Skip duplicate sanitize CVE warnings

 * Reuse duplicate call location information
 * Only track original template output locations
 * Skip identically rendered templates
 * Fix HAML template processing

Reuse call locations in CallIndex

Only store original template outputs

Ignore identically rendered templates

Fix HAML template processing

 * Detect Rails LTS versions
 * Reduce false positives for SQL injection in string building
 * More accurate user input marking for SQL injection warnings
 * Detect SQL injection in `delete_all`/`destroy_all`
 * Detect SQL injection raw SQL queries using `connection`
 * Update to RubyParser 3.4.0

Better handling of SQL strings and fewer false positives

Add support for RailsLTS versions

Conflicts:
	lib/brakeman/checks/check_sql.rb

in SQL queries

Also catch #connection calls on ActiveRecord::Base

Expand methods checked for SQLi significantly

include methods on #connection and delete_all/destroy_all
Fixes #434

fixes #422

* Parse exact versions from Gemfile.lock for all gems

Get all gem versions from Gemfile.lock

instead of just a few. Should fix #431

Ignore non-string gem names in Gemfile

 * Ignore generators
 * Update to RubyParser 3.3.0

Ignore generators

especially since they are often ERB, not Ruby files even though they have
an .rb extension.