Support keyword arguments in blocks

fixes #511

Nonexistent CVE

CVE_2012_2931 is a non-existent CVE and confirmed to be a mistake.

Fix redirect false positive with chained call

Conflicts:
	test/tests/rails4.rb

Add check for CVE-2014-0130

Read/parse files up front

and cleanup reading/parsing files in general

Ignore branches when assigning via +=

* Update to use RubyParser 3.5.0 (Patrick Toomey)
* Improve default route detection in Rails 3/4 (Jeff Jarmoc)
* Handle controllers and models split across files (Patrick Toomey)
* Fix handling of `protected_attributes` gem in Rails 4 (Geoffrey
* Hichborn)
* Ignore more model methods in redirects
* Fix CheckRender with nested render calls

Merge pull request #492

Improve route checking for HTTP verb routes.

bump ruby_parser to 3.5.0 to support ruby 2.1 syntax

Process controllers defined in multiple files

Option documentation updates

Add more Rails 4 model methods in redirect check

Fixed treatment of protected_attributes gem for Rails 4

as mentioned in #486

Fix CheckRender error with nested render calls

Fixes #484

This reverts commit 5f788264.