlines in HAML template output +* Ignore case value in XSS checks +* Fix CSV output when there are no warnings +* Handle processing of explictly shadowed block arguments + # 3.0.1 * Avoid protect_from_forgery warning unless ApplicationController inherits from ActionController::Base -- GitLab